
$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
File: 4JyfckW5hJiukjOxmA17T0xzjQ8.mft (raw, json)
Hash identifier: gWmU/hDcA1OoxQOcRTXGnjlMWQh7G4CdvNXsgzGjPCo=
Subject key identifier: 3B:41:C0:C4:EE:E3:BF:DE:1E:BF:9A:DE:3C:A8:3F:B5:B8:D2:45:DC
Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
Certificate issuer: /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Certificate serial: 07DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
Manifest number: 07D1
Signing time: Mon 02 Mar 2026 02:27:16 +0000
Manifest this update: Mon 02 Mar 2026 02:27:15 +0000
Manifest next update: Mon 09 Mar 2026 02:27:15 +0000
Files and hashes: 1: 4JyfckW5hJiukjOxmA17T0xzjQ8.crl (hash: KFEBTlxbYC3p/H3MrqBYw4XjT/m3AiPfOLL+6h5XEZo=)
2: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (hash: 1F7Sq0lh3z209PrBTE+xR3jyBY1TlnIGSj+WUyADeNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2010 (0x7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Validity
Not Before: Mar 2 02:27:15 2026 GMT
Not After : Mar 9 02:27:15 2026 GMT
Subject: CN=69a4f584-b666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:92:aa:81:fd:73:9a:c2:54:19:fc:91:25:
43:3e:65:d8:57:cb:77:37:32:41:79:f9:30:5a:39:
1e:2a:19:5c:02:ae:c4:d5:cd:5f:00:5c:1e:bc:08:
c4:d2:52:70:56:2b:bf:f9:fb:f2:e0:06:76:d8:49:
fe:a0:eb:20:ea:10:55:8b:38:15:0c:b7:7b:39:43:
8a:a2:f3:55:fd:fa:9f:0a:9f:d8:39:80:cb:84:9a:
d6:37:43:ad:1d:59:af:e8:4a:11:d7:6b:33:3e:0b:
30:ec:8a:31:c5:5f:64:f5:34:3d:24:0d:67:ff:11:
da:f2:24:30:60:4f:5c:f8:31:f5:d2:9b:60:8e:04:
8c:43:65:2e:51:65:b0:ca:cb:01:c7:40:69:4e:8e:
41:2e:39:b1:68:51:bb:91:ff:93:11:56:77:3b:2e:
e3:cf:f6:5a:3c:4d:8d:6e:1e:97:20:1d:1e:84:ee:
7d:01:0c:6c:9e:0e:54:10:5f:6d:f5:6c:35:32:95:
56:13:61:c2:70:10:62:3d:81:af:f8:32:a1:e3:86:
a5:51:da:78:66:ab:12:7b:34:01:30:ee:4b:17:44:
62:88:48:20:af:69:36:63:f6:90:d4:52:f7:21:a9:
17:1e:a6:0a:dc:2e:33:aa:2e:d1:b8:c7:7f:f3:2d:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:41:C0:C4:EE:E3:BF:DE:1E:BF:9A:DE:3C:A8:3F:B5:B8:D2:45:DC
X509v3 Authority Key Identifier:
keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:b6:f7:12:1e:f2:e6:35:21:da:3c:68:dc:ee:32:ea:cb:0f:
3d:f1:01:12:71:c8:9f:f8:38:d2:77:95:25:17:61:4a:3f:33:
65:9d:89:fe:3f:92:e8:40:ae:c9:64:3c:72:48:03:7d:0a:d9:
38:5c:88:1e:e4:d3:ff:97:05:3d:46:d7:fd:7b:d9:b6:b6:12:
68:6e:a9:c1:5e:f0:73:57:0a:52:36:53:75:04:d7:bd:8a:46:
83:ae:37:0c:64:aa:a3:5d:61:05:1a:28:e7:46:ec:60:dc:87:
69:8e:0f:a4:3d:1a:bc:3b:ee:72:22:70:80:1e:75:cb:3e:7c:
37:e5:b5:c6:9a:bb:ea:05:ac:07:78:7c:72:9d:68:8a:80:bc:
f5:84:b8:10:67:3b:f6:26:82:81:0a:51:99:ac:46:48:f0:3d:
98:c8:8a:c5:4e:6a:63:02:2c:0d:72:1b:b6:dc:af:8f:69:89:
22:e0:b7:1a:24:29:47:a2:f0:4d:42:c9:94:7e:cd:0a:00:e9:
23:41:8b:7b:4c:a5:a9:57:c3:bc:3c:b3:8d:3f:c8:ae:f1:b0:
28:42:5c:99:b8:7b:f4:61:82:cb:f4:dd:8d:a8:80:5c:f1:c1:
bd:8b:b2:1e:49:6c:46:28:0d:fd:88:e8:7f:f8:8f:37:9f:1d:
c2:f4:dd:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI4N0YxMTAvBgNVBAUTKEUwOUM5RjcyNDVCOTg0OThBRTkyMzNCMTk4MEQ3QjRG
NEM3MzhEMEYwHhcNMjYwMzAyMDIyNzE1WhcNMjYwMzA5MDIyNzE1WjAYMRYwFAYD
VQQDEw02OWE0ZjU4NC1iNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAucaSqoH9c5rCVBn8kSVDPmXYV8t3NzJBefkwWjkeKhlcAq7E1c1fAFwevAjE
0lJwViu/+fvy4AZ22En+oOsg6hBVizgVDLd7OUOKovNV/fqfCp/YOYDLhJrWN0Ot
HVmv6EoR12szPgsw7IoxxV9k9TQ9JA1n/xHa8iQwYE9c+DH10ptgjgSMQ2UuUWWw
yssBx0BpTo5BLjmxaFG7kf+TEVZ3Oy7jz/ZaPE2Nbh6XIB0ehO59AQxsng5UEF9t
9Ww1MpVWE2HCcBBiPYGv+DKh44alUdp4ZqsSezQBMO5LF0RiiEggr2k2Y/aQ1FL3
IakXHqYK3C4zqi7RuMd/8y2PawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtBwMTu
47/eHr+a3jyoP7W40kXcMB8GA1UdIwQYMBaAFOCcn3JFuYSYrpIzsZgNe09Mc40P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjg3Ri82NDQ4OUVFMDJE
MjMxMUVCOTE5MTg0ODBDNEY5QUUwMi80SnlmY2tXNWhKaXVrak94bUExN1QweHpq
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRKeWZja1c1aEppdWtqT3htQTE3VDB4empROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mjg3Ri82NDQ4OUVFMDJEMjMxMUVCOTE5MTg0ODBDNEY5QUUwMi80SnlmY2tXNWhK
aXVrak94bUExN1QweHpqUTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWbb3Eh7y5jUh2jxo3O4y6ssPPfEBEnHIn/g40neVJRdhSj8zZZ2J/j+S6ECu
yWQ8ckgDfQrZOFyIHuTT/5cFPUbX/XvZtrYSaG6pwV7wc1cKUjZTdQTXvYpGg643
DGSqo11hBRoo50bsYNyHaY4PpD0avDvuciJwgB51yz58N+W1xpq76gWsB3h8cp1o
ioC89YS4EGc79iaCgQpRmaxGSPA9mMiKxU5qYwIsDXIbttyvj2mJIuC3GiQpR6Lw
TULJlH7NCgDpI0GLe0ylqVfDvDyzjT/IrvGwKEJcmbh79GGCy/TdjaiAXPHBvYuy
HklsRigN/Yjof/iPN58dwvTdYA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:32 2026 by rpki-client