
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json)
Hash identifier: tpmPLqvugt2P9rU86fR3vToglyU6mASJnUC/T9N7Gp0=
Subject key identifier: 14:53:9C:B6:51:34:D7:AF:17:1C:52:70:0D:08:72:EB:68:C1:0D:B4
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
Manifest number: 014E
Signing time: Tue 25 Aug 2026 06:00:32 +0000
Manifest this update: Tue 25 Aug 2026 06:00:31 +0000
Manifest next update: Tue 01 Sep 2026 06:00:31 +0000
Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: T2JIutxD+z27EoJCl4NKme5GQn/KJU6B2j1DMQ/UA3o=)
2: C4A5B394A86711F0BD0D193DC4F9AE02.roa (hash: hm+re/F+kko3QCh/gIPkHgLoZzmyZiDh7lHkBsLQ2Lc=)
3: jm_1_doDDhAXWzZFtElyJxCG1aQ.asa (hash: w+djFyEwJj8cImoY+vJJXvBBWiSKG6uBZphBr03wSaU=)
4: 71A92448186E11F083760527C4F9AE02.roa (hash: 9bixZFbfpNieuLVnpYwH+8Y8Aux98hPNUpWaeSlohAI=)
5: 13B46272139511F0BAC02735C4F9AE02.roa (hash: mtm2pGsiJTAaeB0Xp8pic60xQU0wEGWZuLRIZY26FJE=)
6: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: eJ70OPYkFKHnbNzkHtKEBEpwssLXvLcVIfuQt2NpJFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Validity
Not Before: Aug 25 06:00:31 2026 GMT
Not After : Sep 1 06:00:31 2026 GMT
Subject: CN=6a8d2f80-160e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:ad:fc:09:ac:96:e8:4e:1f:07:81:69:92:
f0:38:ec:c6:a2:04:b0:3a:55:cb:36:b6:88:4f:33:
e4:49:06:61:d1:ef:ce:a4:8a:d5:15:2f:ba:aa:00:
2b:cd:ed:1a:a7:50:2f:54:2f:c4:7d:eb:04:ea:3d:
a8:6b:1a:08:51:f3:b1:a8:c2:30:0c:68:9f:76:3d:
86:3e:9f:60:f6:0b:e9:30:a8:16:df:67:5d:fe:29:
3c:8c:fd:b2:3d:93:ff:44:64:f4:36:ad:60:db:e8:
28:93:6f:58:71:67:22:1f:cd:a4:bf:27:9d:00:ed:
a3:ce:21:74:e1:64:db:62:70:e2:3e:4e:cf:ea:ee:
1b:38:ba:35:de:50:84:b3:84:a8:65:3b:a6:12:69:
a2:78:a2:4d:0c:d0:a1:33:70:72:69:5c:b8:13:ba:
fd:87:98:71:ec:07:6c:54:47:07:a7:48:5d:7f:e7:
19:7b:94:3a:3f:37:66:20:0e:b8:fb:c9:8b:e9:39:
04:41:96:98:c1:05:fa:cd:25:81:da:b1:df:a7:9f:
ba:b1:9a:37:ff:32:3b:46:8e:de:3b:fa:23:cf:64:
db:1f:99:11:97:cc:aa:49:98:ee:d8:5d:3d:84:20:
1a:f5:5b:bb:c3:a3:79:fe:96:45:56:1c:5f:b0:f6:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:53:9C:B6:51:34:D7:AF:17:1C:52:70:0D:08:72:EB:68:C1:0D:B4
X509v3 Authority Key Identifier:
keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:d6:40:8f:93:77:24:af:98:68:e5:d6:cc:91:cd:41:be:3d:
fa:18:31:f0:96:68:98:96:c3:87:31:6e:47:31:90:20:04:9a:
55:07:79:4f:7f:d8:d0:e6:d8:0f:9c:7a:58:78:9d:d0:45:78:
27:82:1d:a0:1b:2c:f8:48:e8:12:ae:db:52:a2:2b:bc:36:18:
27:d3:75:45:ce:6c:fe:87:b8:f0:f8:6f:b4:95:ba:66:87:cc:
d7:51:a9:11:d7:7a:bb:82:3c:01:59:94:ff:e8:3f:fc:d9:2e:
9d:90:c7:d0:27:41:93:cf:9e:da:df:67:5b:96:dc:10:bb:dd:
4b:52:c6:57:03:68:1c:a2:9e:c7:47:77:89:39:bf:a4:61:ac:
6d:9c:cd:e9:59:6b:0a:2e:90:3d:bf:09:58:10:be:5a:90:44:
51:11:b5:60:b6:4a:3f:25:f3:07:a2:28:71:35:45:51:1f:cb:
03:a2:30:f2:49:20:64:a0:84:9f:ef:c6:18:86:8a:b5:8c:b9:
8c:da:b6:b1:6c:e9:cc:6d:76:d0:7c:33:7d:00:a6:90:80:db:
e8:40:95:95:38:d9:f5:f4:5a:a8:35:a4:f2:de:f1:8f:03:f1:
e8:12:8a:3e:52:52:ce:8f:bf:5c:89:4d:e0:bf:a2:6c:8e:52:
96:e1:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:55:28 2026 by rpki-client