
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft
File: s4Q_FBVTnelR6maApOmQCK-DeHQ.mft (raw, json)
Hash identifier: 6CTlwZP81PP8cEaQapEHc8NW4zm1fat9slQTcK7WYss=
Subject key identifier: 92:F2:18:CE:38:4A:47:94:BC:0A:2B:8F:7B:87:FC:7C:D9:CE:B1:ED
Authority key identifier: B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74
Certificate issuer: /CN=A914E6AA/serialNumber=B3843F1415539DE951EA6680A4E99008AF837874
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft
Manifest number: 0D2C
Signing time: Fri 02 Oct 2026 22:29:44 +0000
Manifest this update: Fri 02 Oct 2026 22:29:44 +0000
Manifest next update: Fri 09 Oct 2026 22:29:44 +0000
Files and hashes: 1: s4Q_FBVTnelR6maApOmQCK-DeHQ.crl (hash: jTD6dUD56OZpHg9nlE+TCJ+zbmfZ6EG71dfZbYRIQ34=)
2: 6017E5BE54FB11F1B81DC57BA3833773.roa (hash: P+pna3FadF29aa6apDihcWdlag9aJJPNQ/+Y5gHcH4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl
rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E6AA, serialNumber=B3843F1415539DE951EA6680A4E99008AF837874
Validity
Not Before: Oct 2 22:29:44 2026 GMT
Not After : Oct 9 22:29:44 2026 GMT
Subject: CN=6ac03058-ade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:d9:37:51:85:03:c9:4d:0b:de:bc:9e:b7:
73:94:6a:6c:2e:ec:80:e5:93:79:e0:d2:41:37:90:
0f:e0:f4:65:9c:b7:89:53:39:9f:43:e0:93:86:67:
3b:4b:c3:64:e9:7c:a8:fa:20:46:35:68:ff:4b:26:
48:2d:56:60:47:44:ff:9d:2b:75:36:f1:f3:dc:74:
30:41:71:58:1f:a1:74:50:10:89:64:3d:17:b2:b3:
12:8c:c0:13:00:18:af:2c:13:1d:ca:67:cc:cb:aa:
e4:db:a5:ee:a3:2f:18:86:d5:ef:4c:06:f7:af:ce:
2a:58:9e:3c:2a:01:d9:81:e8:e5:40:f2:b1:60:8a:
7e:89:1a:f6:d3:8d:13:5d:6a:5a:3c:fc:fc:52:0b:
9b:3f:df:de:57:48:c0:86:a4:31:ab:14:a4:47:e8:
37:96:b6:d0:d5:b5:ef:64:96:14:7c:76:aa:94:36:
a0:dd:2a:d4:60:27:7c:2a:01:5a:df:21:ce:e2:51:
80:62:14:f9:a8:92:8a:77:4b:f5:ea:ef:a0:74:1d:
fa:dc:09:41:a8:b3:c7:50:88:39:1f:04:3b:c8:1b:
ae:79:13:fa:f8:2a:91:b3:ca:a2:70:16:7a:bb:a9:
fd:7a:b9:e0:6c:93:5c:92:99:18:80:3d:4b:01:e7:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F2:18:CE:38:4A:47:94:BC:0A:2B:8F:7B:87:FC:7C:D9:CE:B1:ED
X509v3 Authority Key Identifier:
keyid:B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:27:80:2a:cd:87:ca:2f:13:20:3f:a7:bd:98:ac:40:90:35:
f3:e8:37:9c:9e:31:a2:9a:5e:9b:57:66:16:15:19:01:23:f6:
a9:83:5a:03:a5:02:38:df:83:1a:85:c5:58:0c:d1:d1:8c:da:
24:23:bd:49:cd:ba:c4:18:b4:28:d8:2e:f3:7f:2e:28:bd:60:
68:b0:0c:de:0f:41:27:09:34:9a:2c:26:10:b7:4e:3a:0a:81:
02:eb:11:a7:53:13:fd:29:98:78:f9:59:54:f3:dc:d9:21:68:
cc:51:ea:61:eb:a5:ac:8f:84:11:a7:99:c3:4c:9f:46:2d:85:
54:32:3e:06:5a:8b:65:8e:61:1c:32:9c:1b:30:2a:6b:cc:2e:
5c:07:41:ce:74:de:cb:f4:7c:a7:c5:43:97:b0:91:1f:0b:b3:
36:ba:fa:a2:2d:8a:c0:ac:62:52:c8:2e:33:c3:2c:d9:7a:00:
0e:62:46:47:60:23:25:89:a3:e9:3e:c8:87:44:7d:f1:8a:29:
50:aa:b9:2e:2f:34:99:50:a7:ac:3c:15:02:16:d6:3b:48:31:
39:37:2f:19:86:bf:9a:b2:2b:02:02:42:56:7f:87:47:b6:d5:
40:65:94:f2:a4:73:d4:e2:ec:ff:2e:06:8a:b0:fe:32:8d:a4:
e6:a6:22:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:43:45 2026 by rpki-client