
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
File: 4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft (raw, json)
Hash identifier: U1jeMyumZd3slOKxbUhS84LlAuU7JdRGyg7vGgo+O74=
Subject key identifier: 8E:39:89:8D:55:DE:E8:CC:61:A0:11:44:88:E7:62:99:FB:6B:75:77
Authority key identifier: E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1
Certificate issuer: /CN=A914882C/serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
Manifest number: 0CC8
Signing time: Mon 12 Oct 2026 18:51:28 +0000
Manifest this update: Mon 12 Oct 2026 18:51:27 +0000
Manifest next update: Mon 19 Oct 2026 18:51:27 +0000
Files and hashes: 1: 4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl (hash: Ohb6BQVBMmodfORhk1REmQ7QWPbuXrQ0WVExSj46lj4=)
2: 2872362213AC11F18E65BA7479EE528E.roa (hash: yg3DGNwLO01K3NtVfA2Oj4hQOOX3hfO+/m/S6eY0LII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl
rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 18:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914882C, serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
Validity
Not Before: Oct 12 18:51:27 2026 GMT
Not After : Oct 19 18:51:27 2026 GMT
Subject: CN=6acd2c30-0d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4c:a3:e4:2d:5b:73:eb:79:45:f2:47:86:ea:
61:b8:2c:01:cf:d1:01:cf:1c:14:c4:52:9a:c1:fd:
1d:f3:16:a4:91:6a:ed:16:3d:98:4a:5b:84:38:e2:
a3:f5:83:c9:77:7d:e8:32:43:f5:33:06:d2:47:e7:
4d:e5:80:48:f5:52:3c:70:3a:8b:28:1b:ca:ae:66:
7f:40:ea:8d:55:11:d8:2f:6b:ce:eb:5f:6f:bb:3b:
33:5e:ff:7e:4b:d7:0a:57:29:6e:23:97:8d:93:f2:
cf:1a:39:f1:7c:c5:7a:ef:51:3f:67:b8:7c:42:16:
01:3e:be:8e:fb:30:fa:fb:fa:99:32:59:32:4e:95:
53:c3:c1:43:10:2b:8c:68:fc:7d:87:c5:18:df:c6:
93:ce:d4:2e:7a:9b:9b:d2:3a:50:8e:c3:b0:1b:98:
09:84:e1:ae:f9:02:c9:a9:ad:3e:fa:16:33:e2:42:
4a:2b:37:5d:d0:c0:20:ed:6b:77:e8:87:96:88:8e:
f1:c4:6c:09:83:92:27:9c:f6:6f:d4:07:60:4e:ab:
a6:24:2f:65:f8:e1:ed:51:8b:97:c8:01:fd:65:3a:
78:5f:b8:ae:63:6c:ef:6e:a8:6a:ed:44:55:a5:5b:
04:77:91:c6:c4:e6:e2:05:ae:12:b1:83:bf:46:90:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:89:8D:55:DE:E8:CC:61:A0:11:44:88:E7:62:99:FB:6B:75:77
X509v3 Authority Key Identifier:
keyid:E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:8a:03:85:62:fd:63:c3:04:75:21:48:a9:62:9f:5d:68:71:
fa:d7:73:70:22:58:a2:f4:97:68:d5:9f:25:9d:8f:37:ab:41:
35:4a:e1:da:e2:91:15:59:07:f9:7a:a3:5e:24:ef:a0:8c:f9:
fb:ac:13:ce:b5:54:11:b1:6d:36:89:7b:76:50:01:66:e1:63:
ec:4e:16:43:44:f7:83:54:16:10:9f:92:39:9e:a1:10:81:b1:
e5:9f:33:bf:01:0b:c4:ae:ea:92:60:8a:91:a7:d1:89:f6:9a:
73:8c:9c:fb:73:4c:21:f0:36:93:8e:21:0e:dd:39:02:51:77:
96:4a:d5:b0:df:52:54:74:4d:0a:50:a7:84:87:44:4d:2e:76:
df:24:f4:c0:b0:04:f8:f2:d3:f6:70:9e:85:f6:5f:a9:1a:13:
f2:e9:10:86:4d:e1:23:43:b9:4f:b0:07:96:01:84:a0:ce:d7:
46:38:b1:6b:d7:05:a3:e6:4a:07:10:2b:61:29:af:93:8c:04:
7f:7d:6b:3d:ea:d6:f1:3d:8e:33:ea:a7:1d:e4:c4:52:f4:54:
61:55:37:9b:d9:13:c4:4f:c4:39:c0:f0:cb:2d:52:70:53:53:
db:f3:18:9d:2b:73:1d:51:19:27:95:7b:bc:b3:ec:ef:6f:38:
08:e3:91:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:21:30 2026 by rpki-client