
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier: wV6qzCj8SHc4fR+InOR/JbJ4ottEELYi2O0hKDFyg0Q=
Subject key identifier: 6C:11:EE:48:1A:7B:71:DC:8B:B0:57:4C:74:8B:01:1E:12:3D:53:A3
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number: 01CC
Signing time: Sat 13 Jun 2026 03:44:23 +0000
Manifest this update: Sat 13 Jun 2026 03:44:23 +0000
Manifest next update: Sat 20 Jun 2026 03:44:23 +0000
Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: M2XwGIvcryBNe5ZxdNXIJcySsU7E7AyhdOcFpCL8Lx8=)
2: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=)
3: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Validity
Not Before: Jun 13 03:44:23 2026 GMT
Not After : Jun 20 03:44:23 2026 GMT
Subject: CN=6a2cd217-e636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:6f:9c:ba:f0:e5:4a:78:81:aa:37:0f:44:
a1:74:ef:41:e1:49:c1:90:14:5e:d2:50:e6:d5:bf:
83:49:c3:a1:ca:9a:28:12:df:bb:4f:44:be:87:d5:
d4:22:55:07:44:f8:b4:f2:ac:fc:81:02:fc:68:2d:
8b:b9:e2:5b:62:7f:2f:d5:a8:91:03:54:61:87:03:
ce:8c:1c:20:94:0e:f7:6a:25:43:e9:ea:3c:24:27:
b5:69:15:f6:16:0b:58:f8:91:fd:74:ea:a8:8d:6c:
83:06:b5:20:e1:40:05:c2:e9:16:fd:05:48:96:f5:
53:68:8e:d7:13:3e:47:6e:63:d1:37:f6:6b:71:c6:
20:94:4c:82:6b:99:95:39:2d:9e:72:07:8f:20:7f:
a0:86:aa:78:92:65:ee:0f:94:14:fe:00:9e:19:61:
69:05:5d:ae:69:2a:6a:41:e1:f5:65:f7:ac:8a:8a:
4c:03:84:7b:7e:b0:cc:16:f0:c2:59:08:fe:ed:08:
08:4b:68:7f:c5:55:ef:33:36:ab:d3:1e:17:99:8b:
c3:e8:ac:64:e5:a1:d5:54:82:62:63:4e:78:f8:46:
70:6c:ab:c8:de:5a:d7:80:58:18:ef:95:ff:98:84:
fe:13:a1:2d:f0:b4:df:6c:fe:89:d6:5d:82:3a:b4:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:11:EE:48:1A:7B:71:DC:8B:B0:57:4C:74:8B:01:1E:12:3D:53:A3
X509v3 Authority Key Identifier:
keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:50:ff:4c:31:96:b0:9b:32:0e:9e:86:6a:ca:17:f0:03:ca:
1b:da:2f:37:7a:c3:ff:cd:59:1d:01:da:2c:3a:90:cc:34:c5:
fd:78:84:61:bc:24:bf:0f:a1:24:03:21:44:54:29:6d:d4:1a:
d5:78:51:b2:19:83:1b:91:f0:6d:d6:94:99:56:d9:aa:5e:3a:
54:c6:7b:35:f6:6a:9e:32:57:60:f0:9b:3a:d4:2d:e4:4e:70:
27:ff:5a:94:03:87:af:57:4e:35:77:bd:bf:b0:f9:a5:4d:57:
76:b6:e3:7b:59:45:90:d8:69:64:dc:dd:d6:84:cb:bf:73:78:
8f:ff:99:75:93:42:bc:4c:31:a6:fd:e7:3a:54:8b:02:91:3a:
79:06:2a:fc:38:00:4e:d0:3d:b0:f9:45:7e:11:9c:d4:71:c9:
c1:1e:e5:17:93:23:87:87:37:63:7c:9e:61:53:39:3e:da:d3:
e8:73:7a:60:c5:3c:e6:29:38:c7:a5:92:4f:29:f8:22:ae:80:
5a:52:9a:34:f4:16:e0:00:fe:f7:20:e5:39:0f:e4:77:26:75:
3a:0a:e4:87:77:04:e7:bf:b0:fb:c8:73:10:c8:d4:cf:ee:03:
31:af:c1:aa:30:86:88:38:72:70:06:10:cf:85:a9:61:9a:11:
07:5a:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:30:51 2026 by rpki-client