
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.mft
File: M4rb8cC2l609XDM4P-XhuFzxgck.mft (raw, json)
Hash identifier: jdfl7yk2sCYPPySHr9SoVwi+DpRgX2aGkywziX/CfQw=
Subject key identifier: EC:14:54:B6:FA:E9:74:E9:79:D7:CA:6E:CD:79:E8:FB:AD:3E:33:3A
Authority key identifier: 33:8A:DB:F1:C0:B6:97:AD:3D:5C:33:38:3F:E5:E1:B8:5C:F1:81:C9
Certificate issuer: /CN=A919852D/serialNumber=338ADBF1C0B697AD3D5C33383FE5E1B85CF181C9
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M4rb8cC2l609XDM4P-XhuFzxgck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.mft
Manifest number: 37
Signing time: Tue 27 Oct 2026 08:52:34 +0000
Manifest this update: Tue 27 Oct 2026 08:52:33 +0000
Manifest next update: Tue 03 Nov 2026 08:52:33 +0000
Files and hashes: 1: M4rb8cC2l609XDM4P-XhuFzxgck.crl (hash: ZxMp0gb3Kf7cEkrz5+LyZOgYAhVg5eiyWv2G+Z1iy0I=)
2: 429F6EE8803F11F182A18FE76CA30FBC.roa (hash: dCeZB0WzfHTq5//o/GdMc2OXxNFfT9kxCEwvlspQPz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.crl
rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M4rb8cC2l609XDM4P-XhuFzxgck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919852D, serialNumber=338ADBF1C0B697AD3D5C33383FE5E1B85CF181C9
Validity
Not Before: Oct 27 08:52:33 2026 GMT
Not After : Nov 3 08:52:33 2026 GMT
Subject: CN=6ae06652-50d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:95:5d:4b:25:e5:94:d8:dc:dc:82:0c:bf:96:
f2:93:53:7d:c9:f1:3a:8b:ba:7a:99:24:17:8c:85:
f9:07:5a:09:fd:ee:cf:24:e8:85:50:2d:77:c3:37:
c7:79:f2:2f:98:c5:c0:f0:44:f7:dc:4d:7e:df:b8:
46:ce:7e:21:b7:9e:20:8a:72:d6:fe:f3:a4:bb:a2:
1c:8b:62:e8:cd:5c:b0:34:a0:04:6a:48:64:ba:1c:
e0:c0:69:b7:4d:06:69:91:54:33:05:00:ab:e6:dd:
7e:67:eb:b9:9a:ea:8e:dd:5e:66:b8:99:82:67:32:
c2:57:d4:81:5d:dc:d9:2f:49:3b:2c:0f:8f:39:05:
72:1e:eb:d8:93:ef:71:79:e5:96:73:d6:57:b5:ab:
2d:51:7b:93:ba:52:9f:ae:5e:ed:7a:10:d7:17:5f:
15:0f:22:d4:71:8d:ef:a3:7d:25:ac:f0:10:8e:c3:
3e:98:7d:90:73:a5:bf:e4:ca:43:62:b9:d4:81:36:
da:5b:30:a5:39:e2:c6:2c:d4:42:fd:8d:a9:ba:e1:
6f:46:a4:fb:56:3c:fd:ff:6d:80:3c:5e:2f:dc:a7:
4a:39:5d:e0:7a:18:5d:a7:72:d3:37:88:72:8b:b6:
64:4d:1a:4c:64:57:e5:be:83:c1:78:20:57:50:73:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:14:54:B6:FA:E9:74:E9:79:D7:CA:6E:CD:79:E8:FB:AD:3E:33:3A
X509v3 Authority Key Identifier:
keyid:33:8A:DB:F1:C0:B6:97:AD:3D:5C:33:38:3F:E5:E1:B8:5C:F1:81:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M4rb8cC2l609XDM4P-XhuFzxgck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:d9:79:37:47:8c:4c:33:27:01:36:59:3f:57:80:a2:4f:93:
87:f3:13:db:1e:2a:4a:16:65:d1:59:60:40:da:ba:ff:ec:71:
b1:03:b8:38:b9:c4:51:eb:c4:db:55:ae:42:6d:7b:1b:df:a7:
33:d8:57:26:c3:ff:cc:54:ba:b1:e5:5c:bb:4d:a6:e0:d4:69:
17:9e:b4:06:de:73:d3:46:a5:de:a7:02:8f:b5:cb:20:16:08:
8f:4b:1b:65:25:a5:78:5d:1d:77:8d:17:be:01:ac:f7:81:87:
25:a8:b5:d8:be:72:7f:07:e0:e9:46:0a:85:b6:29:3f:3a:c4:
34:b8:78:f8:6e:cb:22:7f:1a:52:4a:f8:d0:79:9b:9a:f8:33:
d9:5d:1d:53:f3:d9:25:8d:cd:96:b6:fb:9f:52:24:20:fa:b4:
ce:7b:66:a9:40:b8:f7:83:8f:a5:dc:ae:1b:8b:48:c4:e1:89:
5a:c2:f0:9b:42:32:b4:b2:3b:e6:35:67:c8:75:1c:f1:23:b7:
9c:8f:73:3e:01:46:d5:62:87:1a:72:f3:19:04:86:2d:e7:fc:
57:f1:e0:3d:d7:22:c0:a2:16:cc:97:e1:b9:e3:0d:ba:76:0d:
95:3f:45:8b:ce:df:cf:4b:6d:84:52:a5:cb:ff:c0:84:32:68:
bd:10:d1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:42:21 2026 by rpki-client