
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
File: -4WO-66Tw4ktlJvcQfxEao687hs.mft (raw, json)
Hash identifier: rwfhjo/6XF+iNUTWwApKKnleOECsw11bLgIg8DIc+u0=
Subject key identifier: B1:59:82:07:CF:38:6D:F3:21:3F:3E:23:57:D9:1B:CD:8B:4E:4A:C0
Authority key identifier: FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B
Certificate issuer: /CN=A919B59F/serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
Manifest number: AA
Signing time: Wed 21 Oct 2026 07:43:12 +0000
Manifest this update: Wed 21 Oct 2026 07:43:11 +0000
Manifest next update: Wed 28 Oct 2026 07:43:11 +0000
Files and hashes: 1: -4WO-66Tw4ktlJvcQfxEao687hs.crl (hash: p89rDvexDFVTCnm68T1uLkLCpDBojhrvn7qGZk0az4I=)
2: 45395E28C8F411F0A2F04129C4F9AE02.roa (hash: D2Zdr1KjCtW0v7SwktRTkUb9mkJrYGEuJhxB/QmO9bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl
rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B59F, serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
Validity
Not Before: Oct 21 07:43:11 2026 GMT
Not After : Oct 28 07:43:11 2026 GMT
Subject: CN=6ad86d10-b0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5f:ce:49:71:94:3b:7a:15:7b:08:a4:b2:31:
fa:95:7d:dd:4b:f9:f2:ad:36:ba:29:a1:7f:bd:b1:
a2:2a:1a:16:16:45:6c:cb:f6:c1:74:c2:dc:63:9b:
42:e8:d5:96:7e:3c:61:df:d3:3f:81:bd:d3:5c:f6:
83:12:60:88:b9:31:02:ed:5a:30:8e:f3:8b:be:c2:
2c:1b:df:18:cc:59:75:da:17:ef:a2:36:d8:ec:55:
55:ed:78:8c:16:02:46:20:f4:55:64:36:de:41:3a:
b2:bd:7d:30:e9:3c:c3:af:fa:f9:62:da:38:a3:8d:
97:63:55:7a:7c:31:b4:12:1f:cb:34:e5:7c:d4:7b:
5d:66:ed:fa:48:43:81:09:06:b4:d0:6b:1e:99:20:
c7:25:ab:af:5e:0e:84:f8:bc:23:f8:57:35:94:ab:
85:c5:ad:07:aa:fb:1b:2f:97:96:40:93:e1:20:d6:
60:2e:49:03:17:06:3e:43:cb:b2:c3:37:49:d6:7b:
6e:f0:fe:e2:1d:39:2e:ca:7c:9b:9a:de:e4:95:61:
7e:35:03:ba:f4:06:60:55:7e:68:f6:91:97:73:bd:
6a:8b:72:40:c6:d4:48:66:81:15:9c:95:d7:9f:87:
3e:c6:e9:82:10:42:c2:f4:92:c9:e5:f6:07:4d:bb:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:59:82:07:CF:38:6D:F3:21:3F:3E:23:57:D9:1B:CD:8B:4E:4A:C0
X509v3 Authority Key Identifier:
keyid:FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ec:c7:56:e1:c6:e0:c0:53:cc:56:f6:47:ea:ea:1f:22:ee:
03:a1:0e:04:45:24:2b:7f:70:cd:c6:bf:34:15:c7:72:56:bb:
8d:c8:ef:7b:37:da:42:2a:95:69:23:89:58:89:9b:59:7a:fa:
5f:4d:1d:26:80:70:58:de:b6:c0:0b:8c:b1:b7:d3:64:aa:eb:
6c:ca:f6:c5:71:2b:9f:d2:19:2a:5f:1a:51:2c:fa:42:fa:04:
6e:7d:ad:f2:fa:aa:6d:6d:4c:71:59:72:ae:b9:c0:9a:c2:f6:
0a:41:d2:92:57:d4:74:c1:27:9e:77:4f:e9:e0:0f:49:9e:4b:
da:a8:d9:67:8b:78:5c:c1:69:90:ef:d7:20:fe:c9:ec:49:bc:
4e:eb:5d:f6:41:25:f8:57:db:51:0d:fc:3e:69:dc:96:44:e0:
74:22:80:52:70:bf:8a:86:d3:9c:21:ae:e2:0e:5e:65:a2:34:
46:98:00:17:34:82:96:4d:f9:d8:fe:3c:71:7b:06:c7:0d:d9:
1a:2b:ed:ff:8f:11:85:30:3d:7a:82:1b:8c:3b:ca:d8:09:43:
8b:ac:b5:ca:27:fe:b0:67:31:45:87:12:9e:fe:da:07:0e:72:
f8:97:b6:da:b5:92:74:87:d1:18:a3:d2:64:11:ae:d1:58:26:
79:54:10:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:18:52 2026 by rpki-client