
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json)
Hash identifier: dKQVr4+jLxAQs16l3yYVmb0A/gbJtfGtOQGZsw2cYUQ=
Subject key identifier: 2B:CC:77:4C:25:ED:F5:1E:CA:5E:15:6B:AC:FC:91:BC:38:D9:41:B9
Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Certificate serial: 0287
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
Manifest number: 0277
Signing time: Sat 13 Jun 2026 02:02:32 +0000
Manifest this update: Sat 13 Jun 2026 02:02:31 +0000
Manifest next update: Sat 20 Jun 2026 02:02:31 +0000
Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: NxPLGyI+7WMa7x/3RsWM1J8C3iFS9dhhGmEeghT4FTM=)
2: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: vtHqwtSvpKd0UZw+IVp/WFTlhLrYLk265RmDqE6z7KQ=)
3: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: wtwpRqnqeYQSTF5tuYeTMKBYPSpu+aJ0HfsSDYw4/oQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Validity
Not Before: Jun 13 02:02:31 2026 GMT
Not After : Jun 20 02:02:31 2026 GMT
Subject: CN=6a2cba38-eee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:38:c1:aa:14:c7:9f:9e:d3:ee:fb:92:91:
2d:d4:35:cc:97:84:ae:8d:37:cc:b0:a0:cf:d7:f5:
cd:c6:ab:09:3f:c2:21:64:ee:e4:c0:e5:0e:a1:84:
f6:ac:a4:7d:eb:ce:c8:d4:97:ef:a1:bc:f0:54:9c:
d1:fa:f5:89:8d:4d:2c:81:e5:df:71:6f:fc:fd:d7:
e4:cd:76:fa:27:3e:b2:91:ac:d4:42:51:aa:8e:b9:
b8:ba:6d:e3:0c:c1:a3:95:ea:c6:f9:7b:3b:80:60:
9a:dc:86:44:9d:dd:de:5d:69:8c:09:ef:ff:a1:8e:
a1:c0:60:d9:95:4e:fd:a4:0a:f1:56:59:a8:6a:c8:
23:56:47:88:27:a7:8d:2c:f2:51:6c:0e:66:22:10:
96:68:40:0b:39:fa:b8:f1:10:2f:d4:3e:8e:de:8d:
b2:b6:38:e8:25:6b:c9:24:7e:5e:49:44:cd:17:e1:
1a:2a:93:f9:31:6a:e8:07:a9:7c:7d:6c:9a:f3:80:
f1:33:60:f7:55:db:88:d9:02:0f:08:37:19:8e:47:
22:28:f4:37:64:92:e6:fd:a8:f9:2e:91:b1:a3:b4:
0f:93:5f:56:9e:ef:e2:87:ad:4f:7a:36:bb:f1:a8:
ab:bc:69:3f:a3:4d:85:28:fa:0c:95:d1:ed:0e:c6:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CC:77:4C:25:ED:F5:1E:CA:5E:15:6B:AC:FC:91:BC:38:D9:41:B9
X509v3 Authority Key Identifier:
keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:50:8c:f1:16:68:f5:e3:33:59:0c:a3:8c:42:2e:46:31:81:
01:6a:b2:0d:a3:ef:a7:8c:09:a3:f4:39:49:e5:d6:2b:00:b8:
07:4c:62:48:ab:e8:85:6e:ad:88:a7:40:82:ea:ec:b2:94:bb:
82:70:c6:eb:91:dd:1d:32:58:20:e1:b8:d7:ce:4b:a4:06:d6:
58:92:a9:3a:9d:83:27:0a:24:05:c7:77:4a:1b:28:99:24:7b:
6f:67:bc:2c:8d:24:d7:4d:61:bc:d0:79:69:99:23:67:98:9e:
1a:16:29:6a:39:42:e7:35:a7:d8:98:23:a7:7e:fe:9a:c0:d8:
05:67:4f:96:3c:fe:62:37:e2:3d:b8:e3:54:ea:a9:e4:c7:a7:
e5:30:9d:a0:a6:d3:d3:a8:ee:55:2f:2a:10:07:f6:b6:be:0b:
18:c4:6c:00:06:2f:ad:74:29:f8:b3:05:85:bc:88:1b:6e:17:
42:0b:cb:82:69:e9:f2:c7:1f:41:00:90:6e:b0:65:93:21:a8:
76:12:5c:ba:66:ec:8b:37:a8:03:84:7e:55:b6:2a:1e:79:47:
d4:6d:df:dc:4d:be:0b:6d:c8:af:37:89:13:32:62:aa:6e:b8:
ba:df:4f:d2:91:1c:2b:b4:68:02:5a:96:64:bc:80:5d:77:66:
b7:64:e1:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx
RUY3MDQwREIwHhcNMjYwNjEzMDIwMjMxWhcNMjYwNjIwMDIwMjMxWjAYMRYwFAYD
VQQDEw02YTJjYmEzOC1lZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt104waoUx5+e0+77kpEt1DXMl4SujTfMsKDP1/XNxqsJP8IhZO7kwOUOoYT2
rKR9687I1JfvobzwVJzR+vWJjU0sgeXfcW/8/dfkzXb6Jz6ykazUQlGqjrm4um3j
DMGjlerG+Xs7gGCa3IZEnd3eXWmMCe//oY6hwGDZlU79pArxVlmoasgjVkeIJ6eN
LPJRbA5mIhCWaEALOfq48RAv1D6O3o2ytjjoJWvJJH5eSUTNF+EaKpP5MWroB6l8
fWya84DxM2D3VduI2QIPCDcZjkciKPQ3ZJLm/aj5LpGxo7QPk19Wnu/ih61Peja7
8airvGk/o02FKPoMldHtDsbB9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvMd0wl
7fUeyl4Va6z8kbw42UG5MB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE
MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3
Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqlCM8RZo9eMzWQyjjEIuRjGBAWqyDaPvp4wJo/Q5SeXWKwC4B0xiSKvohW6t
iKdAgursspS7gnDG65HdHTJYIOG4185LpAbWWJKpOp2DJwokBcd3ShsomSR7b2e8
LI0k101hvNB5aZkjZ5ieGhYpajlC5zWn2Jgjp37+msDYBWdPljz+YjfiPbjjVOqp
5Men5TCdoKbT06juVS8qEAf2tr4LGMRsAAYvrXQp+LMFhbyIG24XQgvLgmnp8scf
QQCQbrBlkyGodhJcumbsizeoA4R+VbYqHnlH1G3f3E2+C23IrzeJEzJiqm64ut9P
0pEcK7RoAlqWZLyAXXdmt2ThbQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:37 2026 by rpki-client