
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier: UTEOMvnyxwsm/Kjj/OlsFU52UPeSTZCUCQXAmek22Ls=
Subject key identifier: 03:CE:76:F5:55:0A:21:34:63:78:8E:49:8D:98:C0:44:99:3E:9D:51
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number: 015B
Signing time: Sun 05 Jul 2026 05:48:34 +0000
Manifest this update: Sun 05 Jul 2026 05:48:34 +0000
Manifest next update: Sun 12 Jul 2026 05:48:34 +0000
Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: dmQ5USGPgkw+1qaUiKlQbj76eULpTB0HZaxjv61EbXQ=)
2: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: qYPMtqaT2dl4M1S1nYlOq36a/DlHhwOSpr/FUWfOeEE=)
3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: zR70IjBkFq8imIW3hGFMMhMRDbM40qlqunUzoF9Z2S8=)
4: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: 1lIzFQEALQy8v+QadRa7FoXrMcnKcVBzKsOnfc22ih8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Validity
Not Before: Jul 5 05:48:34 2026 GMT
Not After : Jul 12 05:48:34 2026 GMT
Subject: CN=6a49f032-f397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:11:34:84:33:55:a3:b8:69:f7:a7:f7:de:
48:d6:fa:32:49:0c:40:4d:02:6a:34:ae:b9:87:77:
3a:33:65:3e:55:6a:e2:65:41:06:b0:26:e5:b7:ca:
02:ca:56:f1:18:c2:aa:52:b8:b6:0b:93:b3:28:b9:
b9:f7:01:42:18:85:ea:c5:7b:0f:29:8a:53:c9:c3:
58:df:b2:fe:5f:5e:c9:88:82:73:13:ce:aa:7b:42:
ca:df:85:71:f2:ef:66:55:72:22:78:08:50:2f:0c:
c1:dc:fe:2d:70:8a:77:2a:b2:fa:66:f3:b9:76:9d:
27:88:60:c9:84:6e:17:e3:fa:20:08:4a:7a:ed:4b:
3d:35:35:de:58:a7:48:bc:18:7f:74:65:5b:85:34:
82:0a:5d:fd:4d:ab:48:2d:53:88:27:52:27:65:00:
fb:dd:76:5b:12:a0:38:b0:54:19:27:4d:19:50:03:
bf:1a:a3:d6:e3:1a:be:a1:b6:31:29:be:48:b5:68:
42:82:46:69:23:bf:bd:86:7c:d7:aa:48:7b:89:bf:
2d:e7:f2:11:93:13:50:09:c5:be:7c:28:bf:76:91:
c1:7b:76:72:49:c8:c7:8e:c7:2c:1c:e9:4b:0c:d8:
11:38:7b:2f:42:bc:1d:bf:22:95:57:3f:eb:a8:06:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:76:F5:55:0A:21:34:63:78:8E:49:8D:98:C0:44:99:3E:9D:51
X509v3 Authority Key Identifier:
keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:71:44:eb:a1:a8:5e:c8:30:ea:22:9b:77:20:a6:aa:e7:c0:
d3:f0:82:f2:ad:27:33:eb:c3:00:ec:a8:34:ee:51:74:7f:5d:
b5:61:31:29:63:f5:7b:bc:47:68:c6:bc:cd:17:e1:43:c1:c1:
98:34:71:ea:27:cc:78:7e:8c:4e:cc:9a:1f:83:5c:42:15:d3:
2f:21:c5:06:cd:19:74:94:28:47:d6:7e:2f:eb:76:a0:b7:b2:
af:6c:ce:c4:b0:f5:cc:e9:82:54:18:2d:59:ef:d8:e4:42:ab:
4c:90:29:30:19:14:67:fe:fc:7d:48:d1:3c:08:ad:19:27:49:
55:68:56:71:2e:fc:5a:1d:9b:f2:7b:36:96:42:62:a5:65:a6:
5a:d3:73:fe:3d:13:f4:d3:bf:73:00:85:b0:d5:0f:ce:e5:ce:
8c:55:44:f9:80:12:c0:19:e4:f5:9c:ae:f9:bb:8c:bf:55:53:
79:34:27:38:73:9a:f4:0f:36:ad:ec:73:09:21:0e:72:80:14:
cc:4a:58:7c:e9:a5:87:c7:a4:70:3e:11:93:52:88:53:ca:1f:
6d:f2:f6:91:c4:66:c4:6e:ce:a7:ec:e6:cb:d1:2f:b6:4c:6c:
2c:83:bc:da:c7:0a:ae:23:31:9d:09:4e:11:29:f9:23:91:be:
2b:f1:ee:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:25:39 2026 by rpki-client