
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json)
Hash identifier: gpL4qA3uho+853WPZTe48ESf2JA4m+w8mEIUeQiv7dc=
Subject key identifier: 19:B6:43:AD:BB:F5:F3:29:A2:F7:36:72:74:12:85:9D:BA:1B:BF:02
Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
Manifest number: 01F8
Signing time: Wed 07 Oct 2026 03:43:58 +0000
Manifest this update: Wed 07 Oct 2026 03:43:57 +0000
Manifest next update: Wed 14 Oct 2026 03:43:57 +0000
Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: phmm7LEmP88CLkfHJWHaN4p8jmR9q00cqxWeBDtDgIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Validity
Not Before: Oct 7 03:43:57 2026 GMT
Not After : Oct 14 03:43:57 2026 GMT
Subject: CN=6ac5bffe-c942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:48:8e:4d:cb:f1:d4:71:cd:16:7f:27:dc:
d8:19:a3:ee:f1:24:f4:07:8e:d2:44:0e:c1:23:af:
25:33:eb:0b:0a:7a:5b:3e:48:2e:05:c6:af:ea:6d:
f9:83:e1:fc:fc:50:29:19:ac:99:5c:88:2a:4d:a0:
ec:5c:bd:72:f3:f1:f1:66:73:72:0e:04:4d:62:55:
f6:63:1e:6d:9d:39:b0:fa:6b:2e:4a:01:be:cc:43:
1f:6f:63:bb:8e:24:c6:f6:c9:f5:74:19:58:d9:e6:
1c:43:bd:fc:15:b3:fb:c6:7e:bf:03:93:a6:9c:b6:
d1:19:2c:90:c4:1c:bf:e5:39:c2:85:66:2c:d8:b0:
61:67:e4:42:18:71:ff:34:3c:32:ae:6d:66:06:fd:
30:35:35:d7:e7:ab:0c:ca:2a:39:f0:37:14:29:9d:
2b:f3:93:96:21:d2:c4:16:96:11:cc:30:f3:b3:a7:
32:d0:cf:4e:c2:4d:31:1c:cf:32:2e:dc:9e:74:9c:
d3:20:40:31:a5:9f:97:62:61:d3:23:9e:41:a7:14:
33:23:66:98:e7:bd:1d:15:3c:f8:ba:83:4d:2c:31:
43:fe:22:83:cd:3b:f4:de:d8:6d:40:68:81:73:6e:
ff:01:74:30:66:9a:14:f0:c0:b6:c3:8e:7c:58:ae:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B6:43:AD:BB:F5:F3:29:A2:F7:36:72:74:12:85:9D:BA:1B:BF:02
X509v3 Authority Key Identifier:
keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:57:34:71:1f:18:8e:28:01:c0:83:f4:1c:cf:bc:5d:10:49:
e0:9b:53:b3:fb:c0:1d:83:c0:57:3b:5c:25:b8:ce:40:a9:d4:
0f:e6:4f:05:57:fe:f4:30:55:d3:19:cc:1f:1f:3b:30:81:56:
59:2c:1a:7b:13:b5:ef:c8:1c:65:e8:bc:f6:19:c0:7d:58:d5:
46:6a:d6:2c:4d:54:01:6f:c1:fa:b5:40:a1:01:a8:8d:e7:8e:
13:89:d2:1c:da:e7:da:44:46:7b:2e:99:10:eb:8a:cd:87:a2:
bd:10:74:51:97:86:74:af:df:59:6c:18:b8:a6:95:a1:d4:b1:
c5:56:7b:61:58:51:bb:f3:58:32:22:d3:46:d5:f0:38:0e:1a:
fb:52:34:eb:bd:66:f1:e2:9e:85:d2:9e:88:1a:3e:87:f3:22:
72:b6:fd:89:fe:e3:5b:8e:be:59:ad:50:f1:14:d9:21:45:48:
b7:d9:d9:af:32:6d:f0:e6:92:a9:5a:c5:c7:af:71:6d:3a:1c:
98:35:86:ef:ab:17:32:1f:bc:8e:00:0a:26:27:eb:84:9f:ca:
5e:b3:89:c7:9b:4f:77:93:9b:9c:4a:53:96:dc:42:7e:9a:ef:
b4:20:d4:fa:24:03:de:af:1f:b0:c3:b1:1e:22:c1:6a:72:0c:
70:eb:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:59:38 2026 by rpki-client