
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
File: 4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft (raw, json)
Hash identifier: qSmIhMPMt27iK4Q4KArY0QOflQTHUAbaHlOhMRJlybg=
Subject key identifier: EA:A1:12:37:B1:EF:6E:E0:97:A6:5C:16:C0:80:A2:D1:8D:F3:CF:36
Authority key identifier: E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
Certificate issuer: /CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Certificate serial: 0331
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
Manifest number: 0328
Signing time: Thu 21 May 2026 01:12:36 +0000
Manifest this update: Thu 21 May 2026 01:12:36 +0000
Manifest next update: Thu 28 May 2026 01:12:36 +0000
Files and hashes: 1: 4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl (hash: ncXlWPxSnmDlHbn/TICLRLoDYTJdVY90xeukxgeZpWI=)
2: 2541D62A7F9811ED93508538C4F9AE02.roa (hash: i4z4SLF7zikTyMdvP4trrrkTfOX3ZAKYOCTCXzUWXRk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1C1, serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Validity
Not Before: May 21 01:12:36 2026 GMT
Not After : May 28 01:12:36 2026 GMT
Subject: CN=6a0e5c04-3b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:63:45:05:90:ed:c7:c8:ae:68:76:c1:e2:
0e:a4:7d:a3:8b:fc:b1:8d:18:46:67:8a:71:f3:a3:
ac:8b:83:5f:c6:25:e0:00:6d:0e:61:17:2b:2b:1e:
82:e0:64:16:2a:a4:2e:94:d6:96:b0:63:25:1c:eb:
7f:9f:ab:6d:d2:72:ab:12:be:96:18:73:52:10:a6:
74:87:c5:67:1c:f0:fb:ca:74:ba:55:eb:84:52:58:
33:40:5a:83:86:23:85:80:b9:c4:13:7d:12:92:a4:
1c:b6:70:ba:3c:6a:01:ce:f9:98:e1:07:90:09:26:
89:3e:4c:df:7c:58:d0:98:33:2f:88:61:4a:19:7c:
6b:8e:89:ff:c5:a9:a5:d0:97:d3:9e:51:ba:d9:f3:
c4:e2:1e:a1:c6:cf:e1:07:51:92:6e:17:70:7f:15:
a2:49:18:6b:c2:6d:9e:4d:99:4d:9a:4e:c7:6e:3b:
ee:e0:0f:71:27:bd:96:aa:5d:1d:d5:f8:80:ce:02:
4e:0b:a1:ac:2f:38:99:77:a3:53:e8:15:c1:79:b5:
f3:47:c5:02:48:c3:0c:85:14:d2:cc:cd:ec:9f:45:
5e:fb:fa:1d:72:02:57:c3:6e:cc:87:04:c8:9d:7d:
c3:4a:56:5e:7f:56:13:18:4f:60:c4:4f:e6:98:14:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A1:12:37:B1:EF:6E:E0:97:A6:5C:16:C0:80:A2:D1:8D:F3:CF:36
X509v3 Authority Key Identifier:
keyid:E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bf:b4:be:dd:c6:3f:b4:cc:cc:de:96:39:2c:17:ac:af:1e:
8f:ff:19:4d:6d:1a:13:41:c0:0b:91:a8:e3:90:73:ad:8d:f9:
7b:92:bb:d5:d7:40:21:a5:3c:95:54:f5:43:38:50:04:89:ba:
fe:0b:93:da:c9:31:85:9c:14:f5:36:33:9c:70:86:90:51:0e:
58:56:bc:62:04:e0:43:14:f1:77:fb:e9:f5:85:e0:ac:c5:47:
16:1c:68:a5:eb:d1:ac:03:b1:3a:ba:58:a8:82:91:f9:37:c2:
67:85:54:16:c5:43:c1:f3:72:a3:7e:44:8f:04:49:a3:5f:29:
86:61:d8:a2:a5:09:ff:00:f5:22:5c:ce:3f:5a:7f:75:26:45:
d3:a4:75:d1:a6:2d:8f:23:ba:23:ae:0f:03:d8:96:34:40:fd:
c0:e6:2a:1f:76:77:15:cd:74:79:aa:2d:2d:9b:da:6f:67:f9:
c0:e5:61:43:b9:3e:cd:a1:65:da:6b:6c:ff:81:9c:7f:61:9d:
0c:0e:08:bd:0e:f5:04:5d:0f:26:ec:9b:a9:a1:f2:2f:a8:f4:
69:bb:90:de:ad:47:66:36:f4:a5:65:fc:7c:29:fc:4f:af:65:
66:9a:23:62:60:b3:75:88:e6:a5:89:17:2c:eb:82:da:bb:09:
2c:b7:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:13 2026 by rpki-client