
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
File: 4QZLtgGhMQh2G1RXofcVJMSky84.mft (raw, json)
Hash identifier: uB1XUBc8QOTrgnmb+eM3ruIg45fQa1pwS20rk0KRY/k=
Subject key identifier: 25:29:AD:23:2F:BA:02:3F:E8:87:86:47:C0:E6:7D:D5:1D:51:C3:23
Authority key identifier: E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE
Certificate issuer: /CN=A914B57F/serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE
Certificate serial: 0BAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
Manifest number: 0BA4
Signing time: Sun 26 Jul 2026 19:29:08 +0000
Manifest this update: Sun 26 Jul 2026 19:29:07 +0000
Manifest next update: Sun 02 Aug 2026 19:29:07 +0000
Files and hashes: 1: 4QZLtgGhMQh2G1RXofcVJMSky84.crl (hash: cfRvn9A9xQYsN3oze/qU5GDi/VE9/BdyyirkdDhNI8Q=)
2: 11685AAC4F0D11EAA161D143C4F9AE02.roa (hash: 8RY8svb6SNxrn1KpRC36LY5heMgR5Mh+tAuTSevI5rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl
rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2989 (0xbad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B57F, serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE
Validity
Not Before: Jul 26 19:29:07 2026 GMT
Not After : Aug 2 19:29:07 2026 GMT
Subject: CN=6a666004-d4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:30:d2:43:53:0d:c3:49:75:2a:63:67:2e:
f5:c4:cf:4f:77:0e:7f:9d:6b:41:41:e8:67:79:32:
65:59:12:81:eb:f4:eb:8e:98:dd:b6:4f:9e:cf:54:
ce:92:b2:c8:9d:c5:f1:d5:28:a6:ba:01:8f:0b:d8:
db:c2:b1:86:3b:52:e7:52:84:08:3d:73:b2:4d:4d:
e0:bb:61:12:1a:04:66:10:8f:e5:ab:d3:87:6c:20:
be:aa:bf:30:1c:c9:35:35:03:7e:1e:b1:cb:f1:a7:
e4:58:5d:b2:19:17:a8:4c:31:c8:45:47:2d:73:c3:
8d:7f:df:16:6f:f8:df:a4:83:77:c2:29:5c:8b:40:
69:af:33:d6:fa:e6:84:0c:ac:ec:96:9e:dc:0e:40:
93:4b:50:27:ea:3f:9a:df:e9:e0:c8:e5:ec:0d:61:
b1:c3:93:c4:cc:2e:5e:85:f4:70:08:0e:d4:f2:32:
e3:81:0e:af:6e:d9:e1:97:4f:1f:f5:62:fb:c7:d9:
5c:b5:85:4d:5e:cc:ac:b7:73:79:3d:2b:ff:b3:07:
bb:94:36:0f:29:5f:bd:a9:c5:12:29:21:b4:48:72:
46:4c:75:d1:e4:1e:7b:ce:0a:0a:77:4b:cf:2a:d2:
62:b0:90:32:7d:79:4a:21:be:82:48:49:0a:b5:cc:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:29:AD:23:2F:BA:02:3F:E8:87:86:47:C0:E6:7D:D5:1D:51:C3:23
X509v3 Authority Key Identifier:
keyid:E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:b4:4d:93:76:46:62:eb:54:94:de:fe:ae:23:28:a1:6a:6e:
a2:8d:48:af:5f:22:2b:a8:48:f0:3a:85:2f:0d:70:99:2b:ae:
b3:f6:2f:25:7d:32:db:43:2b:06:cc:3f:7b:98:d8:ca:05:7e:
ad:f9:44:a5:50:91:53:28:61:b8:99:2b:83:32:1c:ce:7f:a3:
84:db:1a:4e:e7:34:61:b6:c7:91:fe:8b:f7:e5:d6:98:fe:64:
44:c6:6a:0a:bf:0f:ae:f9:02:22:07:fb:75:d9:5d:be:69:ee:
3f:7e:ae:b7:2f:8b:d7:bd:44:d8:03:2f:dc:96:e4:c7:55:b0:
60:ec:73:eb:d6:fa:45:bf:62:88:ff:a1:d5:55:d8:92:04:89:
ef:5f:7c:34:3d:35:e1:d7:f9:42:a5:f5:f8:a2:ad:63:96:81:
07:5d:fd:14:0f:ac:2d:10:89:19:59:e0:e8:90:23:1e:93:93:
4b:6d:32:ee:ba:a0:6a:01:4c:d9:68:65:63:26:67:63:d7:a9:
2e:5b:e6:fc:89:d8:4d:11:6d:9a:d3:5d:81:97:bc:2d:ff:ad:
70:95:b4:c4:78:b7:0e:a0:d7:10:5a:d7:7f:e9:95:a9:68:0b:
5e:a7:88:c3:53:8e:b7:64:95:46:cf:37:02:b8:51:3a:9f:3d:
c6:d6:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:39:42 2026 by rpki-client