
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
File: 4mcctGrTmxwXJOxjzVOymz5IHpk.mft (raw, json)
Hash identifier: c9KPfXW9FlaJkFkDDLQ2a/wNdiEtmmWQrGtdj+opqqg=
Subject key identifier: 97:79:6A:54:AA:44:D1:D2:6D:C3:49:65:E8:3D:08:2C:BD:61:23:72
Authority key identifier: E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99
Certificate issuer: /CN=A914145F/serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
Manifest number: 73
Signing time: Tue 13 Oct 2026 08:33:32 +0000
Manifest this update: Tue 13 Oct 2026 08:33:32 +0000
Manifest next update: Tue 20 Oct 2026 08:33:32 +0000
Files and hashes: 1: 4mcctGrTmxwXJOxjzVOymz5IHpk.crl (hash: UlOLZu07xAAab1PMsq2u7MX9uHrCXApYsRTKK80QAX8=)
2: 2D0F8E9E16BA11F18FA4AADE273D8C67.roa (hash: yWwtKIoGzkza5ajepsaaRnUFxlesI9AwU+G4CnGMim4=)
3: 2C8A1D2C16BA11F18FA4AADE273D8C67.roa (hash: twoRF5oqlZ7HCh1Oa3drRkDKu566LB667OHWRh/w7Jg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl
rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 08:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914145F, serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
Validity
Not Before: Oct 13 08:33:32 2026 GMT
Not After : Oct 20 08:33:32 2026 GMT
Subject: CN=6acdecdc-1bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:86:29:dc:dc:a7:fb:c2:f5:24:9d:d8:50:
41:dc:7d:01:37:8e:07:e6:94:06:c8:81:ab:0a:6b:
75:62:9a:20:5f:ca:76:8b:14:b9:73:b3:fa:fe:b0:
b6:8a:21:ce:82:07:e3:52:1b:c3:d9:b9:ff:83:89:
02:8f:10:00:f5:81:39:f3:61:9c:8f:6e:67:58:63:
d2:95:58:63:80:87:85:7c:e4:11:b9:69:c0:f5:c8:
ef:10:51:ad:e8:ff:3f:66:2a:71:7a:bb:a5:c0:81:
c5:05:f4:61:0b:f0:01:b0:14:fc:d7:2b:5d:d8:7b:
48:ea:77:88:4d:8a:55:3f:26:c4:f4:f6:c9:ca:82:
c8:b8:e9:a9:e3:17:69:6d:7b:50:c9:e8:e3:74:0b:
ee:f2:27:fe:32:b8:ff:ca:c8:07:21:af:77:6a:3d:
99:58:84:10:02:05:83:1e:f7:00:72:50:a4:fe:16:
1e:59:ef:71:0a:99:39:6a:21:e9:64:03:37:ff:08:
d6:b6:a5:0d:96:8a:e6:6a:7b:9b:15:40:b7:f8:52:
0c:eb:7b:6e:1d:5f:56:1f:a9:7f:cf:6a:42:45:4d:
0d:88:3d:2e:08:66:57:c3:0a:4d:e8:fe:23:e4:81:
4d:1f:94:83:06:90:07:8b:35:f9:1d:e7:5e:8f:7e:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:79:6A:54:AA:44:D1:D2:6D:C3:49:65:E8:3D:08:2C:BD:61:23:72
X509v3 Authority Key Identifier:
keyid:E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fe:aa:77:e9:fb:80:57:74:e0:ba:81:8a:05:3d:a7:7f:63:
d5:37:8b:68:29:45:73:f8:30:ce:58:4f:fc:02:0b:38:42:f6:
51:e0:fc:30:3a:1f:54:3a:2b:e1:98:73:e4:b0:92:5e:d4:bf:
4c:55:34:90:0e:a4:73:d8:bb:01:f6:90:02:f2:d8:09:3c:d3:
bf:40:b2:48:23:6e:4b:5e:bc:28:75:47:23:05:bb:6d:f2:d5:
53:19:e1:fd:ea:67:49:29:d2:52:9a:04:98:fd:3a:1b:3b:31:
33:36:f2:9d:d4:55:0f:f2:ca:b6:07:eb:1b:f2:e1:0f:6d:8a:
28:e7:97:e0:2e:c1:80:ed:23:aa:6e:bb:e5:e8:8b:d9:77:18:
f2:41:bd:4d:cf:3e:4d:6c:51:d5:78:a1:65:73:00:5c:25:1c:
fb:18:45:ed:41:c4:90:78:29:81:7a:6a:7d:7f:39:b6:b4:85:
f8:94:79:5d:37:cf:14:33:c9:f8:5c:ca:d5:dc:5e:0b:b5:c7:
c8:59:00:61:98:d9:11:fb:17:e0:cf:8f:9d:73:fa:f1:c2:bc:
7a:8d:63:6e:f6:0f:27:2d:79:b6:fe:69:a3:29:a1:72:f1:df:
7e:aa:18:d0:13:fb:ae:8e:99:48:09:e4:2c:b8:a7:e7:1c:9a:
33:67:0a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:10:22 2026 by rpki-client