
$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
File: 4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft (raw, json)
Hash identifier: 06xr+OWgOsAhMX6oSNp6aJ7eWMbQ4SeBlK77onH+Kyc=
Subject key identifier: 60:5A:7F:BF:69:A4:FF:5A:D5:C3:9C:83:5B:62:0B:F9:91:F6:D6:7D
Authority key identifier: E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1
Certificate issuer: /CN=A914882C/serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
Manifest number: 0BDC
Signing time: Sat 28 Feb 2026 19:07:44 +0000
Manifest this update: Sat 28 Feb 2026 19:07:43 +0000
Manifest next update: Sat 07 Mar 2026 19:07:43 +0000
Files and hashes: 1: 4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl (hash: nc9ZK0F3yumZG2lM9irXADSnBgrYaKPxs6G0pUfEbLY=)
2: 2872362213AC11F18E65BA7479EE528E.roa (hash: zwhZsMZym3Pi7bGCJJd0vKw67A8/+EmFl5VCYngVch4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl
rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914882C, serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
Validity
Not Before: Feb 28 19:07:43 2026 GMT
Not After : Mar 7 19:07:43 2026 GMT
Subject: CN=69a33d00-e1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:7a:49:aa:bb:92:bf:4c:9a:64:bb:68:51:
55:13:c8:b4:38:e7:6c:0f:b0:82:7b:ec:a7:bb:b4:
e3:db:01:63:44:4c:c9:3a:ad:cc:6e:65:95:8a:54:
91:9b:ef:81:04:bb:c1:40:2d:ac:bf:23:58:1b:d0:
59:71:8f:38:b8:2d:84:08:31:b7:67:b5:11:f3:cb:
c4:a1:37:24:36:06:5d:b4:50:a4:c7:29:c0:c2:b7:
38:bb:82:8b:e7:d6:c8:d4:8b:71:66:91:0a:03:23:
ee:84:a7:8d:3f:4a:44:5e:38:4c:6e:4b:de:7d:43:
26:0e:47:22:72:55:67:96:ea:c9:a7:e9:e0:d1:b0:
d6:10:dc:96:ed:12:bf:3e:33:ed:69:95:8a:d6:c5:
ca:64:6a:41:e1:da:67:8d:28:8e:a0:cb:ff:f3:cf:
50:1d:90:46:bc:b7:31:3f:ee:4c:40:a6:4e:55:5f:
f1:27:49:18:f4:c1:1c:cf:6d:97:b2:c6:21:26:37:
f4:36:5d:5e:b9:dd:48:ef:0a:33:93:a7:bf:84:dd:
b8:6c:1c:b3:4c:cf:c8:e4:5a:f5:fb:1b:77:41:29:
4e:6b:3b:81:48:c5:5c:a8:b4:e3:c2:84:c2:17:8d:
c1:34:02:c7:f4:1a:df:62:f1:ee:b2:b7:f0:70:06:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:7F:BF:69:A4:FF:5A:D5:C3:9C:83:5B:62:0B:F9:91:F6:D6:7D
X509v3 Authority Key Identifier:
keyid:E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f4:bd:60:f2:cd:7c:90:0e:a0:a7:54:7a:1c:4e:31:9a:40:
d6:44:76:e7:a7:74:c5:f5:9e:54:a1:7f:f1:90:d3:4f:29:52:
00:75:1a:12:93:74:e4:bb:04:77:70:f2:b7:7d:ae:00:b8:53:
5e:49:d7:7b:fc:7b:a9:0a:cc:1c:da:4b:ca:6a:0d:7b:1b:53:
12:cf:86:76:ee:22:91:92:bf:f3:4f:04:20:a4:dd:4e:53:2f:
3d:03:7d:64:e9:9b:8e:90:2a:27:11:03:37:c1:6b:29:b6:9d:
df:f3:bb:a8:71:38:c0:88:bd:41:c4:0b:48:20:ff:aa:1b:d8:
45:10:60:d2:b5:75:b8:69:9c:b8:2e:1f:3d:fd:f0:cf:21:46:
fd:47:06:b2:c7:a5:99:24:2c:9e:21:48:09:12:f4:75:c3:b8:
8a:da:a0:4d:44:e9:33:67:02:d0:26:5c:44:bd:fb:9e:6f:db:
19:25:be:de:15:e9:17:d1:c2:0a:49:2e:a7:f0:0d:cc:d9:44:
be:73:41:30:3d:e1:08:64:99:9d:91:84:9e:4e:9b:7e:8d:3e:
ce:6a:b0:d6:f9:7a:41:5c:a9:5b:5e:0f:82:df:74:e6:5f:91:
88:5e:76:5c:5c:09:7a:d8:fe:35:9e:a7:f5:e2:b9:7c:c5:a5:
1b:2d:20:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:55 2026 by rpki-client