
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json)
Hash identifier: WERcvV2iU4KXQj0y/nEZ9CLyRfhAb95QGEV/cnynTxk=
Subject key identifier: A1:D1:23:07:F0:25:E1:6B:20:78:6A:2A:95:28:76:F5:0B:E9:94:1D
Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85
Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
Certificate serial: 087A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
Manifest number: 086C
Signing time: Fri 12 Jun 2026 20:47:45 +0000
Manifest this update: Fri 12 Jun 2026 20:47:44 +0000
Manifest next update: Fri 19 Jun 2026 20:47:44 +0000
Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: emScaQmuMW2djN3Eqe4yhVDgokSqkkXnl6+SLk1gotE=)
2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: 8slOQpxcJ7i4Fqpb2U0NO9KtNpjmpZLi6X29SuRjdfI=)
3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: mcE/kCUcZ9XtkapXLq0nvxx/GVcFi46zNxigdP3tLvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl
rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2170 (0x87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
Validity
Not Before: Jun 12 20:47:44 2026 GMT
Not After : Jun 19 20:47:44 2026 GMT
Subject: CN=6a2c7071-b902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:c9:38:42:34:88:3a:5d:9b:b4:48:24:53:
03:d2:1d:be:cb:3e:6f:4c:dd:31:37:c5:7b:3d:43:
c2:a0:43:9c:c6:6a:5f:58:63:07:84:48:6c:63:21:
16:ce:4e:58:e4:a2:d7:de:8a:68:96:4d:4d:ba:23:
26:fb:36:75:53:a5:09:b9:d0:df:9c:b8:6f:fa:6d:
a1:6c:37:86:62:b8:87:fa:14:27:c1:0a:49:02:b7:
84:44:ec:57:70:b2:97:c3:73:d9:b1:e4:2f:ee:6e:
0a:0c:bb:56:e9:9f:86:97:4f:1c:e4:25:08:f8:23:
90:5a:e8:df:a7:26:42:2b:03:d4:2d:cd:a7:fe:c9:
d6:10:19:15:ba:7d:58:f1:43:45:34:2c:3f:1a:c4:
e2:bb:81:63:32:e1:33:db:9d:28:73:2e:1b:d0:ee:
9f:ea:93:9f:51:17:7b:60:b1:31:40:58:3e:26:ad:
c9:70:45:cb:36:78:5e:cb:14:c9:0a:09:e3:f2:9d:
f8:ed:e7:75:1d:b0:ee:00:57:cf:93:f1:b8:db:d4:
e8:21:3c:86:a4:78:05:66:07:ea:99:ee:a3:4a:22:
8d:56:81:32:66:0d:2c:4d:ef:71:c4:25:69:78:8f:
5c:bb:16:b5:e8:65:58:5b:5b:47:c5:3c:43:ce:82:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:23:07:F0:25:E1:6B:20:78:6A:2A:95:28:76:F5:0B:E9:94:1D
X509v3 Authority Key Identifier:
keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f8:30:ab:47:79:07:bb:3f:c1:a6:0e:4b:f9:09:b7:f1:a1:
9b:21:99:67:45:35:0c:c8:03:9a:b6:47:d1:89:0c:7f:9a:ae:
b3:08:50:1b:6e:c0:0d:52:32:3a:82:ad:f5:d8:7d:26:a2:4f:
5b:63:2b:9a:62:93:cf:84:4f:86:a0:f0:b8:49:38:2d:ec:a6:
d1:3a:49:48:10:d1:88:dd:5f:af:5f:43:02:af:9e:90:9a:7b:
2a:40:96:ab:9b:4e:68:cc:70:43:40:da:54:7e:54:f0:87:89:
38:e2:5f:18:a0:4a:17:59:73:d7:89:9a:0e:8a:f0:b0:a5:51:
4d:bf:97:c5:f0:14:ca:62:7f:a9:7a:f2:8f:8b:7f:c1:13:d5:
02:5b:08:55:98:45:df:ef:c1:e4:06:c1:3d:46:43:ca:47:d5:
fa:18:e9:86:73:e4:95:59:d4:1c:de:15:fa:ee:54:c9:0a:f8:
ba:23:ef:6f:b0:75:8c:6d:6d:35:cb:09:00:0f:51:7b:0c:ea:
12:9d:59:4a:9d:15:c4:2e:c6:5d:d3:4e:38:46:df:3c:86:a4:
ca:c5:5b:ba:93:0d:f8:08:5e:0a:f1:0e:3b:32:10:85:c0:52:
d6:a1:a8:bb:df:c8:58:f2:d6:12:23:c6:64:a2:6e:64:5e:62:
17:72:4d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:31 2026 by rpki-client