
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
File: 4nmL4YzWTgg46agi1HhCBArIA0M.mft (raw, json)
Hash identifier: rPFHzZL76VuXhRdkz8DfMKOLGcqLNdQd8b/Lm7YEy3Q=
Subject key identifier: BF:26:F0:49:1D:7C:DE:AF:D5:ED:78:9E:45:E6:11:40:BA:37:84:93
Authority key identifier: E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
Certificate issuer: /CN=A914823C/serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
Manifest number: 4F
Signing time: Wed 07 Oct 2026 08:55:13 +0000
Manifest this update: Wed 07 Oct 2026 08:55:12 +0000
Manifest next update: Wed 14 Oct 2026 08:55:12 +0000
Files and hashes: 1: 4nmL4YzWTgg46agi1HhCBArIA0M.crl (hash: ImRgotVkb+jdS2Tis5Q3IxmKxgCDHZN3LvBirzNWeCw=)
2: DB626DF24AF111F18CF4AA40CD833773.roa (hash: Qc04/3jafq1HIqjArWLPfNu0P5WLlwA1tLsJj60Zayw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914823C, serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Validity
Not Before: Oct 7 08:55:12 2026 GMT
Not After : Oct 14 08:55:12 2026 GMT
Subject: CN=6ac608f1-2891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:4b:ce:c3:c2:be:21:26:90:e4:90:f6:ca:
e7:f4:5a:bf:67:12:d7:e3:77:8c:69:1f:10:cf:b4:
40:37:1c:1c:ef:af:42:9f:d8:a8:dc:14:13:54:9d:
48:12:be:45:00:9e:78:a8:a6:2f:3f:c3:7e:c5:5b:
ce:45:27:31:cb:e9:67:7b:59:90:f5:ea:a4:40:31:
6b:76:19:fb:cd:00:c0:7c:f5:db:56:c3:e7:83:53:
07:98:f0:f6:24:20:b9:6a:5d:ad:ab:af:fd:b3:4c:
e0:01:08:c1:b0:dd:94:7d:45:94:32:9a:3d:c5:61:
e5:d7:d5:70:78:f2:7d:5b:ed:f2:36:d1:93:b6:fe:
f0:3d:51:d2:51:11:59:39:3e:1a:55:86:40:e1:ed:
97:2f:74:1f:22:82:1c:4b:35:e6:17:0d:30:54:59:
86:ff:de:db:5d:c3:d1:5b:3a:b0:da:67:3f:d3:25:
12:ea:5c:c8:94:ba:66:60:da:11:f6:2b:53:9f:99:
8f:3d:52:ac:11:e3:a1:c0:5e:e2:e1:ae:01:bf:88:
68:99:d8:07:a9:04:c6:cd:1a:c7:ad:52:6d:46:ac:
22:05:dc:df:b7:b3:49:d0:79:c2:e1:c1:28:18:18:
12:94:87:3c:75:43:68:05:26:22:ce:ac:2b:f5:9c:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:26:F0:49:1D:7C:DE:AF:D5:ED:78:9E:45:E6:11:40:BA:37:84:93
X509v3 Authority Key Identifier:
keyid:E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0f:0e:20:c5:d1:b7:24:cb:b9:62:c3:72:3a:d8:ad:87:56:
66:8b:40:6e:8e:5d:7e:eb:05:27:f8:97:05:97:75:dd:ce:6d:
8f:2c:e3:f6:aa:35:0e:b4:d4:3e:6c:32:57:df:e0:a2:4a:9a:
44:a7:c8:3c:3c:33:97:a8:90:93:d3:09:80:41:79:a5:5d:6e:
59:14:08:6c:24:58:35:8a:03:29:9b:73:3c:16:4e:3a:7d:c0:
d1:35:a6:95:e1:66:ed:dc:02:25:dc:7b:6a:ab:dc:f5:1c:bf:
85:42:d4:63:88:a9:51:9c:8c:7e:50:43:47:05:49:4f:6b:e6:
eb:d2:c9:bc:fa:32:ad:93:ba:81:1b:22:48:c0:47:79:ea:33:
5b:d1:9a:5e:52:6f:dd:63:1e:80:b9:a3:31:e7:46:68:a1:12:
18:a1:c5:da:4e:01:1c:98:5b:16:87:af:2d:9d:7a:b5:e7:ed:
7c:29:04:c5:ce:4a:04:25:b5:51:75:e5:4e:af:5c:30:c2:8b:
f9:07:63:54:48:5a:76:ba:4b:93:ce:8e:38:7d:70:97:3f:da:
45:32:9b:61:cf:6f:4b:60:78:3f:d5:bb:9d:44:e3:54:79:3c:
a7:b9:68:97:05:7f:ef:fb:e3:0f:00:a0:9b:e3:d6:2e:35:f8:
d1:80:3d:cc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
ODIzQzExMC8GA1UEBRMoRTI3OThCRTE4Q0Q2NEUwODM4RTlBODIyRDQ3ODQyMDQw
QUM4MDM0MzAeFw0yNjEwMDcwODU1MTJaFw0yNjEwMTQwODU1MTJaMBgxFjAUBgNV
BAMTDTZhYzYwOGYxLTI4OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCz1kvOw8K+ISaQ5JD2yuf0Wr9nEtfjd4xpHxDPtEA3HBzvr0Kf2KjcFBNUnUgS
vkUAnniopi8/w37FW85FJzHL6Wd7WZD16qRAMWt2GfvNAMB89dtWw+eDUweY8PYk
ILlqXa2rr/2zTOABCMGw3ZR9RZQymj3FYeXX1XB48n1b7fI20ZO2/vA9UdJREVk5
PhpVhkDh7ZcvdB8ighxLNeYXDTBUWYb/3ttdw9FbOrDaZz/TJRLqXMiUumZg2hH2
K1OfmY89UqwR46HAXuLhrgG/iGiZ2AepBMbNGsetUm1GrCIF3N+3s0nQecLhwSgY
GBKUhzx1Q2gFJiLOrCv1nKH9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvybwSR18
3q/V7XieReYRQLo3hJMwHwYDVR0jBBgwFoAU4nmL4YzWTgg46agi1HhCBArIA0Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4MjNDL0EzMDhEMEQwNEFD
QTExRjFBNDQ1OTRCMUMwODMzNzczLzRubUw0WXpXVGdnNDZhZ2kxSGhDQkFySUEw
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNG5tTDRZeldUZ2c0NmFnaTFIaENCQXJJQTBNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4
MjNDL0EzMDhEMEQwNEFDQTExRjFBNDQ1OTRCMUMwODMzNzczLzRubUw0WXpXVGdn
NDZhZ2kxSGhDQkFySUEwTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBvDw4gxdG3JMu5YsNyOtith1Zmi0Bujl1+6wUn+JcFl3Xdzm2PLOP2qjUOtNQ+
bDJX3+CiSppEp8g8PDOXqJCT0wmAQXmlXW5ZFAhsJFg1igMpm3M8Fk46fcDRNaaV
4Wbt3AIl3Htqq9z1HL+FQtRjiKlRnIx+UENHBUlPa+br0sm8+jKtk7qBGyJIwEd5
6jNb0ZpeUm/dYx6AuaMx50ZooRIYocXaTgEcmFsWh68tnXq15+18KQTFzkoEJbVR
deVOr1wwwov5B2NUSFp2ukuTzo44fXCXP9pFMpthz29LYHg/1budRONUeTynuWiX
BX/v++MPAKCb49YuNfjRgD3M
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:49:34 2026 by rpki-client