
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier: dCSTCZyi9uIqa+RiJfwXUJsQiA3f9XUzpNeNZMARzts=
Subject key identifier: AA:7C:40:D7:2F:F1:FD:F9:78:E7:1F:FF:DF:3E:E5:58:72:EE:03:F2
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number: 01FF
Signing time: Mon 21 Sep 2026 03:12:44 +0000
Manifest this update: Mon 21 Sep 2026 03:12:43 +0000
Manifest next update: Mon 28 Sep 2026 03:12:43 +0000
Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: Ng15sOIDkU3umXN3inLtoMXWN0yxIyxjjFP5/6RYv6Y=)
2: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=)
3: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Validity
Not Before: Sep 21 03:12:43 2026 GMT
Not After : Sep 28 03:12:43 2026 GMT
Subject: CN=6ab0a0ac-324d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:84:47:cc:cf:c0:00:30:a2:48:52:0e:6d:
da:a5:a0:8e:32:6a:59:cc:8f:a4:e4:a8:83:38:db:
7c:70:7c:5e:1b:b1:2b:06:b0:c6:a1:54:ff:f0:52:
ab:ff:fd:92:30:d7:5b:16:fd:d1:88:c4:e4:6f:b3:
ae:e1:d5:89:4e:ba:d1:aa:e9:e3:07:15:4e:bb:9b:
43:e9:eb:7e:47:95:2f:2b:f5:9f:bb:3d:37:10:6d:
fb:ae:ec:5f:af:88:dd:6a:14:53:c6:21:b5:22:ed:
4f:43:70:e2:bf:55:0f:9b:04:ae:d0:ce:0f:82:10:
cf:cf:5e:40:2d:2e:f2:3a:d0:c9:5f:59:a1:03:83:
9e:7e:07:f6:e2:1a:b8:04:13:84:4f:8d:13:c7:5a:
92:2a:33:20:19:4b:e9:fb:29:a1:b3:33:f5:06:dc:
8d:1c:85:4c:6f:69:49:f9:1c:87:59:18:58:47:86:
57:66:34:ee:dc:41:29:b8:28:7d:4a:e0:34:fe:75:
b1:ea:fb:99:58:bf:26:b0:e9:b7:aa:e5:9f:03:19:
10:f1:99:5d:23:4a:a1:28:e5:06:29:c5:dd:64:cb:
7a:27:4c:70:11:c0:38:6e:e6:a5:4d:29:d1:b0:64:
52:0f:76:b6:24:93:3e:38:8c:1f:f2:4c:d3:db:0e:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7C:40:D7:2F:F1:FD:F9:78:E7:1F:FF:DF:3E:E5:58:72:EE:03:F2
X509v3 Authority Key Identifier:
keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:60:db:f1:38:af:63:33:9f:71:36:22:01:0e:95:ca:7e:1a:
26:fa:2b:f4:b0:0f:a7:c5:1c:80:2e:d0:44:bc:26:c9:29:e5:
6b:a0:9b:93:e6:c5:cb:ff:ea:4d:7e:75:99:38:08:95:f2:b8:
34:8c:77:03:9a:62:f4:eb:c0:92:b5:0f:44:b3:5a:0f:b8:82:
35:72:8c:77:f0:91:b6:7e:e8:6d:cb:39:30:c8:74:89:40:7c:
76:9e:48:7b:c7:7b:31:c1:50:99:5e:8b:1d:8e:72:07:a0:4e:
25:39:fe:b3:98:50:52:4f:7c:d4:4d:29:78:b8:fe:74:92:45:
60:04:42:44:cf:59:5c:74:c7:4d:9d:d7:0e:ab:d1:2d:b6:6e:
da:ac:b5:85:ad:6c:3a:2f:13:23:0f:4b:4b:f0:7e:79:47:90:
a0:15:96:e2:bb:0a:3f:b0:76:15:9b:ee:7b:bc:89:68:5f:c6:
12:9c:8b:03:3c:7d:f2:45:3f:a5:19:b0:99:26:a5:6c:e9:e6:
1e:3b:dc:5f:f8:79:22:3d:45:d3:96:2e:33:d3:c7:99:91:5c:
7f:74:67:0b:a2:d1:a4:0c:37:7f:17:66:a9:3f:8c:59:01:7c:
5c:c6:a2:83:80:e3:7f:19:50:70:24:38:29:62:37:57:d4:7e:
4b:50:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:14:35 2026 by rpki-client