
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
File: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json)
Hash identifier: cb81rqwrbcGK8evhAQDkAIQqTbZvXJ3mEFv+k2z1w7w=
Subject key identifier: D2:3F:1C:0A:1B:63:78:52:D9:C3:BF:2D:55:13:E9:3D:9F:9F:BA:EC
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Certificate issuer: /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
Manifest number: FD
Signing time: Sat 09 May 2026 06:07:29 +0000
Manifest this update: Sat 09 May 2026 06:07:28 +0000
Manifest next update: Sat 16 May 2026 06:07:28 +0000
Files and hashes: 1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: ghXv4fM7z0K7y05nZF6/hRcMvFhXu8hFYIMNG0ExEPs=)
2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: x4m5M8TdUipL7o6slEBASzNPQRc6mguoljJR97i4R5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 06:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
Validity
Not Before: May 9 06:07:28 2026 GMT
Not After : May 16 06:07:28 2026 GMT
Subject: CN=69fecf21-be11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:ab:dc:a8:46:21:5c:44:60:d5:4a:4f:5f:
82:7a:0a:ac:71:3b:f9:73:12:dd:9b:d4:78:77:b2:
1f:8f:b3:84:14:09:ce:6c:bf:80:57:ea:c3:ae:fb:
f0:51:b3:9c:ca:a3:87:ad:7c:ca:63:48:94:f2:39:
62:6b:24:1f:29:2c:f1:42:99:69:ea:15:d3:bb:93:
c8:a6:d7:16:e3:44:9d:c3:34:fd:4a:6f:8d:06:9c:
8b:fb:27:68:5d:01:01:6b:57:33:3c:81:3c:31:99:
f6:f7:e8:0f:3b:d8:52:1f:2b:46:cd:98:92:b6:70:
46:dc:b0:b2:fb:5a:41:1e:7e:5f:10:b4:77:50:11:
90:09:34:da:be:e7:9d:7f:48:a6:50:42:89:49:df:
7d:b8:e8:a3:37:33:c9:09:63:d4:90:3e:9d:77:59:
a6:bf:13:38:55:ea:31:3e:93:a1:5c:32:04:f8:a3:
56:e3:5a:e9:88:02:f8:8e:ab:cb:92:ae:6b:30:8b:
cb:de:3e:2f:13:0e:2f:ec:65:a5:77:ef:e5:a4:93:
a2:2c:7a:44:0f:1c:09:c4:3e:3f:db:a4:c2:32:28:
24:22:37:f0:90:96:8a:9f:bf:4f:4d:73:ed:58:1b:
52:d8:a9:f2:4c:cf:ad:a6:89:ac:ab:ed:f4:f0:94:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3F:1C:0A:1B:63:78:52:D9:C3:BF:2D:55:13:E9:3D:9F:9F:BA:EC
X509v3 Authority Key Identifier:
keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:0b:0b:8b:2e:3d:1f:1b:61:15:29:10:6c:11:9d:8e:1f:cc:
09:8b:5a:87:9a:d5:70:24:9d:19:5e:c3:bb:c6:5a:d3:0d:27:
c2:e8:dc:57:14:53:d8:4e:aa:44:2b:dd:cb:b5:98:07:96:eb:
62:b4:7d:9e:cb:a2:c4:c0:d2:3c:76:c6:52:56:63:cd:2d:8b:
b4:16:54:29:ff:03:c2:f9:24:43:4d:c5:41:19:d5:dc:0e:46:
cf:68:c0:8c:c8:ac:c5:b7:6c:0a:88:96:d9:13:81:ef:5e:55:
d4:2b:5b:1b:05:1a:60:21:92:e5:e7:01:38:81:b3:66:6e:a4:
c7:d4:f8:21:97:75:46:ff:51:4b:a3:fa:34:98:99:66:7d:70:
ea:4f:9b:ed:9b:22:58:38:5c:08:92:bc:0c:4a:65:09:65:5c:
85:38:f3:67:a0:9f:0c:d2:f3:67:c6:cd:ac:6c:fe:71:ff:c0:
8d:34:90:74:b7:d8:e1:6b:33:22:40:23:d3:83:a4:6e:58:15:
0f:a1:a5:b3:09:a9:db:5d:46:83:2e:24:f1:f2:2d:23:69:4a:
a8:f0:11:ce:76:03:da:98:73:bb:0b:0f:23:b3:72:c8:3b:5f:
90:2f:46:38:0d:31:7f:af:50:c8:37:23:eb:23:a6:6e:d4:bc:
22:cf:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 04:26:05 2026 by rpki-client