
$ rpki-client -vvf rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
File: 4nmL4YzWTgg46agi1HhCBArIA0M.mft (raw, json)
Hash identifier: XzlcPUV9hHzB84o+yBkhXcLoHY6PHN/bttIuDQbrG7o=
Subject key identifier: D1:91:D3:69:82:76:78:53:79:83:62:DC:7F:25:54:B5:9E:74:2F:89
Authority key identifier: E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
Certificate issuer: /CN=A914823C/serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
Manifest number: 16
Signing time: Mon 15 Jun 2026 09:07:29 +0000
Manifest this update: Mon 15 Jun 2026 09:07:29 +0000
Manifest next update: Mon 22 Jun 2026 09:07:29 +0000
Files and hashes: 1: 4nmL4YzWTgg46agi1HhCBArIA0M.crl (hash: O3xzTzRRERx3tY1pmVSEtAjMvZC3RVZgBtwcKWmeGmU=)
2: DB626DF24AF111F18CF4AA40CD833773.roa (hash: Qc04/3jafq1HIqjArWLPfNu0P5WLlwA1tLsJj60Zayw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914823C, serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Validity
Not Before: Jun 15 09:07:29 2026 GMT
Not After : Jun 22 09:07:29 2026 GMT
Subject: CN=6a2fc0d1-2728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:89:ad:17:7e:ef:36:9b:cc:4d:67:11:a3:
9a:f1:f2:4b:81:00:9d:5e:03:49:eb:db:b4:0a:00:
d1:99:96:b4:21:32:af:14:51:44:08:e1:81:39:78:
4b:7a:dc:22:d7:59:e2:84:eb:00:21:2a:43:b7:1d:
d0:1a:55:45:1e:25:49:5f:c7:88:2a:03:9c:11:dd:
1e:e3:4d:5b:41:96:2f:79:1d:e7:07:cc:bc:1a:c0:
a8:7e:eb:77:fe:6d:6b:30:86:a3:a3:54:0b:56:e8:
c8:ae:ef:9a:54:59:a7:8d:a7:21:70:4f:8e:4c:f0:
15:40:de:f5:3e:5f:60:4c:dc:8f:4f:61:70:d3:23:
8c:69:50:ce:b2:e3:4a:f4:1c:fc:63:64:d1:c9:dd:
91:8d:99:00:47:f2:fd:58:f6:5e:3a:36:2d:6c:c6:
3e:2d:9a:48:9f:2a:22:17:1a:62:80:b9:1a:67:18:
08:34:9d:68:a3:54:c3:8f:31:f6:b4:cf:99:4d:dc:
e6:9d:fa:37:2a:38:6b:0e:ed:1e:67:57:47:60:d4:
4b:87:af:17:e5:03:5c:12:6f:55:d4:18:a5:31:af:
fe:ab:27:92:20:75:d5:9a:39:7e:82:be:32:0f:38:
ad:8a:b7:76:e1:14:ac:f3:89:78:76:16:97:74:53:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:91:D3:69:82:76:78:53:79:83:62:DC:7F:25:54:B5:9E:74:2F:89
X509v3 Authority Key Identifier:
keyid:E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:14:c5:8f:8e:a9:a4:30:19:fe:e6:51:5d:80:2f:e1:e2:fb:
3b:65:4e:44:30:32:e2:f1:5e:63:c9:f1:6c:97:a8:3f:97:97:
23:8a:18:d2:9b:b6:7c:3b:7c:5c:44:7a:41:23:c4:e9:c1:a6:
38:ce:66:13:56:72:6f:e3:ac:02:bc:15:8e:ac:1d:78:65:9a:
54:df:ae:81:39:4a:9c:f3:82:95:43:9c:d9:55:ad:f4:44:c4:
77:26:78:97:96:c7:4c:a4:f8:78:00:e5:53:41:76:f2:35:3b:
4c:e5:78:f8:62:ec:9f:0d:ad:79:43:31:71:5b:14:d5:20:af:
32:0d:97:7f:b8:8d:60:13:83:88:55:bd:87:d7:1f:74:5e:e9:
0e:94:e2:7e:3e:e2:e6:b0:2a:7b:81:ab:f2:52:35:35:a0:de:
d8:e4:fa:f6:4c:25:49:be:a3:15:2e:18:42:ed:53:f2:cc:08:
a7:df:24:13:c3:f6:2c:72:90:3a:eb:54:e5:34:a4:6e:8e:92:
fc:0d:d4:c7:89:4c:52:59:9e:2c:ec:6f:ab:1e:58:69:99:b6:
aa:18:73:a5:72:88:5d:1a:97:66:2a:1c:5b:57:84:aa:86:20:
df:c2:a3:06:99:1c:fd:89:56:cf:ab:b5:73:6d:35:46:cc:4c:
8a:61:d2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:55:19 2026 by rpki-client