
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
File: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json)
Hash identifier: egBFPQ+CkqoZ89VJUNjaJ4IkayGPzUvk0atZ50hFhBQ=
Subject key identifier: 84:80:94:71:82:84:DA:8F:5A:ED:54:CE:2E:28:70:0A:07:EF:8D:2B
Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53
Certificate issuer: /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
Manifest number: 012F
Signing time: Fri 17 Apr 2026 05:19:34 +0000
Manifest this update: Fri 17 Apr 2026 05:19:33 +0000
Manifest next update: Fri 24 Apr 2026 05:19:33 +0000
Files and hashes: 1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: jl6j71etzhah89bhzOHD/QPEzJfoXiV2fAncjZN1QAg=)
2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: s8ZLRx82qpKC8d+4Ji2PmMxFJJ+eKUDb3t+BPotA2Pc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl
rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
Validity
Not Before: Apr 17 05:19:33 2026 GMT
Not After : Apr 24 05:19:33 2026 GMT
Subject: CN=69e1c2e6-a0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:06:97:12:ed:8a:66:99:44:ce:7f:56:9a:
e4:4e:e2:01:9c:bf:9d:d5:5c:c8:37:d2:38:85:82:
ba:64:b0:9a:66:02:35:1b:ef:c3:c0:cf:e3:f4:84:
77:23:a5:f8:bf:7a:6e:c6:64:2e:82:c0:62:58:7c:
f1:bb:8a:f4:35:f4:74:65:6f:b7:28:04:f1:82:14:
1b:69:05:53:e8:5f:48:a7:b0:76:1b:42:8f:c4:64:
99:52:0f:b7:44:be:b2:e5:dd:62:6e:54:5e:2a:5c:
56:43:3e:3c:f8:90:76:0b:8e:8b:b2:1d:28:d6:9a:
b1:07:55:f8:fc:66:49:bc:0a:fb:2f:41:68:93:08:
77:17:99:0c:77:03:e3:86:f1:3c:f6:89:9a:61:7e:
c7:96:11:b9:9c:39:39:22:e2:54:e3:64:13:b3:5d:
65:a2:78:b8:21:83:2b:66:c6:0a:25:8d:bd:9e:e8:
e9:90:a2:87:f2:53:5b:2f:dd:39:41:30:3e:0d:8a:
df:4e:39:12:e8:92:69:b0:50:f0:b9:16:dc:d3:0e:
04:11:23:cd:f3:83:c6:8a:b9:8e:2c:c7:83:36:13:
5d:fb:51:76:9f:0f:41:14:5a:e1:ca:6d:88:f1:70:
76:bd:49:34:59:f6:6e:59:0d:17:63:85:35:7b:26:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:80:94:71:82:84:DA:8F:5A:ED:54:CE:2E:28:70:0A:07:EF:8D:2B
X509v3 Authority Key Identifier:
keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:07:b3:19:a6:95:a1:35:e0:93:6f:1e:05:c0:e8:7a:68:f3:
e6:1c:f0:a3:9f:4d:e9:b2:51:f4:7c:17:ae:4f:ce:43:07:29:
31:e2:e0:50:85:b1:1d:d7:a2:fa:27:e8:a1:b9:d6:35:fb:c5:
3f:0e:fd:e7:1a:5c:bb:c0:df:3d:16:e2:8c:f3:ab:cf:51:42:
1c:5b:4e:28:a0:ed:59:34:17:0f:44:a6:f2:04:4f:54:8a:ca:
ee:14:0d:70:ce:19:c4:59:53:1a:db:43:33:72:c7:12:a5:08:
17:4d:5e:b9:62:55:85:7a:7d:e2:cb:a6:29:97:d7:0c:2f:23:
bd:c0:c4:18:0a:bd:18:62:ed:0e:4e:88:de:7f:94:b9:79:d1:
7b:63:eb:0b:26:81:18:fd:12:05:46:f1:f7:aa:d3:61:c4:3a:
fa:7f:cc:13:e1:a9:bc:c3:55:7c:98:d9:12:70:01:10:19:36:
16:89:f1:10:30:a0:21:27:48:c9:d4:8c:df:ce:b0:01:cc:7c:
e8:cf:6e:d6:27:0d:ed:d1:4f:d2:e7:d9:91:71:66:9f:93:8b:
4f:f7:97:67:f2:dd:8e:aa:0d:f0:8b:37:54:0f:69:07:f8:27:
7c:e0:bb:23:04:bf:4d:3f:2d:b6:f7:e1:ff:d6:b5:bd:b2:2a:
e2:b2:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 03:27:45 2026 by rpki-client