
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json)
Hash identifier: qG7tha/eVey/9hnntYIVDZkTJxnv/XFYNGHnMITPn78=
Subject key identifier: 8F:20:E9:72:C6:2F:47:60:97:70:29:9B:52:E6:A6:9C:5B:E2:7D:7F
Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
Manifest number: 01C8
Signing time: Sun 05 Jul 2026 04:21:55 +0000
Manifest this update: Sun 05 Jul 2026 04:21:54 +0000
Manifest next update: Sun 12 Jul 2026 04:21:54 +0000
Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: Ie64jrAnUSmI6ECuZzALMtkNXx4WS7IT9xuTQ9Dlyno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 04:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Validity
Not Before: Jul 5 04:21:54 2026 GMT
Not After : Jul 12 04:21:54 2026 GMT
Subject: CN=6a49dbe3-8eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:12:8a:37:b9:48:df:df:47:73:6d:db:ca:
33:d6:dd:1c:1f:e1:48:41:45:c5:18:27:b6:b3:76:
d2:e3:0d:07:a0:1f:a8:1f:90:44:52:b0:3d:eb:36:
ba:81:12:70:c1:bc:f0:29:35:41:84:b4:d1:17:87:
49:0d:a2:52:be:12:83:0f:0b:c9:7f:80:33:fa:f6:
66:64:74:9e:c4:1f:87:a1:5c:4f:e9:37:53:70:4f:
3c:31:81:78:2a:25:71:b3:ef:f3:fe:48:41:68:7b:
f3:4e:0a:4a:c9:b9:b6:9a:14:81:08:64:cc:0f:65:
e2:42:8d:93:da:7f:94:55:55:e9:b7:55:46:62:99:
8a:0b:c6:04:9b:61:cf:5f:e2:1f:b3:bd:b3:2c:69:
1e:e8:0b:ad:1d:06:59:8e:12:cb:22:38:52:64:bf:
c0:79:fa:93:fd:3a:a4:7c:78:88:d5:6e:98:0e:09:
50:3b:c2:69:e0:59:f1:d1:af:2d:c2:2e:88:58:d1:
79:54:33:d8:7b:08:e2:1b:df:9a:e5:5e:db:68:06:
cf:e9:73:39:f3:a6:3c:e8:01:22:c0:64:66:e4:62:
3b:3b:c0:4c:33:f5:c7:f2:43:f7:29:b3:16:04:2f:
fe:5d:e8:ba:26:07:3d:e6:2b:0b:ae:00:a9:53:ac:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:E9:72:C6:2F:47:60:97:70:29:9B:52:E6:A6:9C:5B:E2:7D:7F
X509v3 Authority Key Identifier:
keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:fe:0b:d3:2e:8e:41:af:f5:99:ad:a5:4a:e2:14:f8:85:
11:04:27:c9:4c:a7:a4:7f:87:72:70:e9:f7:d7:7f:4a:a2:49:
d9:83:7c:40:e9:fe:f5:ed:a9:03:ec:df:b8:20:db:46:30:7c:
42:be:f6:66:9d:57:ee:81:4b:bf:e0:a7:45:35:7b:c9:d9:e4:
6d:d8:68:29:cf:bb:63:d8:78:03:41:28:28:91:8c:67:fc:64:
f9:2f:09:6e:26:f0:56:12:c3:04:cc:03:3e:a7:a5:73:c7:16:
8f:03:f6:52:e6:f9:d5:ab:c9:4b:a2:ed:6c:ba:49:24:d9:ac:
02:6e:be:40:a6:f6:11:c3:45:5f:e9:da:39:e6:38:b4:4c:44:
79:71:81:66:3a:87:ac:b7:c0:79:ad:de:fb:c9:b8:f6:61:79:
9a:2e:a9:a1:1a:40:eb:d3:0a:8c:88:2f:af:9a:e3:51:ec:39:
a3:f7:45:01:05:4f:4a:a6:41:06:b7:4c:4a:1d:1f:32:e5:87:
aa:e8:e3:f5:1f:80:8a:d9:7e:ff:39:ef:cf:36:b3:e2:2a:70:
0c:cb:76:dc:8f:70:74:c2:88:e8:e2:c2:6f:5f:72:a9:cd:3d:
c2:1f:47:c1:56:bd:e2:1e:e4:81:e6:ff:17:26:c0:b6:cf:13:
86:12:a0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:14 2026 by rpki-client