
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/J4I0O7K4ZzVqmKyikVYurjRMeBo.mft
File: J4I0O7K4ZzVqmKyikVYurjRMeBo.mft (raw, json)
Hash identifier: Z6SPmpgXNVEpugpAylgNVPpCWH4KZnDw9mpa9Yq1rLk=
Subject key identifier: 4D:1B:AE:4F:45:C2:75:72:0D:0F:47:D0:95:D4:07:9B:F4:0F:41:D7
Authority key identifier: 27:82:34:3B:B2:B8:67:35:6A:98:AC:A2:91:56:2E:AE:34:4C:78:1A
Certificate issuer: /CN=A918E412/serialNumber=2782343BB2B867356A98ACA291562EAE344C781A
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J4I0O7K4ZzVqmKyikVYurjRMeBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/J4I0O7K4ZzVqmKyikVYurjRMeBo.mft
Manifest number: 21
Signing time: Mon 05 Oct 2026 12:24:30 +0000
Manifest this update: Mon 05 Oct 2026 12:24:30 +0000
Manifest next update: Mon 12 Oct 2026 12:24:30 +0000
Files and hashes: 1: J4I0O7K4ZzVqmKyikVYurjRMeBo.crl (hash: G8XRfwbnx9FZNbLluKcEMnG838iF4n1zC6VlnLmemcc=)
2: B3EA8200C0B711F1ACB979E46311F970.roa (hash: e//hFuBb9CDNVSoDD813HJFvHwGU48IUofbJ/VW6yDQ=)
3: 2D77EA64A62C11F18A5BF5FD5011F970.roa (hash: rZSyiS16bcZV60Wq1uiioXxuM8RMHRlnIuGWGNNG6+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/J4I0O7K4ZzVqmKyikVYurjRMeBo.crl
rsync://rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/J4I0O7K4ZzVqmKyikVYurjRMeBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J4I0O7K4ZzVqmKyikVYurjRMeBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 12:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E412, serialNumber=2782343BB2B867356A98ACA291562EAE344C781A
Validity
Not Before: Oct 5 12:24:30 2026 GMT
Not After : Oct 12 12:24:30 2026 GMT
Subject: CN=6ac396fe-e4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:77:83:ac:6c:63:c2:77:68:7c:ad:01:98:
39:85:b9:3d:87:1e:c3:c1:d1:de:7a:59:48:bd:7d:
f5:44:5f:ab:29:ae:9b:a8:80:b6:c3:11:31:21:52:
10:d3:1b:4c:6d:1f:48:18:82:b9:2c:f2:02:cc:0b:
0c:24:21:2d:95:2d:0a:3d:8a:2a:fd:be:6c:9b:63:
ed:3f:c8:cd:5c:60:49:e2:8f:1d:50:c6:97:7f:69:
c5:b9:93:3f:e9:7f:2e:f8:b6:34:0d:02:2e:1f:38:
36:8a:8a:04:3d:a5:42:33:75:fb:ba:cf:43:ed:4b:
6f:c0:01:ba:2f:9a:81:58:f2:23:16:09:2a:3b:96:
e4:ab:03:6d:f7:94:ac:40:ce:7b:c3:c3:95:49:8c:
45:b8:4a:9c:b7:19:03:ab:50:3d:14:ed:8c:40:91:
87:9b:30:01:da:76:d0:8c:92:bd:67:78:51:59:9e:
7c:e2:37:bd:ba:c3:da:bb:1f:34:08:d7:87:41:6d:
88:61:30:38:a3:83:e7:11:36:59:ba:6c:89:97:12:
01:20:dc:58:0f:dd:28:31:4d:00:15:94:ab:03:45:
60:36:83:fe:62:10:a0:35:d5:b0:1e:bd:b8:ba:a4:
07:4d:b1:56:e6:65:d2:69:7e:af:fe:91:d1:87:cc:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1B:AE:4F:45:C2:75:72:0D:0F:47:D0:95:D4:07:9B:F4:0F:41:D7
X509v3 Authority Key Identifier:
keyid:27:82:34:3B:B2:B8:67:35:6A:98:AC:A2:91:56:2E:AE:34:4C:78:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/J4I0O7K4ZzVqmKyikVYurjRMeBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J4I0O7K4ZzVqmKyikVYurjRMeBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/J4I0O7K4ZzVqmKyikVYurjRMeBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:e3:e1:45:3e:d0:d5:f9:29:f9:2d:3b:6a:11:a0:fc:a1:ee:
75:1f:f1:fc:ab:b3:e3:f5:d9:41:b2:d6:4f:76:66:d8:34:d2:
50:be:04:a5:51:49:34:83:a9:7b:18:92:c1:89:24:56:6f:a2:
9e:b5:de:a0:3a:c9:31:f6:18:c7:09:26:eb:2c:3e:64:1a:32:
90:7b:c2:b6:51:53:65:4d:1c:ef:10:b1:e9:44:f9:c6:d9:79:
eb:22:c9:b7:3c:a3:bd:04:b5:c7:02:e0:03:57:26:81:9f:a3:
5b:8a:58:5f:01:b4:93:5a:36:96:c1:1d:9d:f5:cf:7a:1f:c0:
24:92:54:33:37:93:60:7e:95:c3:09:af:94:4c:da:c8:22:9a:
85:63:f6:af:4a:6f:ba:e8:83:de:b2:8f:7b:24:ad:dc:76:a5:
27:e0:5e:66:5f:a0:e5:5c:45:f4:c9:8d:79:e0:1f:01:50:15:
b6:7b:fc:e1:26:d4:2f:4e:fa:43:3a:e4:f1:68:aa:1a:fa:a0:
ac:df:4e:46:ee:9a:65:9e:da:c0:f9:6f:cb:0f:26:4b:0d:75:
f4:2b:5b:7c:4c:f5:e1:6c:58:46:dd:53:c1:a4:9d:41:52:e3:
04:04:cf:98:e2:03:f5:41:3a:c1:ae:b7:33:14:54:87:47:2c:
e3:e1:10:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:16 2026 by rpki-client