
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier: G5VZwC2xtx9reuLflqJfVMVjm99xlLGfl3t/n/noIy8=
Subject key identifier: B5:35:CD:6C:94:60:DD:5A:E5:21:0C:29:21:22:C9:20:CF:1B:01:01
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial: 08C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number: 08A2
Signing time: Sun 18 Oct 2026 20:50:16 +0000
Manifest this update: Sun 18 Oct 2026 20:50:15 +0000
Manifest next update: Sun 25 Oct 2026 20:50:15 +0000
Files and hashes: 1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: BN8hLgQy6no2tKZkm2cACeeXfnnY59cC+/xRvmWzHIU=)
2: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: WzKy9u9B88D10HY+ConM6LT0I2T55QHznbzlIn3dfH4=)
3: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: 816YLoIvH9Oaj07rOnlACoUv6ymscAs9lYY/BFhZ/Lc=)
4: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: sI6tR4a2HYfJurDOPfrB4Umd60Gjw1lCZTz+9gBI5MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 20:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Validity
Not Before: Oct 18 20:50:15 2026 GMT
Not After : Oct 25 20:50:15 2026 GMT
Subject: CN=6ad53107-0e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:8f:54:e8:4c:7c:64:fb:2b:d5:74:d3:f2:
84:5d:0e:dd:5b:5d:bb:7a:f5:80:aa:57:49:ce:12:
12:27:22:cf:a6:b9:9f:e4:a5:99:30:76:5c:ac:e8:
e7:2b:2a:cf:d4:91:63:51:9b:b3:2f:3d:af:be:a1:
65:5b:eb:8b:50:4e:04:bc:24:ee:78:b5:b2:59:35:
b4:26:b7:c7:83:d0:cf:d0:9a:69:ee:85:5a:fe:fe:
44:e3:97:1a:36:66:3a:80:fa:0c:5a:52:69:35:c4:
e8:48:e3:35:25:6e:f9:c3:dc:68:56:59:f2:89:92:
d6:60:16:2c:94:4b:f3:5b:67:86:5e:55:10:73:73:
b4:67:cd:cc:90:46:1b:9a:04:95:5c:64:f7:5e:1a:
ef:08:ca:8d:a3:e7:9f:00:5b:49:43:79:5a:07:a4:
37:74:ca:55:97:c0:d7:31:d0:37:ca:17:ce:72:7a:
64:84:82:7d:27:6c:4a:ff:5a:66:87:d2:54:94:fe:
41:09:ac:2c:24:b0:55:83:1b:00:66:f1:fc:58:d6:
ef:21:1d:ea:70:58:7c:06:57:39:54:4c:10:33:dd:
81:19:6f:8c:f4:ef:d4:fd:8d:a6:34:7a:20:b7:7b:
f8:6a:a2:2c:d2:76:0f:9b:07:c6:14:d1:b1:22:61:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:35:CD:6C:94:60:DD:5A:E5:21:0C:29:21:22:C9:20:CF:1B:01:01
X509v3 Authority Key Identifier:
keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a0:e9:bd:71:bd:18:fb:36:82:f1:d0:98:75:6b:b4:fb:0c:
3a:58:70:ba:24:38:fa:16:95:b8:bb:9e:ed:2a:30:1a:fe:86:
52:53:9f:0c:b0:ac:ed:25:23:b7:ec:72:6d:cf:d8:3f:66:98:
93:74:78:64:95:af:01:e0:18:d0:aa:39:17:0b:0b:23:68:8e:
ab:76:d5:13:24:6c:e6:54:18:98:2d:9c:3f:21:e7:a2:50:3d:
d1:22:f3:68:d8:99:e2:ce:a4:a8:45:b7:d7:7a:2d:ca:6b:97:
43:9c:40:78:ed:bc:99:e9:29:26:f2:01:7e:59:8b:3d:f7:8a:
80:c7:97:9a:7a:eb:02:ae:62:fd:d4:ad:46:f6:0e:b6:f6:b6:
02:bb:6b:9b:4e:72:e4:25:d8:9d:92:d9:89:78:aa:a9:18:64:
36:43:fa:43:c5:d0:7c:a9:f1:36:2a:93:84:05:af:a5:aa:fd:
86:dc:8b:dc:50:47:eb:3c:29:56:bc:48:d9:91:e7:a2:ed:9d:
b0:c2:2b:4d:8c:59:3b:f0:7d:09:0c:03:ae:75:51:5d:1b:6c:
b4:37:8e:7b:d5:62:5f:76:36:fb:bb:88:1c:c8:cb:02:16:a9:
ef:a6:c8:c1:22:40:33:1a:9a:d2:60:71:68:59:2a:de:06:df:
8e:c1:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:34:44 2026 by rpki-client