
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
File: B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft (raw, json)
Hash identifier: l2Jw4PxlcbNpuuOUE7bbNjOZEcNfQ0FyFxhQFQ0iLDc=
Subject key identifier: 95:E9:6A:50:8D:68:F8:0F:AE:D6:A9:9F:C3:F1:F9:CF:0D:93:AB:7C
Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B
Certificate issuer: /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
Manifest number: 0181
Signing time: Wed 19 Aug 2026 05:13:53 +0000
Manifest this update: Wed 19 Aug 2026 05:13:53 +0000
Manifest next update: Wed 26 Aug 2026 05:13:53 +0000
Files and hashes: 1: B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl (hash: /x39s2dMGfISvIeN9SkYdllIbmpWiFoWnniIGYDc23I=)
2: 52AE08D4ABCF11F083B9610FC4F9AE02.roa (hash: KHjpOX86nJ+JvEal4Th9ElzR3Sk1i9bEDW0jA6Nf2qo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl
rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C5E0, serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
Validity
Not Before: Aug 19 05:13:53 2026 GMT
Not After : Aug 26 05:13:53 2026 GMT
Subject: CN=6a853b91-a2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:3a:a0:3b:9c:58:31:34:ab:4e:20:0b:8c:
91:35:7d:21:f2:ba:21:ae:4c:81:aa:9e:95:ee:1f:
a3:97:da:b5:9c:c1:f8:f3:7c:46:79:42:0f:bf:90:
1d:53:d4:f3:a3:27:77:f5:5e:30:d0:85:f2:22:3f:
06:dc:6a:5a:63:12:e3:21:68:9b:0b:fc:34:04:26:
d5:c4:20:67:ba:bb:cc:75:67:62:12:47:46:8d:a1:
31:4d:ea:5d:ae:06:67:39:fd:af:9b:c2:8e:97:2e:
da:61:3b:f9:87:2f:2a:0e:be:9b:b3:c1:90:d4:e1:
71:bd:9a:e2:27:36:d1:43:10:a6:7f:4e:98:7d:bc:
19:f0:d3:95:45:2f:38:4d:2c:82:94:bf:1d:f8:0c:
36:05:39:08:9f:94:f3:0e:89:1b:81:e3:6b:35:8e:
97:47:44:c4:0d:fb:db:de:92:60:67:04:b7:82:e2:
8f:fb:77:86:ad:14:ee:c1:af:5f:f6:18:ff:7c:c7:
81:35:7a:fe:cd:87:cb:99:f8:58:10:d7:fa:05:18:
bb:e8:c3:1e:0b:39:99:2f:77:e0:75:c0:44:74:8d:
0a:d0:6d:0c:3b:85:cb:b8:91:75:f3:cb:db:f3:82:
1a:04:ca:5b:ca:f5:ce:2a:e7:e1:36:08:4d:d3:26:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:6A:50:8D:68:F8:0F:AE:D6:A9:9F:C3:F1:F9:CF:0D:93:AB:7C
X509v3 Authority Key Identifier:
keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:79:5e:74:ff:ce:d3:e3:f4:8b:a3:2a:49:05:1a:9f:9a:d5:
4a:15:3e:f3:09:94:e9:63:4b:19:73:12:54:0b:c0:71:12:5a:
03:10:b2:1d:54:3b:fa:46:37:11:9a:e0:23:64:c0:2c:38:43:
fc:e5:b2:d3:44:85:5e:22:4a:99:81:da:db:65:01:6e:a9:1b:
51:7a:d0:c2:d3:d3:b1:3f:ae:5e:30:64:f2:82:9d:ac:f9:42:
bd:30:bb:fa:a2:93:4e:e8:0c:18:b4:d1:1a:91:85:7a:9c:8d:
73:09:3f:76:2e:ba:eb:cc:d3:39:7c:2a:c4:a0:31:97:36:00:
da:94:58:ab:9e:d3:b6:b6:31:58:d7:57:36:12:88:b6:9c:19:
f9:27:d1:4b:19:33:9b:70:26:c2:d9:29:25:13:f8:23:9c:35:
52:d6:f0:43:bc:8c:3c:9e:5f:8e:f2:2b:b5:0a:dc:04:d1:41:
9c:28:f2:ca:19:28:e1:5a:a6:18:0d:65:58:39:1a:23:04:5b:
f3:45:da:d4:ad:96:f0:e9:8a:f2:28:43:19:a5:be:87:e5:23:
b7:b2:1b:b2:49:6d:ee:bd:6a:2c:49:61:15:7f:61:4e:ba:24:
2c:e8:46:69:97:51:d5:28:c3:c0:62:f8:3b:85:66:71:11:af:
6c:da:29:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:42:09 2026 by rpki-client