
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/4aM38HygW0sWIQSki9WFMutU39o.mft
File: 4aM38HygW0sWIQSki9WFMutU39o.mft (raw, json)
Hash identifier: qZsFp+jGJ9h3tK9b++RUJ4CJXV/n04fnxVl97Jxl4Y0=
Subject key identifier: 79:92:32:BA:40:20:A1:D3:77:34:AF:79:04:6F:19:A6:C9:39:A3:67
Authority key identifier: E1:A3:37:F0:7C:A0:5B:4B:16:21:04:A4:8B:D5:85:32:EB:54:DF:DA
Certificate issuer: /CN=A9183A53/serialNumber=E1A337F07CA05B4B162104A48BD58532EB54DFDA
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4aM38HygW0sWIQSki9WFMutU39o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/4aM38HygW0sWIQSki9WFMutU39o.mft
Manifest number: 0A
Signing time: Sat 14 Nov 2026 18:23:27 +0000
Manifest this update: Sat 14 Nov 2026 18:23:27 +0000
Manifest next update: Sat 21 Nov 2026 18:23:27 +0000
Files and hashes: 1: 4aM38HygW0sWIQSki9WFMutU39o.crl (hash: dpeUzvOYlq9z2CfqYWcW/5741AxBG/yrZwQx0iV6Sgw=)
2: 826FCEE8D9B611F1B016681B2566CEF9.roa (hash: nhw8JISVdM0a+XQA9zVwDNVv6XLekFjSPlH17p8yeXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/4aM38HygW0sWIQSki9WFMutU39o.crl
rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/4aM38HygW0sWIQSki9WFMutU39o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4aM38HygW0sWIQSki9WFMutU39o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 18:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183A53, serialNumber=E1A337F07CA05B4B162104A48BD58532EB54DFDA
Validity
Not Before: Nov 14 18:23:27 2026 GMT
Not After : Nov 21 18:23:27 2026 GMT
Subject: CN=6af8a71f-cfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:de:ac:12:4a:3b:53:05:8a:ef:db:98:c4:
e5:5b:c0:14:39:43:34:f2:03:94:46:7d:f2:f9:74:
00:35:8c:66:04:0d:84:c3:d6:1f:74:d8:ab:79:99:
0f:ef:92:8d:56:f5:6f:02:f2:45:7a:dc:e7:e6:86:
15:16:b7:38:b9:e8:88:09:45:d2:cc:65:87:cc:a2:
09:02:94:ed:02:67:41:6f:4b:e9:93:75:7e:c5:77:
e8:89:3b:aa:9a:46:79:6a:40:96:94:ab:e2:7a:fe:
66:c0:a4:15:c3:31:d8:fd:ed:57:2a:63:80:de:60:
eb:27:64:31:68:d3:1a:3e:39:e1:87:4f:55:a9:8b:
db:15:c4:0c:99:5c:3e:06:30:fe:f1:97:1e:ad:e7:
3a:82:81:57:6b:76:bc:57:e3:e4:ac:95:35:97:92:
a1:b5:83:89:c2:0c:76:30:5d:9d:f2:33:c0:0c:e6:
95:79:c7:5e:c8:3a:5d:16:64:0b:7f:c3:8f:c2:d3:
37:b5:10:9e:4b:c4:4d:08:3a:86:8a:8b:11:f5:04:
d0:c0:44:1e:1c:6f:da:a0:50:88:97:c3:27:85:d2:
44:1e:ec:8b:72:a3:cd:ae:88:41:ec:32:e1:85:6f:
a9:46:ce:34:8d:ea:0c:54:a9:17:f3:0f:b7:3a:0f:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:32:BA:40:20:A1:D3:77:34:AF:79:04:6F:19:A6:C9:39:A3:67
X509v3 Authority Key Identifier:
keyid:E1:A3:37:F0:7C:A0:5B:4B:16:21:04:A4:8B:D5:85:32:EB:54:DF:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/4aM38HygW0sWIQSki9WFMutU39o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4aM38HygW0sWIQSki9WFMutU39o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/4aM38HygW0sWIQSki9WFMutU39o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:40:06:81:b8:56:5e:24:d0:e2:f4:58:d8:68:8f:c3:df:01:
d4:c7:79:55:5d:b9:aa:d0:8f:cc:19:7e:37:83:bf:b4:62:8b:
79:b1:03:ac:51:95:54:cd:cb:8f:d3:93:03:cc:9c:28:73:52:
a5:59:e9:27:56:a4:91:a9:de:a4:e9:ec:c8:09:5d:00:a0:a3:
45:40:24:ff:1a:3a:23:a9:71:2a:44:3f:4f:6d:80:38:07:58:
27:49:47:fe:95:fe:72:77:45:45:77:ff:4e:c6:aa:a9:3c:a4:
a1:17:a7:1b:d7:8b:4b:a0:0d:04:48:9a:75:68:41:92:33:f3:
c1:db:f0:ac:ee:f0:04:0b:a2:1f:fe:00:21:65:f6:bc:9d:81:
33:e8:4e:42:bc:91:ec:d4:c7:1f:14:eb:94:6f:fc:8a:25:6f:
8c:b5:07:80:19:37:62:ab:55:15:50:50:9a:c5:68:26:a4:c5:
b6:4a:8f:6e:f9:25:c9:6d:3b:c1:7b:a3:5d:5a:e3:17:d9:0a:
32:83:16:3f:c0:a4:58:74:56:3e:cd:dd:9e:02:8d:61:8e:79:
de:17:8a:72:b3:0f:6a:84:f6:6f:ac:a7:58:0a:21:f5:20:c1:
5a:db:5a:e3:9f:8c:1c:04:5b:d1:21:24:c1:e8:17:de:b1:3e:
50:73:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:50:01 2026 by rpki-client