
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json)
Hash identifier: iqeL66zw/s6Tcj/kv28rwpEICDVw7yViZ0ER1gJEBEo=
Subject key identifier: CA:28:27:34:EE:18:E3:EC:21:F3:6B:A8:12:80:CA:39:60:41:21:FF
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial: 0422
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
Manifest number: 037E
Signing time: Wed 19 Aug 2026 01:21:07 +0000
Manifest this update: Wed 19 Aug 2026 01:21:06 +0000
Manifest next update: Wed 26 Aug 2026 01:21:06 +0000
Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: GrCmsxesJ4EOdq2X2SNa9iWd6c+G79WzJxwgFMRdUxU=)
2: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: 7JbMjB8d3ZxwfoscdTBgnl9vn7C/XbttuTcaCLuo0DU=)
3: 62B780C46EF811F1A12CAB807BA30FBC.roa (hash: WqvK9G7du0ZUPhPlzOYqfUxNooGlr51htpi5s+9yDqc=)
4: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: Zp1X1saUF8xeAN8dIa6PSZuihvrxW9yn1Q7v4yzeDZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1058 (0x422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Validity
Not Before: Aug 19 01:21:06 2026 GMT
Not After : Aug 26 01:21:06 2026 GMT
Subject: CN=6a850502-8716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:b8:72:30:e8:0d:62:fc:ae:41:5e:c9:ee:
f2:1c:da:15:cd:d5:88:93:56:ed:d5:37:e1:42:cf:
a7:57:2f:22:c5:13:aa:ff:6c:92:4e:57:2a:91:85:
7c:a6:50:3d:7c:dd:7e:03:2d:95:26:c2:aa:a1:b3:
80:ab:1a:fd:5b:eb:a4:bd:43:28:ba:e8:36:73:62:
26:87:1e:29:67:b4:d7:87:2a:43:f4:25:57:fb:4f:
b4:cc:8c:4d:54:78:9e:93:87:60:f3:ea:cc:3a:a4:
d1:6c:e7:e8:74:09:de:99:c6:77:e5:e2:25:fc:4c:
df:f1:f8:fb:06:42:c3:37:8e:02:13:8d:ca:d8:78:
80:58:52:78:da:54:2a:86:b9:38:bd:bc:f8:e5:c2:
fc:c8:3b:66:bb:2b:4d:a9:c4:04:db:8a:17:6b:79:
a4:ec:1d:7e:9a:bf:9c:4b:1e:23:72:8b:e2:7c:13:
79:47:7a:c8:91:aa:f9:66:ad:0d:30:40:f0:bd:6b:
1b:57:5d:6b:2b:b6:71:f3:01:d9:fa:84:12:d6:8c:
13:30:f2:eb:ec:11:9f:13:98:5e:55:3a:48:37:43:
b9:5a:19:84:a2:41:0d:d1:63:4a:4e:bb:e4:81:b8:
ba:fc:4c:02:d6:be:f9:59:df:85:3e:85:f5:fd:ab:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:28:27:34:EE:18:E3:EC:21:F3:6B:A8:12:80:CA:39:60:41:21:FF
X509v3 Authority Key Identifier:
keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:1f:bf:f8:59:5d:36:17:2f:12:a4:dd:20:69:fa:39:2f:5f:
19:84:5d:0a:44:ed:c0:f6:87:0d:66:47:55:16:d4:73:22:e4:
05:a8:b4:3d:09:c8:29:7a:4e:19:36:d1:7c:e8:19:80:9d:8d:
2f:97:95:29:08:25:9c:6d:7d:91:f4:9f:2d:aa:25:15:54:c0:
da:6a:b6:37:16:20:ad:96:fb:61:39:c9:d1:00:eb:6f:8d:90:
e0:cf:12:b6:b2:9d:f8:d8:8a:ff:3a:76:fa:67:e6:5f:52:5c:
dd:51:9b:d8:e0:7a:07:2e:65:83:0e:60:4c:2c:dd:65:fd:a4:
4f:62:23:53:5e:5e:79:cf:02:2a:7f:df:9b:8d:74:1d:c7:f6:
91:f2:c8:45:08:ab:17:34:d3:41:be:52:ac:fe:d4:61:ff:73:
c7:5d:88:90:e1:3f:6a:69:68:d8:55:fb:97:ec:01:8b:b4:54:
c5:86:45:3e:d2:ad:6f:d2:70:31:29:a8:3d:59:a2:67:fa:6e:
2a:4b:69:24:73:6a:95:61:0a:77:56:20:6e:18:03:9c:ae:3a:
e5:1b:46:04:63:74:34:83:f8:3e:28:35:74:c8:65:f9:ca:45:
49:d9:23:6e:f1:04:b6:cd:d4:ae:35:19:5d:1b:e1:c2:d0:01:
17:5b:f7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:04 2026 by rpki-client