
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
File: diWOCB8uCcDx-nu0mbF1lwVlwOs.mft (raw, json)
Hash identifier: 1TrnCuBWi1YGzQlBqRAfhETxhRGSywIMBjQbcomvS/M=
Subject key identifier: 76:4F:A3:A4:B1:28:8B:11:B1:6E:FA:95:33:6A:EF:2C:AD:AA:8A:FB
Authority key identifier: 76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
Certificate issuer: /CN=A917F429/serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
Manifest number: 4A
Signing time: Thu 03 Sep 2026 08:34:23 +0000
Manifest this update: Thu 03 Sep 2026 08:34:23 +0000
Manifest next update: Thu 10 Sep 2026 08:34:23 +0000
Files and hashes: 1: diWOCB8uCcDx-nu0mbF1lwVlwOs.crl (hash: MBvay1K3LZtLJUE/d/VUO88FM7vWt33BMGlgsEcTzfs=)
2: E47B5CC8371911F196F6B470C8833773.roa (hash: qBhoDtp7mp14HRwHJwctq+CWjS+yyzLGnVuJb1Tow90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F429, serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Validity
Not Before: Sep 3 08:34:23 2026 GMT
Not After : Sep 10 08:34:23 2026 GMT
Subject: CN=6a99310f-cc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:e0:26:60:80:b8:57:b7:82:73:00:ec:97:
aa:fd:4a:67:c1:54:0f:35:77:e4:7f:c9:00:dc:26:
ca:6b:70:d2:7d:4a:a2:39:2a:1e:bb:bc:6f:d2:4b:
ee:63:2f:b9:f1:7c:21:d7:91:00:43:7f:f3:4f:21:
10:be:45:c7:99:93:15:a9:b5:50:0a:f7:fd:46:e0:
7b:d6:8a:48:97:57:91:32:55:d8:56:1e:fc:1b:82:
f6:d5:94:61:10:c2:25:e9:55:93:48:0a:48:62:30:
ac:bc:e7:11:31:a3:40:02:0c:a8:a6:ab:ec:bf:2b:
c0:d5:ef:9b:b2:a1:d8:56:4a:31:1c:49:4c:c9:11:
7d:2d:ea:ae:6d:9d:02:2d:19:60:75:9a:51:0b:db:
60:ce:7a:8c:a9:bd:2d:46:8c:ac:8b:77:f5:81:ca:
66:d8:e8:0d:5b:12:fa:0c:38:84:0a:9d:90:77:a5:
cb:ec:ce:0e:cc:58:48:44:1c:dd:bf:68:70:48:12:
52:b6:aa:eb:c4:47:d5:f0:7c:0c:55:e4:cd:83:dd:
95:be:31:6c:ea:09:2d:f9:91:9d:61:bc:00:bb:8b:
d2:0d:b4:e0:ca:b2:20:90:1e:74:64:be:a3:83:68:
7c:41:0b:1e:13:22:34:c1:6c:88:fc:d7:21:a0:60:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4F:A3:A4:B1:28:8B:11:B1:6E:FA:95:33:6A:EF:2C:AD:AA:8A:FB
X509v3 Authority Key Identifier:
keyid:76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:7f:1d:ff:81:48:97:fa:af:78:c4:5c:4b:ae:ec:2b:8e:10:
dd:52:40:66:1d:f1:a7:49:ad:20:fa:57:cc:69:74:4c:6f:20:
17:c6:38:a4:88:d8:b7:bd:02:b4:d3:53:24:79:72:3a:a4:17:
5f:aa:7a:1c:6b:68:fb:a5:f2:10:b9:62:cd:4c:9e:40:f1:c0:
ce:14:a3:d3:dd:87:45:ce:c4:fe:c5:fa:7a:3f:ed:70:6f:f6:
c6:72:d2:35:ff:66:2c:8c:7d:6a:43:a3:75:78:c9:dc:8c:a0:
78:04:13:71:b4:4c:4d:6d:07:e6:24:e2:54:88:fe:e8:13:90:
44:6b:72:4d:4c:02:22:89:0f:bc:8b:ae:27:34:07:cf:e2:34:
82:68:6a:7c:c4:19:73:59:b3:01:24:cb:e1:4d:40:c4:49:fc:
a0:09:0e:12:fe:73:21:38:ee:e5:7c:49:cf:43:dd:ea:64:54:
37:ee:6a:66:f4:6a:25:48:db:62:97:06:8d:b2:bd:1d:79:ce:
2b:e1:0e:49:6d:88:d6:a1:ad:25:44:fa:22:fd:7f:d8:97:95:
65:b1:10:e5:01:ec:9e:2b:5a:90:16:21:bf:04:a8:18:78:6d:
30:91:65:a4:35:96:04:a7:b3:08:ec:16:5d:c5:6e:60:ec:7b:
66:9f:95:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:25:13 2026 by rpki-client