
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json)
Hash identifier: IrBAZj47y5pAb3DsfYHe1L7vICDioLC3bkk3xq3HTuA=
Subject key identifier: F3:B5:E0:1B:AE:A8:33:6E:9F:C4:AA:69:A3:1A:AE:0F:6F:8B:5C:49
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
Manifest number: 01DF
Signing time: Sun 01 Mar 2026 04:23:28 +0000
Manifest this update: Sun 01 Mar 2026 04:23:28 +0000
Manifest next update: Sun 08 Mar 2026 04:23:28 +0000
Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: N0D1REnR0Sl9RMqo5NTqpEk4JwiQa3yFhiduLX0KHYM=)
2: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: Bn478uLMn4OakQqoDBH/lvI3JDH9R/ce+WPtlw3F7PM=)
3: F5E4AAFA2A2711F0A842B012C4F9AE02.roa (hash: TSmTCNrkei7m3TxkX8bukuyuYPbILQnCUPvPyNjgM5I=)
4: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: kUXkV/NQKfLoHdA/qdA5T0SS9tU4x4Ty5BWOmAQ680w=)
5: 9442231871C311EEB4110C83C4F9AE02.roa (hash: I72Z1nd1GmnAZEnwp1LzVMVnE9PXjIpQpMnCm3khtZM=)
6: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: KrnQqDXD/GjL/9lZ4fC1ZX3TT1+IBpldk3tM8hf1uJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Validity
Not Before: Mar 1 04:23:28 2026 GMT
Not After : Mar 8 04:23:28 2026 GMT
Subject: CN=69a3bf40-bbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:b4:08:08:3a:41:b9:66:52:b3:a2:93:9a:
0d:84:c8:8b:2f:35:d2:a2:ae:18:c5:79:b8:95:f2:
c8:04:e6:7b:11:31:35:54:8b:8b:8c:7f:84:1c:e1:
7e:79:41:14:89:77:77:79:9e:1c:34:88:ee:5a:b5:
a6:e9:ef:1a:f2:72:bb:e9:13:6c:02:83:2e:b2:f6:
fa:2b:06:26:31:ae:34:be:c9:b3:f0:f2:ad:72:2c:
ca:60:40:2f:69:e2:0d:dd:62:1c:ba:41:4c:be:f5:
71:fa:8e:50:fc:38:f7:f0:32:33:a5:db:30:70:e8:
a0:96:11:52:66:d9:37:e2:56:db:18:20:77:a9:ae:
ae:d6:5e:49:fb:87:06:d9:44:d6:23:af:d5:5f:05:
12:a9:53:1a:3c:5e:12:1d:b5:68:bd:4f:f2:b3:dd:
4d:c0:ca:22:74:84:31:b0:6a:2a:5b:51:e8:ce:48:
ea:cb:f8:0d:d3:ed:23:36:41:7c:d2:15:88:b5:2c:
2b:d2:ed:b7:20:ea:b2:99:45:f4:30:68:2b:ca:da:
87:bb:6c:e0:f4:07:f6:e0:9f:00:03:d6:4e:ed:04:
fa:86:0a:b2:66:26:58:6d:0e:9d:8d:f3:16:15:a2:
4a:a3:75:22:49:c0:a3:a1:d1:47:88:26:9e:33:9a:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B5:E0:1B:AE:A8:33:6E:9F:C4:AA:69:A3:1A:AE:0F:6F:8B:5C:49
X509v3 Authority Key Identifier:
keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:14:ee:5b:88:25:de:62:51:c5:09:ee:c7:85:b6:af:0d:5e:
43:21:9e:ad:f9:1d:65:b0:bb:fd:43:09:be:5a:59:29:2c:b2:
60:42:50:d6:c2:ff:97:20:82:37:40:ae:84:db:48:83:94:39:
e9:1a:0a:41:05:5b:06:86:7d:d3:30:a8:b2:4f:8b:b2:4f:ae:
c6:63:a0:36:14:dd:b7:4a:97:a0:d2:6a:2f:91:da:8d:8e:97:
da:e3:30:55:f2:5e:79:2a:44:67:2b:ae:e3:65:e6:31:24:d6:
46:ed:b3:45:71:e2:90:6f:e2:22:1d:f9:a0:32:46:0b:7b:68:
7a:60:47:7e:33:27:7e:0c:91:18:f9:65:f3:48:e7:34:34:d6:
9e:b5:eb:7c:e8:11:d6:21:26:a7:17:5b:5d:9f:bc:d1:6f:34:
f4:1d:f3:d5:35:ab:9b:c0:c0:e2:c7:7a:ed:f5:ce:47:40:08:
28:04:9c:50:b2:97:80:e7:a5:5c:82:c4:1e:9e:d9:bb:5f:da:
98:09:24:8d:44:2a:12:25:6e:08:97:c1:88:8e:57:63:69:27:
f8:41:d8:57:9b:4e:fa:32:65:c0:75:ad:05:03:84:e9:fb:92:
c8:a3:0e:65:48:f5:0c:b8:44:8c:e7:6d:06:92:1d:95:53:55:
b3:f5:67:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:56 2026 by rpki-client