
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json)
Hash identifier: ABzMolA3rG83q0f7M5Urzb1l74ogHiBSYccSEE55T/c=
Subject key identifier: E1:41:E2:F1:EC:55:6E:90:D7:41:25:9A:98:4C:C1:3E:78:B0:7D:6D
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial: 026E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
Manifest number: 0250
Signing time: Mon 21 Sep 2026 02:35:55 +0000
Manifest this update: Mon 21 Sep 2026 02:35:54 +0000
Manifest next update: Mon 28 Sep 2026 02:35:54 +0000
Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: Ohklee09PV9WPdQwKYptG0wGinimCm3MpKnGbxooiwY=)
2: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: M5QyWCb/5GM72fMpLUozBYOSJsZfEv4i/WvJccFY5tw=)
3: 7A8F4240393811F1A6F67D5ABF833773.roa (hash: /u24Mf/LgFYg4eR3AP4svNvCuvsa7zKvkdwusWLNwWw=)
4: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: /aPiYkMEN8C6qUO8Pny2rmzkP4V9An/tcZvBVxLgCJk=)
5: 9442231871C311EEB4110C83C4F9AE02.roa (hash: CtXBhxoisr4SYK/f9f/omh5fKwAOo6P6cylFnj5/1Yo=)
6: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: 0kI9xgTVy0Q8AQiYnQllAIH+FuKivWg9E5qZ+kjunPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Validity
Not Before: Sep 21 02:35:54 2026 GMT
Not After : Sep 28 02:35:54 2026 GMT
Subject: CN=6ab0980b-1c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:b6:18:68:5a:b4:15:d7:62:b7:cb:28:fa:
d6:1f:f3:24:5c:6c:66:38:29:df:85:f2:e3:2d:c7:
8c:4c:a3:a3:21:50:1d:e8:0f:e8:a7:38:4f:2c:9d:
8d:d2:a7:33:91:72:8c:31:14:42:a5:12:28:99:48:
2f:96:ba:b3:57:10:19:60:f4:f0:51:ce:a9:30:a4:
d0:27:fe:4a:11:8c:f7:c9:a1:c1:1c:cf:14:46:50:
c1:50:b4:dc:57:b8:1b:67:f0:12:3f:d8:98:6e:47:
7f:84:b4:ed:03:1c:5c:27:ca:4d:47:50:d0:74:eb:
73:c6:04:68:4c:71:eb:1f:73:ac:2a:b7:be:3a:e7:
1f:ab:bf:dc:1d:25:c8:2a:00:48:a8:eb:48:d7:f7:
5d:01:a6:84:d8:33:9e:81:af:32:fc:2a:7d:ac:6b:
51:1b:40:08:b3:db:fd:a8:3f:5a:60:e6:ac:6f:4c:
ab:23:0b:c4:ff:38:69:9f:99:6e:86:06:20:b8:6a:
02:e2:1e:64:98:10:0d:fa:e1:f4:48:2e:a0:d6:bf:
cc:c7:a2:b3:c9:e5:4d:12:9b:ab:cc:94:6f:f1:db:
f1:cb:30:9e:2a:1d:d2:14:c1:b6:14:50:2f:aa:1a:
f6:79:a7:76:bf:12:20:33:89:a3:14:36:4e:e5:70:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:41:E2:F1:EC:55:6E:90:D7:41:25:9A:98:4C:C1:3E:78:B0:7D:6D
X509v3 Authority Key Identifier:
keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:6d:8c:fc:a4:8a:00:4b:6c:49:01:b3:19:e6:b3:94:8c:af:
e4:d7:29:f1:03:f0:d7:12:a1:fe:14:b6:02:bf:d3:51:47:21:
e4:08:a8:5c:42:18:a6:5b:ed:ec:68:08:a9:6a:d0:d6:9f:ec:
5c:e7:17:ed:28:c3:b7:91:9e:cb:3c:ea:ff:13:3e:50:bd:3b:
05:80:42:cc:d4:97:87:3e:ec:6a:2e:69:05:7f:ba:6f:86:b8:
0b:cc:cf:ba:89:d3:07:0a:fe:80:c4:da:2b:0a:13:d8:0b:9a:
45:ca:cb:5c:85:b7:5e:52:e7:16:53:c2:fe:77:09:76:c5:8e:
c9:b8:da:ea:78:74:6c:46:13:c1:56:44:4f:83:1c:ee:72:80:
d7:fe:5f:60:61:2e:a9:04:d6:eb:b6:b6:45:7e:8f:0a:19:6d:
df:59:3a:a9:0f:8c:84:13:e2:b6:22:b8:36:0b:af:87:4d:cb:
1f:e2:2b:e9:4a:56:d5:04:93:45:88:2c:0a:3a:3e:aa:ba:bc:
b0:79:59:fc:23:5e:24:94:e9:cd:bb:f8:be:07:1d:fc:ac:ac:
0d:60:ea:e8:5a:42:f3:a6:f3:a6:0a:d0:ce:f1:6b:9d:16:83:
9b:c7:83:08:e1:2c:03:71:bc:2e:6e:15:5e:3c:ee:a1:79:d8:
e1:aa:f1:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw
RjQ1QjUzNUIwHhcNMjYwOTIxMDIzNTU0WhcNMjYwOTI4MDIzNTU0WjAYMRYwFAYD
VQQDEw02YWIwOTgwYi0xYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Pi2GGhatBXXYrfLKPrWH/MkXGxmOCnfhfLjLceMTKOjIVAd6A/opzhPLJ2N
0qczkXKMMRRCpRIomUgvlrqzVxAZYPTwUc6pMKTQJ/5KEYz3yaHBHM8URlDBULTc
V7gbZ/ASP9iYbkd/hLTtAxxcJ8pNR1DQdOtzxgRoTHHrH3OsKre+Oucfq7/cHSXI
KgBIqOtI1/ddAaaE2DOega8y/Cp9rGtRG0AIs9v9qD9aYOasb0yrIwvE/zhpn5lu
hgYguGoC4h5kmBAN+uH0SC6g1r/Mx6KzyeVNEpurzJRv8dvxyzCeKh3SFMG2FFAv
qhr2ead2vxIgM4mjFDZO5XD0fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFB4vHs
VW6Q10ElmphMwT54sH1tMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy
MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV
MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04
QVNZSEI3ZHRYUklQUmJVMXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU22M/KSKAEtsSQGzGeazlIyv5Ncp8QPw1xKh/hS2Ar/TUUch5AioXEIYplvt
7GgIqWrQ1p/sXOcX7SjDt5Geyzzq/xM+UL07BYBCzNSXhz7sai5pBX+6b4a4C8zP
uonTBwr+gMTaKwoT2AuaRcrLXIW3XlLnFlPC/ncJdsWOybja6nh0bEYTwVZET4Mc
7nKA1/5fYGEuqQTW67a2RX6PChlt31k6qQ+MhBPitiK4Nguvh03LH+Ir6UpW1QST
RYgsCjo+qrq8sHlZ/CNeJJTpzbv4vgcd/KysDWDq6FpC86bzpgrQzvFrnRaDm8eD
COEsA3G8Lm4VXjzuoXnY4arxXA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:49:51 2026 by rpki-client