
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File: 4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier: 9SWhf5mvFY8L6lYKrB/TcIFO1QayjNMcyPfDNUUE3GM=
Subject key identifier: 22:75:FF:FA:9C:D1:FD:30:08:7C:B6:63:50:12:51:74:6C:EE:58:B6
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer: /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial: 075A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number: 0734
Signing time: Fri 08 May 2026 16:48:02 +0000
Manifest this update: Fri 08 May 2026 16:48:02 +0000
Manifest next update: Fri 15 May 2026 16:48:02 +0000
Files and hashes: 1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: nlSL6erbd3uJB6Ixrwd9YG1rVzIuvV68L8UQSH9oLBg=)
2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: +C2epm2cuJ3GR0nAkShPOcsEF6oYoWgKxDRuq2dxIhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 15 May 2026 16:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Validity
Not Before: May 8 16:48:02 2026 GMT
Not After : May 15 16:48:02 2026 GMT
Subject: CN=69fe13c2-8cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:2d:55:94:d5:a5:6f:45:37:a1:58:07:8a:
f1:ec:14:44:5c:46:11:4c:e9:35:21:82:ea:30:00:
21:68:90:1b:2c:1d:05:fa:56:62:4a:d6:80:2c:78:
35:67:90:fe:b6:d1:81:16:17:3e:1e:e1:ec:37:39:
0a:23:5c:13:d0:41:68:eb:60:d6:f7:3f:9c:18:6c:
f6:42:45:27:b6:2a:8d:eb:19:b8:c2:fa:ae:1f:b2:
96:51:1f:17:3d:a3:d2:22:8c:48:ca:64:a5:67:cc:
67:2c:d9:ec:de:13:c6:3e:50:2f:3d:b8:67:42:7f:
61:1a:82:1e:9b:b9:86:89:32:35:6f:81:b6:47:90:
dd:3f:f4:1c:50:70:86:13:1b:c8:07:b2:e9:fb:fe:
be:2a:49:46:21:e3:cb:75:49:cc:84:ef:6a:87:4d:
f7:9c:1d:90:9e:c3:79:0a:5f:14:9a:ad:c0:68:33:
89:97:73:ec:fc:e7:31:d5:33:14:a8:28:a6:32:e5:
04:d4:21:40:6f:50:c0:9c:64:75:ce:56:6e:7e:6e:
5a:c7:f4:e2:95:e2:d1:e5:f2:4e:d9:89:a3:74:a0:
16:6e:95:bf:16:db:f4:e6:ca:26:b1:29:24:37:3c:
d8:d8:b0:2a:41:70:d8:6a:5c:d4:0f:71:87:e9:01:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:75:FF:FA:9C:D1:FD:30:08:7C:B6:63:50:12:51:74:6C:EE:58:B6
X509v3 Authority Key Identifier:
keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:d1:30:69:f9:c4:5b:a6:70:8e:ec:b6:f2:72:82:54:b5:bf:
11:44:9e:f4:5d:9f:9c:65:ae:ba:13:19:4a:52:63:45:a5:1e:
73:00:a7:08:e7:b5:be:e7:2d:b3:7d:30:81:64:a6:38:52:33:
1c:f2:64:af:6d:2a:51:4b:95:46:60:26:97:9a:eb:12:4f:b0:
39:50:cf:47:8a:81:8e:40:46:72:3c:40:39:f7:dc:2a:7c:c9:
d4:d6:4d:ca:3f:c5:f7:99:33:0d:03:f0:88:71:3c:b0:46:92:
16:74:bf:0e:b1:4a:a5:f6:1e:45:ab:86:4e:17:96:3a:91:d7:
bd:e8:7b:dd:1f:db:8a:9a:eb:78:02:bb:99:44:8e:09:66:92:
25:7e:97:05:25:42:63:3b:8d:0c:96:ea:ba:7d:fb:cd:83:1b:
c7:e2:ab:85:b9:de:7c:fe:87:53:c5:d3:7c:53:a3:a6:24:43:
88:80:6f:ea:af:2e:f0:46:21:ca:10:73:62:24:f0:35:80:01:
6a:9e:6f:a2:ce:20:db:94:85:84:1f:45:cb:18:21:40:ac:d9:
b3:87:f6:38:77:2f:ea:92:05:3f:3c:d9:dc:a1:72:53:d8:20:
3e:6b:04:3d:60:6f:70:f3:3a:05:88:c2:b8:12:fd:9a:db:ea:
9b:5e:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 13:24:16 2026 by rpki-client