
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json)
Hash identifier: uMLOwVtBoYaiUZbNwppBcd264q3vbq2K/KD1J/TzLAE=
Subject key identifier: C8:D7:B0:44:3F:FC:15:CF:DF:DC:FB:94:2B:59:E1:ED:EC:B7:BA:E1
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial: 02E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
Manifest number: 02D5
Signing time: Wed 23 Sep 2026 01:06:58 +0000
Manifest this update: Wed 23 Sep 2026 01:06:58 +0000
Manifest next update: Wed 30 Sep 2026 01:06:58 +0000
Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: w8mOJgtkGkrELsm7EgU+R8UGc2ZjOAoBrlM/L68hHu8=)
2: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: L4XqfcnZ4gHSW4QTEz3ONJ/g1x9XTw6MU5/Gf30dDq8=)
3: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: XvLu9Lco+z3v8UzXTRCenPQt8JmuU1Ozm34u8QKc+Iw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743 (0x2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Validity
Not Before: Sep 23 01:06:58 2026 GMT
Not After : Sep 30 01:06:58 2026 GMT
Subject: CN=6ab32632-5c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:07:29:b4:d8:ba:33:0a:44:19:77:88:7c:
86:44:5d:03:cd:90:59:94:3b:7e:e9:13:48:d2:5a:
31:32:71:82:55:91:85:b3:77:e5:4b:e4:90:59:d6:
ed:26:d7:77:e9:3e:f4:dc:b9:e3:fa:28:49:70:19:
52:f2:f4:c9:0e:2b:f0:dd:61:56:5e:cf:2b:cd:6c:
8f:d5:7e:47:12:1f:74:d7:7b:03:90:4b:00:4f:5d:
96:88:21:ce:ac:0b:21:b0:71:ec:76:52:c8:07:a4:
de:a1:c8:8c:ff:82:70:b5:bf:9f:c8:ad:c0:15:af:
c1:27:d1:b2:2c:5f:59:47:02:6b:a3:7c:98:e5:a2:
ec:a0:d3:37:53:1e:b1:83:24:c5:f0:52:29:ee:eb:
79:f5:31:8a:8c:a7:09:12:39:a6:f4:78:da:40:dc:
af:ac:bc:fc:31:1d:d1:d4:2f:25:42:37:c6:6e:54:
b0:26:dc:41:59:10:74:11:ec:ef:d6:0d:93:a6:65:
f0:54:9c:b1:cc:d5:56:e9:d4:e8:c8:ed:f0:c1:90:
9a:5d:21:64:22:59:61:aa:25:20:58:a7:fa:9a:af:
5d:db:e7:d4:3b:2f:61:7e:18:72:66:21:28:e3:1f:
1f:f5:2e:e9:82:f0:6e:f8:9e:a9:8e:06:97:ca:bb:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:B0:44:3F:FC:15:CF:DF:DC:FB:94:2B:59:E1:ED:EC:B7:BA:E1
X509v3 Authority Key Identifier:
keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:87:18:94:9e:eb:40:de:a9:9e:e3:59:f7:c9:d6:3e:17:1c:
c9:cb:c7:dd:0f:6b:ba:4e:fe:9e:b0:a1:4a:45:ce:a5:6d:d7:
bf:ec:0d:57:06:62:29:18:e7:3a:32:b5:01:6d:72:e8:46:37:
da:6f:5a:c5:a6:69:19:33:21:8b:ff:67:e7:1b:b1:e0:7f:85:
e2:97:22:03:40:b1:01:0f:9c:15:b7:d6:bd:df:b0:ca:c1:0f:
05:09:3e:3c:10:1c:41:f2:a4:c5:68:3f:a9:56:af:42:ac:af:
f5:ad:30:44:28:58:54:6e:15:c2:c8:7e:96:2f:e1:d9:dd:e5:
67:80:27:54:db:0c:b4:9f:13:2a:84:56:a6:0d:ef:04:a0:bc:
1b:29:93:12:65:18:78:42:62:33:a7:ed:4a:a9:fa:fd:a0:ce:
ea:ef:db:bf:46:8e:42:bc:57:fd:07:b9:b1:76:11:c5:f0:e6:
13:a9:5b:13:26:93:d7:e7:45:70:99:cc:e3:13:00:b4:b5:2e:
e4:55:e8:f1:14:17:fa:f7:cf:4b:bc:95:9b:06:1f:e5:13:85:
b5:d7:f0:b0:91:66:da:ff:ae:e3:42:6b:9b:89:a9:e9:cc:0e:
52:10:04:97:d1:1c:37:aa:e4:5c:9f:65:d4:23:1b:5e:42:8c:
9f:79:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:48:06 2026 by rpki-client