
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json)
Hash identifier: f2r+JM8Ws5v8lD7J5Dk9Vk8xQombHaNR1INhzUiO8jQ=
Subject key identifier: 11:5C:17:89:CC:45:EA:D4:60:E4:FF:C9:24:22:A3:03:78:0B:80:3A
Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C
Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
Certificate serial: 05DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
Manifest number: 05D2
Signing time: Thu 16 Apr 2026 22:58:30 +0000
Manifest this update: Thu 16 Apr 2026 22:58:29 +0000
Manifest next update: Thu 23 Apr 2026 22:58:29 +0000
Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: cCeusARMgNpxqyfi7KB/oQBSoT/r7EY5PYFFEngi1S4=)
2: 4DF26D46067211F18F3D57B53B3D8C67.roa (hash: f6FziyQVx7683sQdlvalgQg53NovMzTPGvrr1jaYJqU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl
rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
Validity
Not Before: Apr 16 22:58:29 2026 GMT
Not After : Apr 23 22:58:29 2026 GMT
Subject: CN=69e16995-48ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:1c:92:f7:d7:39:13:68:b0:ff:20:4e:ff:
1e:bc:c2:6e:f9:34:db:f9:18:de:3e:b5:72:94:ce:
07:d6:1f:60:4c:21:c4:2c:90:17:b7:1a:0f:51:e3:
21:5c:7b:0a:48:1e:a5:d0:be:a9:cb:96:35:6c:bd:
ea:c6:3c:ea:94:03:a2:a6:40:a5:6d:0b:06:ce:48:
8c:77:11:35:cb:3c:59:fc:69:d9:63:59:6b:55:ec:
7e:bd:a0:f9:bd:24:0b:a9:10:fc:67:77:6a:68:b2:
41:64:7f:d3:50:54:7b:94:9b:2f:2e:02:0a:21:4b:
be:cc:13:1f:4c:6e:a1:3e:88:89:75:bf:f9:d2:02:
9f:f1:4e:a6:1c:9b:e5:49:fe:13:1f:31:60:e7:2e:
38:31:8d:1b:18:fa:11:73:93:18:fe:d9:8c:a1:37:
25:ec:b8:f6:66:a6:bc:f9:ad:7c:88:0f:15:64:16:
bb:96:9d:a3:0d:b1:cd:e9:68:56:4e:0c:a4:84:be:
21:09:57:02:a8:ba:db:cc:33:59:92:a8:6b:90:e9:
44:38:a5:df:3f:ce:3c:aa:a9:2d:03:75:cc:d3:23:
6e:8d:c4:59:a8:8b:9d:c9:5d:28:81:a3:1a:71:be:
6b:52:9f:c2:8b:1b:91:dd:fa:ac:a0:24:3d:ac:56:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5C:17:89:CC:45:EA:D4:60:E4:FF:C9:24:22:A3:03:78:0B:80:3A
X509v3 Authority Key Identifier:
keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:26:48:8c:6e:0b:56:85:06:da:01:cb:18:79:26:f6:c1:73:
09:63:3c:01:26:fe:c5:75:df:09:99:95:2d:e0:58:11:97:49:
69:7c:dd:bd:c8:4c:8f:9b:ec:d7:c4:25:bd:41:08:91:95:ba:
ba:1a:b5:ed:08:fd:50:0b:ac:67:ca:44:c7:a9:26:67:73:f7:
9f:ce:a0:93:c9:ca:bb:f4:3c:eb:76:fc:6e:2c:cc:69:d6:8f:
8e:c0:38:07:4f:cd:10:73:6f:c9:14:2a:70:19:da:e9:96:92:
3e:e0:6b:af:20:f6:8c:cd:d3:de:a9:34:0b:1e:eb:81:0d:06:
ea:53:80:d4:f0:a8:ef:84:22:28:af:57:ae:d6:f5:6a:d3:3a:
38:e4:79:2b:bf:a0:d6:2f:35:3e:4d:4d:7c:0c:ec:15:76:b4:
e6:d5:88:33:0c:df:eb:e1:61:12:f9:89:b3:b5:e3:27:bc:0f:
fd:7e:73:de:3c:62:66:b1:ee:fc:63:2b:0a:a9:40:a1:13:23:
e9:d2:c6:09:88:99:a1:2c:bc:a7:4b:ad:3a:aa:72:14:cb:36:
ce:6f:5d:aa:60:39:35:ff:32:e4:eb:d9:34:f9:3e:6a:6a:17:
57:5e:b9:90:2e:cd:56:98:2c:0b:36:42:8f:a3:7e:56:dc:09:
a4:82:a6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:56 2026 by rpki-client