
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier: d8bSuxSgs5jwj/2FUWvqXnMhdXdja6TFpFgN2N28WrI=
Subject key identifier: 32:6E:1C:73:58:8F:8D:01:9B:3F:2C:27:22:6F:32:09:70:4E:A8:4A
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number: 018C
Signing time: Fri 09 Oct 2026 05:13:59 +0000
Manifest this update: Fri 09 Oct 2026 05:13:58 +0000
Manifest next update: Fri 16 Oct 2026 05:13:58 +0000
Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: 8qJ4F1tYbpI5s774jF6xnxGGNdrMF/0y9AdHIrbXSCA=)
2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: 1lIzFQEALQy8v+QadRa7FoXrMcnKcVBzKsOnfc22ih8=)
3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: zR70IjBkFq8imIW3hGFMMhMRDbM40qlqunUzoF9Z2S8=)
4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: qYPMtqaT2dl4M1S1nYlOq36a/DlHhwOSpr/FUWfOeEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:13:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Validity
Not Before: Oct 9 05:13:58 2026 GMT
Not After : Oct 16 05:13:58 2026 GMT
Subject: CN=6ac87817-db41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:96:1a:ae:b1:17:7e:ec:31:eb:0c:86:c0:
f9:55:85:7f:33:c3:27:22:c9:59:c8:50:cc:01:de:
19:75:f9:1a:4e:81:69:04:f4:fe:79:8c:8a:20:bd:
b2:2b:98:09:a9:08:d6:a4:8d:77:e7:d7:bf:9a:95:
2c:26:f2:f5:e5:f1:15:94:a5:76:a8:a6:e0:65:31:
ce:da:57:a7:20:e0:62:da:b1:df:51:fa:5c:51:eb:
13:19:c9:71:67:34:41:b2:57:67:3d:58:1a:b1:78:
b5:ab:65:8a:f3:d1:76:72:a7:cf:d2:94:f5:3c:12:
5b:8a:51:fc:28:40:35:5e:7f:1a:3d:40:1f:6a:47:
dd:92:d7:05:09:66:20:24:d9:c9:24:ac:d2:32:76:
a4:c3:02:c8:e9:b6:0a:ff:e8:3c:ab:7a:ec:d1:03:
b9:3f:e0:ad:af:66:f9:c0:5e:45:b6:47:b0:e1:1d:
0d:ad:4a:d4:96:52:ad:52:a6:42:6b:a1:2e:d0:5b:
7f:93:28:45:c3:cb:65:54:2f:34:17:56:06:7e:e0:
40:61:2d:5d:fc:aa:b4:9d:53:44:65:62:27:51:99:
a2:40:44:bc:8b:91:fb:2f:a3:44:23:2d:39:9a:63:
2e:bc:45:da:62:7c:29:c7:85:b1:16:e8:36:db:b6:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6E:1C:73:58:8F:8D:01:9B:3F:2C:27:22:6F:32:09:70:4E:A8:4A
X509v3 Authority Key Identifier:
keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:70:fa:70:4d:0e:23:c0:89:d6:b4:c8:a5:8d:73:26:89:12:
5d:31:35:18:ee:63:9a:78:8a:59:55:a5:51:ce:03:b0:33:f3:
90:17:b4:53:f7:ab:e7:86:6c:9d:03:c1:03:1b:5b:bc:86:18:
ad:0c:45:f3:3c:54:7a:f8:8c:3a:e2:a2:a0:6a:00:66:c1:a0:
ee:d3:fb:e1:f7:e6:6e:41:42:61:1c:8c:e5:c9:2f:41:ce:c3:
f7:af:af:95:ab:52:0b:65:fd:b8:1c:21:ec:be:be:71:ed:b4:
d5:26:2f:40:66:33:a7:2e:e5:76:b8:88:52:4b:0b:12:63:ab:
b2:c6:e5:0b:ee:c9:59:06:10:27:2b:8e:25:ae:ed:f4:2e:d3:
39:d3:37:06:e2:82:c0:f7:f0:aa:4b:d0:75:60:b2:b8:98:b0:
72:e4:37:b4:3d:2f:62:32:a8:33:51:a2:db:85:d9:9e:77:d1:
91:36:8e:a3:7e:d5:3d:51:d2:ad:a5:1b:00:d5:8c:d1:c7:a3:
67:7c:ba:16:da:ac:13:39:90:9d:2f:02:31:85:59:47:3f:98:
04:18:e8:6c:64:3c:22:9e:81:d7:e5:ba:7b:ea:b4:6c:0e:29:
2d:2e:6c:d3:7b:33:9c:18:78:c7:e2:28:ef:7a:d2:7f:9c:24:
89:cc:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:00:49 2026 by rpki-client