
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier: gejVpcwmNqMQTsPOFxd2v3ZXdT5HYFLTDeQItxjJtY8=
Subject key identifier: B4:0A:7C:27:42:AC:F2:17:2E:8F:00:D1:B6:47:8C:3F:C2:FB:A1:88
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial: 01EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number: 01E2
Signing time: Mon 27 Jul 2026 05:07:47 +0000
Manifest this update: Mon 27 Jul 2026 05:07:46 +0000
Manifest next update: Mon 03 Aug 2026 05:07:46 +0000
Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: PSKD9F59RvBTAtnIq/5knCjlIQQ7ixuSumqla4eNFCY=)
2: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=)
3: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Validity
Not Before: Jul 27 05:07:46 2026 GMT
Not After : Aug 3 05:07:46 2026 GMT
Subject: CN=6a66e7a3-6c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:da:98:c0:21:2a:f3:ca:4f:15:9a:c1:69:
ea:08:c9:91:24:96:c0:86:ff:eb:61:79:e5:54:29:
e3:07:f1:75:63:fa:79:9d:df:f0:eb:38:73:05:ae:
85:0b:18:3e:35:55:84:57:48:73:95:31:d7:5c:32:
10:49:2d:42:21:16:43:f7:4b:e7:93:67:d0:7a:d9:
2e:a3:09:73:33:b7:5c:e2:bd:73:39:11:ea:bd:09:
aa:dc:a0:34:fe:c8:28:9c:6c:92:6c:14:89:bf:58:
04:f4:5c:d1:bb:f3:a4:c8:1e:a0:9b:c3:32:16:4e:
bb:9f:9b:81:c0:db:71:9a:d2:52:43:7b:70:b8:d4:
fb:68:5d:d9:c8:2b:e7:f7:7c:39:65:70:63:2b:3c:
61:c0:56:27:bb:90:e5:4c:31:b3:ee:08:ab:75:83:
29:ca:1c:32:1b:04:12:fb:e4:15:93:37:6b:3b:d7:
96:fa:5c:8b:a3:9f:9e:23:57:98:ee:b5:3b:65:4b:
a6:f7:22:a4:4f:3d:2a:3c:61:7c:1f:b9:8a:56:4e:
e0:ec:0b:31:1a:49:4c:1d:12:25:5f:2d:97:17:d0:
69:1b:f2:8e:07:89:e2:ae:e5:cd:59:96:79:b6:9e:
cc:c4:df:69:9f:0b:8b:a1:31:d0:e6:b1:44:4e:37:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:7C:27:42:AC:F2:17:2E:8F:00:D1:B6:47:8C:3F:C2:FB:A1:88
X509v3 Authority Key Identifier:
keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:21:8a:b3:1b:ea:32:19:fe:dd:f7:31:94:97:06:90:e4:07:
51:19:16:a3:f6:25:a2:52:96:b5:c9:47:5b:8f:dc:b5:b8:ab:
9a:d6:92:26:c2:4a:3b:b1:ef:1e:af:90:eb:7e:49:0d:82:0d:
ce:60:dd:a3:38:af:7c:04:c1:7a:c5:c1:94:db:dc:d7:d5:5b:
1c:8f:37:19:f7:a6:18:78:f0:0b:08:36:e3:db:1c:fa:06:97:
19:21:9e:d2:1e:85:5d:70:71:b3:15:f4:c0:dd:5c:0d:72:ba:
ac:09:75:2f:cb:14:e9:e7:64:2d:60:b8:9f:7b:b9:89:5a:ef:
22:b5:ef:9c:a5:20:f2:e6:15:2e:43:10:34:bf:b8:0c:aa:a7:
9c:c6:2d:b5:fb:68:cc:88:83:70:ee:d1:89:d1:19:8f:3f:18:
f9:5f:87:bf:14:9e:27:02:34:11:22:b9:aa:37:6d:3f:9a:e7:
bf:b0:67:b1:59:39:1d:32:79:29:98:e2:11:b1:3e:82:a2:e0:
63:aa:c1:5d:df:d8:86:70:7f:3e:e4:b5:3b:fc:65:da:2b:56:
2d:f9:bf:22:9f:1e:52:db:e6:a5:68:c2:d6:82:29:0a:d2:b6:
26:d3:31:dc:84:29:7f:d8:fd:49:7b:0a:c4:72:b6:9d:32:05:
70:49:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:05:20 2026 by rpki-client