
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
File: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json)
Hash identifier: oY4oYWblY4wqaocFyyxkfRB2SoloetCveHAQX7tnHOg=
Subject key identifier: 03:34:32:34:49:74:33:F6:55:22:65:CC:C7:08:AD:56:6A:2A:0A:37
Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
Certificate issuer: /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Certificate serial: 0714
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
Manifest number: 070E
Signing time: Wed 20 May 2026 14:48:23 +0000
Manifest this update: Wed 20 May 2026 14:48:22 +0000
Manifest next update: Wed 27 May 2026 14:48:22 +0000
Files and hashes: 1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: 6wvNL6PP3YbAsdry/cW0q4u7egF3gUlA991bAsE0TXE=)
2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: nifz0lZY0B16BBA+MbGH96xeil4xf4rsxF/RU1Jcvug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl
rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Validity
Not Before: May 20 14:48:22 2026 GMT
Not After : May 27 14:48:22 2026 GMT
Subject: CN=6a0dc9b7-8c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:7c:d8:5e:69:48:aa:a2:0b:b9:0b:1c:62:
7d:07:8e:da:43:d7:ee:7d:65:7d:ee:90:62:71:f5:
9e:98:6c:a3:2f:f9:4b:a2:1c:98:65:dd:b2:0f:8e:
b9:9b:30:94:0c:bd:5f:f9:51:0b:3e:d9:d5:70:53:
bd:65:4b:ab:61:a8:16:d1:29:1f:84:e5:a4:d4:b9:
9f:75:38:44:1e:3c:bc:6a:bb:73:e0:5d:b7:c7:5e:
da:f9:34:f1:d7:52:0b:de:57:23:9d:28:e4:62:b3:
1b:f1:cd:86:46:a0:ac:c0:2b:2b:bb:89:28:2d:3d:
4b:e0:47:d4:05:84:c9:66:3a:03:f9:3c:18:0a:75:
23:96:e8:e2:a9:80:27:a6:6f:85:a2:1b:07:9f:c3:
80:05:cd:56:0c:31:54:ba:ec:9c:78:b2:eb:94:af:
22:0a:3a:6a:1d:f7:97:53:c8:27:19:aa:f5:17:2a:
2f:36:65:68:00:3c:56:66:8a:a3:d2:c5:05:85:e6:
e4:2c:6c:51:f0:6f:ab:5b:43:16:4e:e7:59:ff:78:
02:76:55:b7:9c:62:11:21:3a:f0:c3:a9:fe:46:fd:
e2:4e:48:68:ed:49:2d:8d:c8:ac:3e:2f:28:fe:cf:
ee:c6:95:c1:19:87:8e:3a:10:48:3b:dd:67:a0:61:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:34:32:34:49:74:33:F6:55:22:65:CC:C7:08:AD:56:6A:2A:0A:37
X509v3 Authority Key Identifier:
keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:29:b5:49:61:27:be:f2:4d:91:38:2a:bd:d2:3c:ba:45:7b:
7f:88:b5:36:94:af:09:da:25:22:80:2d:30:ec:b4:74:07:99:
59:bb:4a:bf:81:e9:fc:97:79:47:e5:be:04:18:1a:35:94:53:
ce:60:b2:55:44:5c:8c:d4:f9:4b:8b:91:ca:b1:ed:be:6f:a7:
0d:65:3e:a8:ff:aa:1b:54:e8:27:b4:d1:6c:d7:8e:de:4d:de:
a0:94:24:c5:24:3f:85:f4:0c:5b:6a:a0:1b:65:61:e8:57:28:
e6:d4:d2:ac:eb:8a:a5:c9:9d:f1:17:23:12:87:13:8f:d1:7d:
93:a7:26:5a:f4:3c:24:64:de:33:7e:69:46:47:f5:57:bc:0c:
18:dd:fd:a6:f9:f0:b0:0b:fc:b1:ce:d5:4b:fe:ec:6a:28:2d:
9d:30:1d:36:7f:8b:f7:c8:cd:f0:ae:8b:e7:97:80:94:ff:05:
03:3b:22:cc:57:3d:19:6c:d3:73:a3:33:0d:a7:5c:c8:f9:fe:
dc:21:47:63:51:a8:a3:c4:1a:1e:d4:33:b7:05:88:d4:6b:7d:
4a:45:f5:65:48:8d:18:9d:fd:98:3f:f5:69:c3:87:d3:49:f3:
dc:76:4f:be:e0:46:7b:ec:d5:44:75:11:03:ea:f8:23:25:6b:
f7:c2:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:22 2026 by rpki-client