
$ rpki-client -vvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
File: H_jK4i0tckq70cLRJft9t7T4Sv8.mft (raw, json)
Hash identifier: UsVKnmhX/U05sVDFHWQ2nQf9iRiRj1sJjcginS/gajo=
Subject key identifier: 06:D9:62:3D:A1:60:AD:E4:F5:34:04:A8:85:CC:64:E3:BF:E5:04:2E
Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
Certificate issuer: /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
Manifest number: 4A
Signing time: Sat 13 Jun 2026 08:25:24 +0000
Manifest this update: Sat 13 Jun 2026 08:25:24 +0000
Manifest next update: Sat 20 Jun 2026 08:25:24 +0000
Files and hashes: 1: H_jK4i0tckq70cLRJft9t7T4Sv8.crl (hash: bBz4y4oYqQdV733Jltl2aMEopw9K8tJFwfuUmtzbIzQ=)
2: E342A7D0F9D911F0908C8513676F56BC.roa (hash: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Validity
Not Before: Jun 13 08:25:24 2026 GMT
Not After : Jun 20 08:25:24 2026 GMT
Subject: CN=6a2d13f4-21ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:6f:42:da:7c:67:91:2e:48:66:61:f5:61:
e7:2f:34:26:cd:72:c8:30:8f:5d:26:1b:51:68:2d:
aa:bf:6c:b8:ee:7d:c0:e8:af:ff:53:eb:6d:69:fb:
69:c7:00:8c:e3:dc:5d:f3:40:13:07:6f:a8:6a:aa:
e9:75:13:02:38:00:c2:83:22:71:31:c3:fe:f6:b5:
c3:5e:81:3b:40:61:6f:82:30:5d:e8:8f:73:90:9f:
9f:8d:20:d0:f9:ad:4d:7b:db:6a:d6:72:32:e9:be:
bb:69:4c:3a:e0:af:50:65:a6:23:7f:00:ee:2c:f4:
6f:be:5a:31:98:76:cb:fe:1e:b4:b5:15:33:cc:c3:
6f:4c:77:15:3d:0f:45:e7:e3:dd:7b:af:e2:6a:f9:
62:c1:1d:f8:be:61:3e:fe:ad:3a:87:29:ce:43:63:
d7:6a:6a:0d:55:31:9f:7d:2b:5b:67:f8:8e:13:9e:
d7:c5:b4:78:19:71:28:65:38:71:91:65:62:e7:c0:
42:e8:09:7b:ba:6a:ff:55:3b:79:bb:fa:66:79:87:
c5:c7:86:a8:55:ce:b3:10:ed:8f:9d:36:2a:bd:54:
89:54:e6:d5:a3:b7:71:ae:18:1c:4a:7a:16:08:8a:
0a:00:06:09:49:52:89:77:00:ae:27:35:94:67:92:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D9:62:3D:A1:60:AD:E4:F5:34:04:A8:85:CC:64:E3:BF:E5:04:2E
X509v3 Authority Key Identifier:
keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:9b:cd:7c:8a:fc:5b:4d:3a:14:6e:40:e3:4d:72:9b:e5:69:
fc:cf:7a:f6:d8:5b:26:5e:81:74:99:2e:ee:ec:dd:b6:e3:ec:
3f:cd:d7:4a:c9:d5:35:00:78:ab:aa:c2:05:30:75:dc:af:0c:
44:0b:9a:ec:99:45:b8:0b:4c:fb:e6:0d:ec:6c:a0:96:50:0a:
3d:c0:b8:4c:1f:44:c6:96:84:81:1b:02:b6:18:00:93:11:21:
72:d3:6b:8c:0f:ee:1d:fc:a3:3f:8c:1e:74:c5:af:32:ab:b5:
ec:0a:46:78:28:4e:3a:d5:c1:49:5d:c4:7e:cd:d7:cc:ed:aa:
ba:11:5d:d0:0e:77:bc:06:63:ad:0e:7c:37:52:29:4a:c8:d3:
6b:97:c4:c5:13:3e:3a:e6:85:32:02:82:61:6c:eb:bd:ab:6c:
d0:2d:ef:34:18:c5:61:0c:0b:50:84:fd:ad:4b:68:8a:26:e3:
56:d9:b1:f0:23:ed:41:12:26:e4:da:9c:26:14:66:e1:08:63:
72:a0:70:84:8e:cd:f8:06:93:01:6c:3b:f8:a2:5f:15:3d:e3:
72:40:f2:84:0d:c9:ee:e8:c6:48:3e:20:19:7e:a9:8f:21:48:
17:b1:22:de:0b:be:7f:b0:af:f5:93:fb:3d:cf:0f:57:54:8f:
4f:33:d3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:21:28 2026 by rpki-client