
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
File: 4mZe42LlzFj31n9Ka3YhqkYL044.mft (raw, json)
Hash identifier: O6zB9k+ED5R8g4WaUR7+4WtkYaBqmvZYBCVxwINkxUM=
Subject key identifier: 3B:BC:B0:0F:2E:34:2D:50:E5:6F:DB:E1:29:4A:96:C6:7C:17:92:49
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Certificate issuer: /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial: 0887
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
Manifest number: 0872
Signing time: Mon 12 Oct 2026 21:05:06 +0000
Manifest this update: Mon 12 Oct 2026 21:05:06 +0000
Manifest next update: Mon 19 Oct 2026 21:05:06 +0000
Files and hashes: 1: 4mZe42LlzFj31n9Ka3YhqkYL044.crl (hash: vL/PjZotH/k1tYkLK1co3vS80BxsSEUQ4WHiRZ4bc8g=)
2: D57EF608BC6C11F0894F2331C4F9AE02.roa (hash: bxmtoo9Mi52T+qWLWPtmIQ+3oo8uoIe54/5a6/+rAEo=)
3: C08B23401DA511EBAD78BB46C4F9AE02.roa (hash: 6dxQbscKD9BpisiGIvmhEruYks1OCWVGKkbkjxYZYu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 21:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183 (0x887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Validity
Not Before: Oct 12 21:05:06 2026 GMT
Not After : Oct 19 21:05:06 2026 GMT
Subject: CN=6acd4b82-4b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:65:d5:21:7e:76:df:bf:68:fd:ff:ff:e7:6e:
dc:a3:c3:10:64:a0:05:60:4d:1f:7d:30:22:a5:39:
fa:41:0f:b3:c1:7b:94:62:5a:f4:f4:8f:59:2c:32:
67:0b:c3:1c:32:c3:a6:17:c3:22:19:eb:92:a5:77:
1d:d2:7c:8e:64:1b:3b:4e:17:89:eb:89:7b:bf:b3:
62:6a:33:f1:38:3a:87:84:a0:ad:27:34:df:9e:6d:
4d:a8:07:68:2c:ea:ef:e9:1d:f2:24:d4:fe:c2:71:
dd:32:0a:13:9e:81:aa:32:4e:84:e4:72:17:ca:3f:
d6:06:93:c9:d8:c7:17:62:84:73:5a:bf:56:a2:f3:
1f:94:82:3f:45:cd:91:8f:06:ae:30:6f:cd:a9:c1:
a0:ad:ef:2a:b8:82:0b:2d:5b:89:0e:58:14:63:fe:
bd:be:dd:d6:5c:88:f1:be:2e:7e:8c:64:bc:8d:ee:
ca:90:95:f8:73:91:7b:74:e9:5e:e2:05:f1:f1:17:
3a:1c:ca:5f:73:f3:59:29:a1:c1:b8:26:83:e5:31:
d1:60:4c:77:3a:29:b5:b5:d0:bf:74:7f:c2:f6:fc:
54:9f:a7:05:25:59:32:3e:f8:d8:a9:48:0a:29:1f:
22:2e:55:f3:99:af:23:7a:8e:29:fb:01:4d:ed:23:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:B0:0F:2E:34:2D:50:E5:6F:DB:E1:29:4A:96:C6:7C:17:92:49
X509v3 Authority Key Identifier:
keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:1f:8c:7c:9f:86:cf:8d:e3:1a:3b:db:be:8a:54:88:33:60:
06:52:42:a4:e3:ad:0f:4d:2f:1d:04:12:0b:24:4b:46:3f:df:
8d:70:d4:a9:b4:85:df:39:14:7c:74:17:da:58:dc:7b:ef:42:
ea:ce:38:b4:83:df:71:3d:a3:1a:32:f7:f2:15:78:ea:2d:cb:
c8:78:93:86:7c:2e:83:54:13:de:64:23:33:ac:aa:eb:23:b3:
c4:5c:c1:3e:83:4a:0a:0b:e0:90:53:49:75:ce:0a:aa:77:78:
8f:9d:02:b4:d5:ba:f1:91:6a:ac:27:0b:7a:f4:eb:4c:4f:ca:
67:27:40:cf:c6:6b:22:38:26:ad:8a:01:c4:e5:6c:a1:79:4f:
fe:1b:49:2a:fd:22:88:1c:0f:8f:82:29:13:f6:4e:8e:c8:70:
6c:d9:24:76:78:ab:67:8f:87:59:bb:90:24:c9:9e:14:4e:3f:
c3:25:48:7a:d9:24:de:cc:af:e4:b5:0e:9f:01:68:95:fc:5c:
69:dc:d2:cd:a3:30:d6:c3:89:09:93:f9:d3:cd:57:e6:8f:a9:
4f:a3:d4:03:25:9b:6b:52:e6:0f:a5:87:dd:52:15:c9:bc:89:
f8:cb:55:35:0d:9a:4d:0d:1b:27:d6:4a:c9:d6:48:ca:c1:e8:
3f:7a:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:35:16 2026 by rpki-client