
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json)
Hash identifier: UrhHkPF+L4QPUnDqgisojEN7d0pOV2hzdK7yQqSPHoE=
Subject key identifier: 42:8B:AC:83:E2:82:D8:1E:C4:7D:86:3F:63:3F:6D:B9:AE:F3:B4:B0
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
Manifest number: 0100
Signing time: Sun 05 Apr 2026 05:40:31 +0000
Manifest this update: Sun 05 Apr 2026 05:40:30 +0000
Manifest next update: Sun 12 Apr 2026 05:40:30 +0000
Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: 4Wc+DVd2u7tCrYLJ9tMr9OGOh89AjjiV8ruqRmtFgKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Validity
Not Before: Apr 5 05:40:30 2026 GMT
Not After : Apr 12 05:40:30 2026 GMT
Subject: CN=69d1f5cf-eda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:d4:9e:9f:7b:f7:6c:5a:43:dd:b7:09:1e:
88:2d:b1:aa:98:54:80:81:48:17:70:c1:cf:02:ac:
6d:3c:a2:be:e4:a1:4b:bb:d5:5f:3f:3f:99:44:02:
51:2a:50:55:f7:ec:f3:8a:9e:d7:d2:67:8f:9a:13:
ee:8d:d3:e4:48:06:ee:64:bb:98:60:1c:7e:2e:b1:
c6:a9:b4:b3:39:f6:ad:0a:7a:c0:6f:2c:b7:32:37:
a4:97:af:b5:92:b8:57:8a:c7:ba:4b:7d:cf:f1:e6:
6f:b7:ab:49:46:f6:f2:24:72:d5:ee:35:46:ca:04:
97:de:9b:f1:33:41:40:6a:63:dd:22:41:81:c8:e2:
26:bb:69:fa:ef:49:81:d0:1e:28:ff:14:4f:12:9e:
cf:8a:3c:39:04:4c:67:7d:39:47:f7:0f:04:64:70:
30:60:80:65:9c:90:8d:f4:ed:ed:41:49:ab:c8:3e:
6e:77:b5:f4:40:a5:0a:5d:e3:ae:f7:c7:6b:1b:57:
e7:b8:9d:a5:0c:9b:1a:e5:a4:33:9c:d1:a1:54:85:
6b:0e:7e:84:3b:0c:57:1c:67:46:b1:d0:20:4e:62:
a0:46:ac:fe:f7:0f:85:7c:20:26:36:c3:bf:63:0d:
bf:1e:d5:12:f3:ab:c6:97:93:10:0d:85:01:a0:fd:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8B:AC:83:E2:82:D8:1E:C4:7D:86:3F:63:3F:6D:B9:AE:F3:B4:B0
X509v3 Authority Key Identifier:
keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:01:0f:f4:93:a3:7d:29:d3:7d:52:e2:65:fa:98:fc:62:9e:
44:2e:25:f1:33:fb:9b:77:89:e7:f9:2f:29:50:00:4f:35:d2:
8a:67:b9:c5:07:b2:ae:d1:ff:1e:c4:4c:08:71:e6:3e:26:f9:
59:ce:81:8a:a7:a7:e5:c7:51:eb:94:29:f8:d1:e1:4e:52:b4:
97:59:9a:6d:73:03:4b:30:11:09:cc:0c:be:fe:bf:76:01:c5:
13:40:a3:e3:a7:4b:31:33:16:8b:fa:7a:c9:52:77:aa:5f:05:
7b:92:96:8c:67:da:1e:28:ac:38:7c:48:c7:2d:fb:c1:6f:bf:
22:e7:64:39:74:87:c3:21:90:e4:c6:bf:fb:9c:5c:04:dc:70:
df:19:6d:d0:07:6f:b6:a4:f1:b0:a8:7f:e4:3e:0b:22:8f:39:
ce:60:30:c4:22:b5:73:0b:6f:16:62:5c:fa:c2:72:56:d3:83:
99:3d:65:80:28:5f:5f:bd:0d:46:13:90:9a:e5:60:62:08:6d:
33:ec:ba:98:e6:80:b0:21:2b:51:2e:3d:0e:68:a5:8b:52:aa:
29:1d:a7:79:27:86:0e:a4:aa:c3:96:79:40:ea:a5:6a:39:3f:
15:39:e6:73:29:d4:64:03:e7:4e:b4:cc:eb:83:e4:e2:c2:0b:
ac:6f:6b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:36 2026 by rpki-client