
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
File: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json)
Hash identifier: LHoRUqstYTxmVFce3ABAwB/iUPYjpR12WMRrefY97Ug=
Subject key identifier: 3E:B9:55:56:6D:E6:1E:86:69:C5:A7:C9:0A:0E:D1:82:B5:66:13:1A
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Certificate issuer: /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
Manifest number: 0113
Signing time: Tue 23 Jun 2026 06:09:52 +0000
Manifest this update: Tue 23 Jun 2026 06:09:51 +0000
Manifest next update: Tue 30 Jun 2026 06:09:51 +0000
Files and hashes: 1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: O2GZBTmi6k+YWhKuVDcV0P1lsuj9xcINFG4wDTaDHdI=)
2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: x4m5M8TdUipL7o6slEBASzNPQRc6mguoljJR97i4R5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 06:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
Validity
Not Before: Jun 23 06:09:51 2026 GMT
Not After : Jun 30 06:09:51 2026 GMT
Subject: CN=6a3a2330-65eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:87:fe:d2:4d:0b:a7:06:f9:a4:11:d4:94:d9:
43:3d:d3:60:93:56:f1:19:fd:37:2f:f7:6f:58:d8:
99:3f:2d:25:1a:54:38:a9:05:1d:5c:22:8d:bd:17:
b4:54:d6:d8:d0:d9:e2:b9:75:ec:ce:17:2a:4f:12:
42:6c:f7:06:08:1c:af:4b:3b:b4:65:04:cb:4d:34:
68:06:92:a1:84:69:aa:b2:05:1e:b4:64:ed:2b:2d:
d9:f2:3a:90:db:c4:67:02:8b:7e:df:47:42:5d:d4:
a5:a8:77:c1:ff:a0:b3:2e:5e:ec:1a:66:27:75:bd:
cb:13:2f:46:da:2c:e6:d6:17:c7:ad:d1:7d:45:4d:
62:b1:b1:78:53:a0:1f:aa:13:c8:43:a1:4c:23:1b:
49:8b:c4:3b:a0:eb:35:5d:c7:80:d0:d2:e7:e1:db:
72:30:ce:61:61:4c:b1:fe:3b:b4:7a:2a:20:ff:09:
8e:0a:59:da:dd:90:24:1c:1f:2d:d5:bd:7a:fb:62:
65:5b:bd:3b:4d:c8:67:8f:47:c7:73:74:53:b8:44:
59:81:55:11:b6:fe:1b:ab:98:7c:89:00:8c:61:24:
27:ba:79:4f:8b:42:77:94:9a:5a:aa:0e:70:14:07:
87:94:23:cb:e6:fc:c8:c7:5f:9d:f2:f8:89:18:d4:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B9:55:56:6D:E6:1E:86:69:C5:A7:C9:0A:0E:D1:82:B5:66:13:1A
X509v3 Authority Key Identifier:
keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fd:17:8f:86:00:c0:7b:0e:27:61:f2:78:fb:c8:87:4b:4f:
f4:cf:8f:55:3f:79:19:ce:2e:8e:d0:62:49:17:ab:e3:ba:c4:
a6:db:7d:fb:a9:99:22:b0:85:e5:16:c4:84:00:45:b8:80:7e:
44:e6:c6:8e:d7:6b:a4:d7:da:73:6f:a8:33:92:af:c9:93:ab:
6c:91:19:85:71:b7:c7:8c:d2:19:02:a9:1d:23:2c:59:4f:07:
24:f8:21:1f:a7:b5:af:c6:ef:ab:9e:81:07:3f:39:af:29:f6:
62:c2:0a:e2:c5:76:93:92:66:de:db:20:3d:8e:00:74:5f:60:
66:59:a7:df:0f:eb:63:9d:8a:b4:2a:60:0e:31:6c:15:f0:c6:
b9:79:b8:d4:d3:96:07:2f:f8:ca:9a:64:6f:ed:93:67:25:ac:
1f:c2:f4:ad:70:8c:f7:50:6d:f7:b6:81:fd:90:c8:94:b5:5d:
d5:58:52:47:7e:95:72:59:ff:19:92:77:80:2d:4d:f3:13:76:
60:0c:a7:f6:57:fe:27:31:46:12:17:a0:23:1a:3d:67:78:12:
4b:d3:25:a9:13:ac:74:8b:5a:27:14:32:2a:ec:c0:fb:e0:a6:
dd:90:47:83:a4:8a:bf:1c:fa:5b:e4:24:4d:0a:42:11:6b:d8:
c1:fd:cb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:24 2026 by rpki-client