
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier: eFZNLEh32xjlrFfG6cmzyt5mydENluQ/Ozl5exa/fOM=
Subject key identifier: 84:02:D3:57:5C:01:72:18:6F:F0:74:BE:1B:C6:8F:20:E1:E3:12:2C
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial: 08A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number: 0888
Signing time: Mon 31 Aug 2026 20:44:35 +0000
Manifest this update: Mon 31 Aug 2026 20:44:34 +0000
Manifest next update: Mon 07 Sep 2026 20:44:34 +0000
Files and hashes: 1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: rrixu2+cPyaAkHoyl/z/8P2CG4poVKkhv3ARKDkFIAo=)
2: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: 816YLoIvH9Oaj07rOnlACoUv6ymscAs9lYY/BFhZ/Lc=)
3: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: sI6tR4a2HYfJurDOPfrB4Umd60Gjw1lCZTz+9gBI5MI=)
4: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: 3fw6mHPeADEWBETyQZxIVf42hLtCqb+tAcCFeXIzWNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 20:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Validity
Not Before: Aug 31 20:44:34 2026 GMT
Not After : Sep 7 20:44:34 2026 GMT
Subject: CN=6a95e7b3-55fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:87:ce:be:35:ec:95:64:55:47:c6:df:d2:
66:3a:f5:13:15:33:d3:b5:96:63:86:b1:8a:16:fe:
17:e6:77:95:4e:ac:70:9c:53:52:81:b1:6e:d1:72:
35:d4:10:c0:64:c3:2f:47:cc:b4:00:ec:7e:2e:eb:
0f:66:01:97:7f:70:ef:9c:2c:4a:6f:9f:1c:07:00:
ee:49:e5:53:e7:22:47:99:d2:8c:96:94:3a:58:2e:
a1:29:cb:3f:16:30:0c:19:42:b5:a3:69:a4:32:5f:
dc:48:84:c1:fd:bc:69:c8:2c:8a:9f:a9:80:2e:6c:
eb:04:31:a2:5e:3d:fc:29:bf:01:d9:06:a0:40:68:
a7:62:33:39:92:85:8c:f6:7a:2c:48:7d:8c:3f:48:
51:01:ca:30:b6:89:27:f5:bd:1e:6b:42:c5:42:45:
81:02:ac:90:2e:6f:b1:80:2e:6b:91:16:c7:84:7b:
e1:99:fa:31:23:ea:59:fc:09:5b:b7:fa:39:78:e6:
0d:2c:28:f6:c6:1f:df:1c:b8:4b:8b:58:4b:f9:b3:
3f:00:d8:8e:71:fe:0e:04:e7:30:d1:75:37:2e:c7:
65:c5:aa:98:31:14:ac:4f:5d:d7:08:e1:4f:c6:31:
8b:6a:e6:89:7e:0f:9a:7a:4e:85:0c:db:a6:44:bf:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:02:D3:57:5C:01:72:18:6F:F0:74:BE:1B:C6:8F:20:E1:E3:12:2C
X509v3 Authority Key Identifier:
keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c0:53:e3:80:47:91:28:fb:df:79:2f:2c:d5:73:87:a2:84:
11:19:76:3b:da:a8:c4:82:d2:66:3f:3f:be:e7:75:44:45:2b:
26:58:8d:79:39:5e:67:62:1b:4e:99:06:d9:d8:4a:b0:32:36:
c8:a9:b3:68:66:b4:d7:7a:88:0d:d5:ac:19:4d:ba:93:fc:71:
28:59:3b:14:4e:b1:ee:cf:35:8e:7b:db:0b:ae:22:02:f8:d6:
60:fe:fa:3c:e6:af:42:61:95:5c:2d:3e:7b:33:d3:10:08:6b:
6c:36:96:42:81:ca:6a:7f:6a:93:fb:c6:fd:92:a2:df:ca:72:
43:6b:a8:ce:87:af:d5:dc:4a:75:cf:f3:5e:25:45:28:d0:7d:
21:c6:22:07:8b:3e:46:09:e0:44:69:96:44:53:5d:6d:d0:a6:
65:62:bd:c3:68:c7:dc:fe:ec:72:ac:33:81:7b:e6:81:0f:f2:
ba:03:be:da:d0:a4:33:5b:17:f1:68:5c:ab:f6:e7:16:34:97:
44:cf:80:3e:f8:09:c9:3a:9a:af:32:1b:bd:68:cc:93:59:48:
69:08:72:21:07:5b:ed:20:72:20:dd:86:3a:af:86:5f:97:c4:
b3:47:21:4e:f3:f2:65:19:21:82:a7:49:0a:14:79:68:e0:07:
85:c6:86:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:50:52 2026 by rpki-client