
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier: 1fGpaIsreKJwgfd9XOp61J75wch6+olBJaRE72GQRiU=
Subject key identifier: 3B:CE:4E:EC:3F:F9:7E:27:C8:1B:1A:AA:97:12:6A:00:2B:36:84:14
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial: 36CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number: 3637
Signing time: Mon 14 Sep 2026 14:30:42 +0000
Manifest this update: Mon 14 Sep 2026 14:30:41 +0000
Manifest next update: Mon 21 Sep 2026 14:30:41 +0000
Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: GiaDpECuksKZ5qfvHzZXjavkFSE48WYrfQv3eSolkYI=)
2: 9A1C4928440511F1AA7E32FEB3833773.roa (hash: 0t6jIa9Isf5o+jCGXWqaZFVgOfCroBWBk2wiQo286KA=)
3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: xgnifQ1n0Nod3rsinrbUu48rMPS+NaTOxW2NBn8Hcnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 14:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14028 (0x36cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Validity
Not Before: Sep 14 14:30:41 2026 GMT
Not After : Sep 21 14:30:41 2026 GMT
Subject: CN=6aa80511-dc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:79:1c:66:b9:e1:1e:bb:71:af:1b:2a:98:
b1:17:ae:03:35:fa:4a:91:26:f3:e3:ef:1b:45:08:
7a:3e:ec:5c:f1:1d:da:b6:f9:2b:be:b6:88:be:6c:
67:92:56:0c:53:80:5f:6e:b2:7a:fe:7b:62:31:7b:
4f:79:e4:56:c1:d1:f3:a0:b0:10:83:32:53:fa:ac:
f1:d2:9e:91:9c:23:15:bf:97:07:22:70:46:f7:4b:
5f:59:1c:47:9e:77:e6:f2:4d:22:9c:ce:54:f8:f8:
7f:7c:1d:d5:f8:10:a7:be:1a:99:f8:bd:15:1b:6d:
dc:d7:2b:67:f2:59:54:00:d2:58:28:d8:dd:75:32:
6a:98:6f:f0:36:17:ef:0f:32:ff:05:c7:96:d0:44:
5e:63:01:be:67:71:8e:ce:1b:47:23:a2:df:83:2f:
33:2e:59:a9:42:29:8a:77:be:cf:05:c7:9c:ce:af:
30:0c:74:fc:ac:f1:ba:d7:72:32:86:06:15:1f:c8:
e8:cc:a2:0a:b1:6f:82:23:cd:db:15:6f:02:21:39:
4e:1e:05:35:3a:4b:35:f2:96:6d:fc:62:3e:63:5e:
ef:c4:a3:ae:11:a2:20:fa:18:46:b1:3e:0a:88:54:
3c:98:ec:7c:9c:0f:32:8f:e2:5b:c3:85:f3:fa:aa:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CE:4E:EC:3F:F9:7E:27:C8:1B:1A:AA:97:12:6A:00:2B:36:84:14
X509v3 Authority Key Identifier:
keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:85:99:58:64:92:bc:84:2f:81:80:b1:6f:b3:85:32:6b:5c:
2b:29:20:48:76:43:d9:f1:52:b3:a6:ab:38:cf:38:9f:84:34:
85:6f:ba:84:30:89:aa:39:ac:d3:4d:66:ca:f6:f4:7d:73:fc:
49:a2:dc:8e:3f:2b:c8:6d:f5:a6:f6:05:74:53:16:e5:b0:5d:
74:1c:b5:21:01:90:44:87:69:36:49:f4:87:f1:eb:ad:46:3b:
38:be:22:8c:6b:3f:81:df:02:7a:7e:80:01:20:e3:90:56:a0:
97:10:c3:cb:7d:4f:b0:97:37:68:38:83:25:c1:a3:55:f7:f8:
ed:cd:c6:e9:de:31:cf:30:5f:4a:70:f8:10:72:ac:e6:3a:c7:
23:cb:64:b7:cf:a7:02:d8:ba:0d:80:fe:26:85:71:17:20:4a:
c9:60:5b:43:0b:5d:64:73:9d:ea:f2:f6:56:cf:3f:2a:a2:92:
4f:74:25:16:db:97:0a:0a:a6:c6:7a:01:bc:41:a6:f5:2d:22:
a0:82:1e:dc:ee:48:7c:d2:a3:ae:cf:52:bf:64:d3:8b:9b:23:
e8:95:19:c2:55:f1:92:c9:f5:aa:b4:14:b4:91:ff:41:cf:f5:
e0:2e:fc:dc:2f:3f:13:f2:cb:8d:7c:a3:b6:a7:f6:c9:64:e8:
c7:63:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:48:43 2026 by rpki-client