
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json)
Hash identifier: q+XnU6hiGzXiORe+pQKnVaCuu4+w+qdCoCLFtg4/dc0=
Subject key identifier: 5C:1D:70:59:71:98:16:53:26:59:1E:5D:C7:6F:84:D0:16:B5:A5:A1
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
Manifest number: 0233
Signing time: Mon 27 Jul 2026 04:23:56 +0000
Manifest this update: Mon 27 Jul 2026 04:23:55 +0000
Manifest next update: Mon 03 Aug 2026 04:23:55 +0000
Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: FGCed+7DS0dNo0Op6GXitRBCkqKkw9vPPyCWE28EdyU=)
2: 7A8F4240393811F1A6F67D5ABF833773.roa (hash: /u24Mf/LgFYg4eR3AP4svNvCuvsa7zKvkdwusWLNwWw=)
3: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: M5QyWCb/5GM72fMpLUozBYOSJsZfEv4i/WvJccFY5tw=)
4: 9442231871C311EEB4110C83C4F9AE02.roa (hash: CtXBhxoisr4SYK/f9f/omh5fKwAOo6P6cylFnj5/1Yo=)
5: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: /aPiYkMEN8C6qUO8Pny2rmzkP4V9An/tcZvBVxLgCJk=)
6: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: 0kI9xgTVy0Q8AQiYnQllAIH+FuKivWg9E5qZ+kjunPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Validity
Not Before: Jul 27 04:23:55 2026 GMT
Not After : Aug 3 04:23:55 2026 GMT
Subject: CN=6a66dd5c-27e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:2c:ab:d9:01:30:b1:0f:1e:1f:d8:53:38:
f9:14:4f:b1:02:e9:8a:f6:09:42:6a:70:9e:47:ab:
d2:93:3f:65:a7:aa:15:8b:99:8c:28:f3:28:bb:80:
05:9e:b3:2d:85:93:ef:a2:50:e7:a9:73:b4:ac:19:
15:73:da:9e:a4:d6:cf:75:0c:8d:48:c1:82:89:24:
d4:e4:bd:2f:ee:8c:3c:e5:6d:99:fa:cd:a9:c0:27:
7f:78:9c:59:06:49:f0:69:03:d0:7e:2b:3f:5d:db:
94:0b:fb:6e:c7:bb:73:bd:7f:a1:92:ef:bc:ad:b6:
73:4f:ee:43:c6:5d:fc:bb:21:48:bb:a3:d0:34:b4:
44:6f:0a:1c:5e:1c:91:7c:0f:71:8a:c6:f3:ff:c5:
2a:2c:54:da:67:1b:64:41:37:6d:da:31:cd:73:43:
b1:d2:5d:a1:45:f5:49:8e:c7:4e:7f:83:76:20:f1:
f4:bd:5e:3d:8c:0e:b7:76:44:44:72:18:b6:82:09:
30:ed:4e:22:f8:5a:23:24:f6:ac:2f:fa:cd:d4:69:
89:2a:ea:89:29:fb:1e:be:e5:f3:7e:89:5c:6b:96:
53:e6:c1:d0:54:e3:c4:82:54:1f:fc:ac:64:0b:25:
70:d4:82:d6:e9:25:e1:d3:86:34:ea:b4:0c:c3:fa:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:70:59:71:98:16:53:26:59:1E:5D:C7:6F:84:D0:16:B5:A5:A1
X509v3 Authority Key Identifier:
keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9e:c0:86:02:48:91:c5:b7:23:93:38:ac:e5:88:8d:d6:da:
a1:c1:6f:2f:91:7c:3c:54:33:e1:74:e2:c1:8c:8e:41:48:64:
39:52:8f:81:5f:e8:2e:b5:6f:c6:b2:78:21:7a:f5:6a:f4:21:
b4:45:18:f6:78:1d:b6:ea:18:ff:4a:f1:45:2a:ae:78:6f:8a:
64:21:9a:eb:b8:05:7c:cc:bd:72:fa:49:22:b8:60:1a:5c:c7:
58:21:24:5c:85:3a:e2:eb:d3:2e:72:a5:35:1f:a0:39:6e:b8:
de:77:d8:d3:b0:58:99:66:4a:9d:6b:bf:4f:5d:68:63:92:f1:
37:67:69:de:83:f3:bf:53:ef:2d:5f:50:51:09:1f:ad:2a:11:
d7:9e:db:48:ed:ad:03:c6:04:67:9a:6d:11:0f:82:a6:b1:dd:
db:ff:2e:66:eb:41:0b:bc:5d:b4:10:c6:7f:5a:a8:6c:0b:60:
2f:3e:b8:cf:ae:00:9f:99:45:bd:06:6a:b7:b1:30:09:05:c2:
97:49:39:44:55:c4:1f:1f:11:bc:f9:b9:26:ac:de:2a:63:70:
26:c8:6c:d8:04:dd:da:54:75:b6:46:ed:de:67:df:11:15:9a:
37:5a:69:d4:2c:6c:5c:f1:24:f9:83:86:26:78:d5:89:a1:5d:
2d:9a:7f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:43 2026 by rpki-client