
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier: 3D1yatq0Np4pD7jtF0CAEyTTRp+iDRq+ik68qqBve0Q=
Subject key identifier: E3:20:DA:A0:FD:13:58:8E:08:FB:36:10:2B:CA:36:C6:0D:D0:3C:F0
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial: 3664
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number: 35DC
Signing time: Thu 16 Apr 2026 14:30:39 +0000
Manifest this update: Thu 16 Apr 2026 14:30:38 +0000
Manifest next update: Thu 23 Apr 2026 14:30:38 +0000
Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: 0YOO4vHlf9dy7rSGldUDEBsYzb1ODiYkpF6mAziq+3s=)
2: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: hG8g9R9N6g9xsHSn0imR+1vWSozb3fa3uL51Vy8mhic=)
3: 524236EE6B5711F09CFE4572C4F9AE02.roa (hash: YixDUXuSIn+Hh+G5kFeWAZb1NF/MvO4aijdY29fevto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13924 (0x3664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Validity
Not Before: Apr 16 14:30:38 2026 GMT
Not After : Apr 23 14:30:38 2026 GMT
Subject: CN=69e0f28f-69e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:87:d7:d7:16:14:3a:7a:ae:86:d3:10:66:
94:58:5f:84:5d:3c:2b:81:fa:bb:31:e0:64:f7:fe:
64:0f:1a:8e:86:12:7c:36:03:4f:f6:60:37:4c:52:
a5:3e:57:91:dc:2c:1d:87:9a:36:99:91:2b:26:5d:
27:fb:ee:3c:2a:c5:a5:cb:82:df:f3:ad:91:3c:27:
5c:7e:ca:75:d2:c4:73:da:36:15:61:bd:97:9f:59:
cd:43:e7:61:bc:94:81:5e:ef:c2:de:33:e8:e6:8b:
c4:93:cf:28:f8:1b:c2:e2:ee:02:a3:b9:d6:e3:aa:
89:44:46:7f:62:b2:e6:c9:9c:27:3d:9c:96:7f:e4:
b7:3d:ae:43:9e:55:6b:14:89:6c:9a:1d:e1:fc:fd:
5a:58:e8:37:dc:a6:aa:d9:f9:6d:93:77:e7:79:fc:
62:8b:7d:19:bf:44:d4:c7:7e:29:1b:8f:5d:b0:16:
7c:28:32:1d:1c:a2:e3:b5:08:e9:12:98:40:8c:97:
1e:b3:cc:96:15:00:f9:bd:6f:58:5e:0c:ea:f1:5a:
7c:4d:e7:8a:d9:9c:23:fc:d1:1f:06:d5:aa:8a:a1:
43:96:e2:70:bc:f1:71:23:7f:9e:fc:21:48:0e:22:
8b:c7:6a:87:60:d8:da:a0:88:0e:e5:3d:42:8b:1e:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:20:DA:A0:FD:13:58:8E:08:FB:36:10:2B:CA:36:C6:0D:D0:3C:F0
X509v3 Authority Key Identifier:
keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:a3:88:ed:9c:f4:da:54:98:26:9c:21:6b:44:33:91:49:e6:
02:83:04:85:9a:58:b8:21:c6:2c:c7:41:93:0e:48:5c:58:44:
e9:26:9b:1e:ec:fb:07:13:41:b1:48:92:13:2e:52:32:b8:4d:
cb:87:f3:74:5c:ce:9a:8d:8b:91:31:24:9f:d5:b5:c2:5f:47:
9b:34:b3:0b:7b:53:e0:67:0a:df:7a:97:39:1f:ed:43:34:f3:
f3:fe:2f:db:96:a7:93:eb:63:14:ea:2c:a9:1c:ef:58:27:11:
7d:1b:aa:21:03:85:eb:16:94:97:9a:d9:09:0a:f5:cb:aa:09:
61:fe:60:dc:15:a6:1b:20:f7:6d:88:7a:00:3d:c8:2d:05:f0:
6e:0f:7d:e2:96:e0:a0:f3:77:ad:df:44:a6:13:a8:98:77:a8:
46:fa:3b:ca:f5:10:a9:09:15:d5:52:d4:c3:e8:c5:09:0e:d0:
27:78:b3:22:1d:6b:62:87:cb:2e:20:06:a5:67:4f:ff:f5:55:
10:bf:a4:3b:13:bb:9f:c4:2a:98:6f:61:cb:23:92:e0:e7:df:
a1:ed:7d:04:1e:cb:ea:bb:01:46:50:e3:fa:b0:aa:a1:a2:d3:
fa:e6:f5:ef:03:fb:24:e1:14:55:e0:f6:74:34:8b:8e:1a:21:
c2:49:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:47 2026 by rpki-client