
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
File: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json)
Hash identifier: XMWCc1J1L37S8dwuTMB2smAgJvfU12NnOIkcPzQAQBk=
Subject key identifier: 39:21:E8:AA:05:5E:32:2A:66:07:7C:B4:54:C0:4E:B0:20:88:FD:6D
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Certificate issuer: /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
Manifest number: 012B
Signing time: Sun 09 Aug 2026 05:11:30 +0000
Manifest this update: Sun 09 Aug 2026 05:11:29 +0000
Manifest next update: Sun 16 Aug 2026 05:11:29 +0000
Files and hashes: 1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: mlZVDhB/eS2BAfruEGg/ZjPMaaaIOLLkonb981uwANg=)
2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: x4m5M8TdUipL7o6slEBASzNPQRc6mguoljJR97i4R5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 05:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
Validity
Not Before: Aug 9 05:11:29 2026 GMT
Not After : Aug 16 05:11:29 2026 GMT
Subject: CN=6a780c02-7dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:3c:3d:60:70:b5:e5:05:85:1c:76:4a:5a:
ba:f9:fb:2c:6b:95:ec:51:50:e7:a8:6d:34:ff:ef:
80:9c:dc:26:90:cd:d8:1b:48:e1:0d:63:de:4d:7a:
16:32:b9:6a:a5:5b:bc:7a:a0:05:a6:c4:5a:f2:10:
85:43:ab:7c:76:e4:fa:42:12:2b:c9:69:d5:53:9a:
e6:86:ed:da:58:18:e6:f7:34:1f:77:58:bd:3c:40:
d1:5c:b5:6a:ab:d5:c4:ab:78:99:5f:cc:ab:10:22:
3b:50:b7:5c:fc:af:ca:ca:a7:b1:e2:81:46:37:04:
b2:37:0f:b9:02:39:bd:a7:f4:4b:89:d9:fd:8b:09:
64:9c:b8:40:1b:e2:c5:35:8b:90:b6:2a:12:c3:9e:
f9:25:cb:c3:06:f9:1f:b8:41:c8:a5:73:c0:df:d7:
d7:12:3b:1e:02:ef:f0:89:b0:99:32:85:0a:33:26:
bb:f1:33:7f:53:28:b0:6f:f7:cd:9d:48:74:4d:0a:
1b:f7:89:ea:1c:6c:19:ce:51:55:4c:cf:67:e0:4d:
51:92:6b:f0:2f:b7:ad:0b:d1:da:a6:d1:00:fc:0e:
28:e2:30:1c:29:29:b5:e0:2f:9a:92:6b:3a:79:14:
61:20:12:65:72:a1:7d:3b:6e:bf:a2:dc:14:c7:43:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:21:E8:AA:05:5E:32:2A:66:07:7C:B4:54:C0:4E:B0:20:88:FD:6D
X509v3 Authority Key Identifier:
keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:e7:59:76:50:a8:e3:6e:02:ea:53:d3:26:2e:96:6f:da:36:
dd:3c:96:5f:02:ba:b8:8d:d5:7f:b0:5b:9c:81:66:fe:fa:c7:
38:8e:6b:f3:9d:51:ce:08:5c:d1:c8:f9:13:e9:58:74:de:b7:
56:4b:b9:10:47:4b:8d:62:f5:a8:da:5b:07:64:90:68:69:37:
e9:a0:d5:bc:e1:65:7c:44:41:62:45:13:86:96:18:e2:a4:63:
32:db:3d:5f:cb:d4:25:85:5d:55:fc:06:54:0d:cd:d4:1b:41:
e9:72:aa:8e:78:2f:20:f3:ce:a3:35:87:8b:cc:7a:b7:4f:fb:
90:11:07:9f:b8:81:b2:fa:5d:75:13:e6:db:1f:fb:00:d7:25:
ae:b9:2d:42:5d:af:4a:f9:2d:e1:9f:72:c5:10:ba:84:9a:12:
56:7c:43:d5:55:8e:d3:77:ca:b2:37:33:3e:36:fa:df:91:34:
dd:4e:50:06:33:2a:9b:25:d3:e8:10:fc:27:34:5c:84:ce:19:
24:99:8a:6c:57:ea:19:5b:cb:61:54:60:02:2e:1d:07:b9:93:
f3:7a:64:2a:07:d3:d6:f5:13:8e:9d:a4:b7:40:33:19:96:e4:
77:02:b1:50:35:a4:60:b8:80:07:bb:1f:1e:49:8c:64:dd:7f:
c4:d7:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 13:01:01 2026 by rpki-client