
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json)
Hash identifier: sUi+tFmYLoVj9D2jkIFCjXhrYxmwugy8dPIoWdGNoPA=
Subject key identifier: C8:C0:8C:1A:58:5B:BE:28:62:0D:EA:D1:7D:F6:A6:B4:4D:E0:54:97
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial: 1939
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
Manifest number: 1910
Signing time: Fri 04 Sep 2026 16:25:37 +0000
Manifest this update: Fri 04 Sep 2026 16:25:37 +0000
Manifest next update: Fri 11 Sep 2026 16:25:37 +0000
Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: TaSRx7WclvY+mwN4IKgWklawqkSOGoyQvpuszgWIPAI=)
2: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: u9b8xi9VJzwkucgePmf7GxJbrJFJHrJEf5pCf7m+hrw=)
3: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 0s3JTAw/4XShDWFvdlukgZX7zCTBz3Ez8ZKgigq0we4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6457 (0x1939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Validity
Not Before: Sep 4 16:25:37 2026 GMT
Not After : Sep 11 16:25:37 2026 GMT
Subject: CN=6a9af101-a803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:ac:de:3a:b9:a9:cb:76:09:6c:2d:3e:02:
9a:7d:cc:49:fe:ab:86:a4:98:41:51:77:a9:ae:2f:
98:ef:a8:ee:a3:e9:a5:28:d5:de:c3:d3:53:c5:48:
85:0f:bf:14:ca:6c:b9:c9:cb:75:3f:0e:ea:26:bd:
dc:62:51:d6:74:8d:0d:a3:88:51:aa:32:cc:2a:ae:
23:39:75:d9:f7:6c:d9:2a:11:73:a1:d1:f5:1a:af:
57:a2:cd:89:38:fa:1d:0b:2e:75:a7:95:23:52:65:
8c:b7:23:9d:8d:33:e4:1a:cb:78:3f:73:93:fa:62:
da:c7:4b:20:92:f4:cd:e4:cd:e3:ce:ee:0c:c6:db:
65:b5:e9:dd:43:56:b8:09:54:bf:b7:8e:28:20:24:
86:59:7d:f5:9a:d9:4c:d9:02:43:11:84:b0:7d:93:
e1:2e:3f:09:4e:ad:2b:55:ca:04:3d:91:2c:9e:07:
cc:9f:8f:20:3b:e1:f6:86:b3:19:4f:ba:ec:6d:bf:
da:50:76:89:9a:f7:ea:69:d4:f7:57:b2:db:26:e1:
5d:ce:50:38:18:c1:41:93:b3:6d:79:70:31:8b:44:
77:eb:fd:89:07:f4:d4:07:d6:a2:d8:b8:c2:a6:c4:
0b:61:bc:33:aa:a5:5e:06:a2:d1:5f:b9:7b:1b:9e:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C0:8C:1A:58:5B:BE:28:62:0D:EA:D1:7D:F6:A6:B4:4D:E0:54:97
X509v3 Authority Key Identifier:
keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:a6:02:92:fc:4a:29:8f:52:f7:84:e5:d1:f4:4f:db:81:e9:
dc:a4:b6:8a:1d:65:f6:f9:29:96:28:ca:c1:c1:76:12:6a:98:
ae:eb:b5:ca:88:01:19:08:20:bc:58:af:14:0c:89:fe:1f:e3:
fd:0d:96:93:8d:03:a6:30:b5:1a:28:48:f2:8a:89:4a:c5:c8:
61:20:24:05:a2:fb:b7:7d:f5:30:bf:39:7a:5a:e6:b1:a8:0f:
52:3b:89:46:29:58:ad:69:35:dc:99:a8:9a:c9:46:19:bd:fd:
05:2f:d6:6f:53:c1:66:08:a8:5f:b2:8d:1c:33:b0:8b:24:a4:
6c:26:34:32:31:dd:67:89:12:d2:b3:fa:e3:51:d8:e3:a0:6e:
bd:b3:0b:c3:d0:da:62:33:b8:c8:68:3d:50:67:dd:51:28:fd:
78:51:86:cb:55:04:7e:d3:2d:91:62:7b:46:3b:4b:9d:cf:80:
42:ac:dd:e2:75:e5:b7:58:9f:2f:ab:47:3c:d4:01:88:37:dc:
22:48:65:e5:5a:15:3a:f7:99:fc:d0:f6:a4:d0:92:8c:7f:00:
4c:bc:7d:14:1a:8f:16:c3:3f:7d:b9:ad:70:13:29:3b:87:86:
ff:83:1a:be:52:81:b8:8f:df:dd:46:6b:c8:40:e9:ee:f8:ef:
1d:3c:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:45:58 2026 by rpki-client