
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
File: 4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json)
Hash identifier: wPaUQ8C5xCVic9bUG6uzLshmCENW0WUsb+1rO5bbh1k=
Subject key identifier: 95:29:B8:A3:56:AC:4D:29:CC:02:50:01:8D:36:99:6E:D1:71:29:3A
Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89
Certificate issuer: /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689
Certificate serial: 16C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
Manifest number: 16B5
Signing time: Thu 16 Apr 2026 16:36:30 +0000
Manifest this update: Thu 16 Apr 2026 16:36:29 +0000
Manifest next update: Thu 23 Apr 2026 16:36:29 +0000
Files and hashes: 1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: xHwc1JuUEuqFE9E++4xwXC5mDHSk6jGHToYDjtsOcrk=)
2: F6EC99AE26A111F1A6B92646BF833773.roa (hash: F3guSpGm8GcV6RFX5BxyucYNTiqMtw8fTbZ/W0lp6OM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl
rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5830 (0x16c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916814B, serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689
Validity
Not Before: Apr 16 16:36:29 2026 GMT
Not After : Apr 23 16:36:29 2026 GMT
Subject: CN=69e1100e-8f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:33:b6:b6:9b:39:6b:9c:d6:8f:fd:f4:bd:
36:09:dc:c4:6b:8b:db:98:c9:8d:34:65:b1:c6:36:
9a:98:3b:91:66:bb:8e:82:e2:30:e3:a2:8c:fc:ff:
6d:c2:b3:80:9b:60:cf:8f:35:63:a0:e3:7f:9b:30:
f7:28:1e:2d:9d:be:8c:4d:73:c2:ee:6d:96:6e:3f:
34:41:56:21:b0:81:22:7e:e0:77:d9:1e:b9:0e:2b:
a9:03:f6:4a:9a:ea:e0:c7:21:fc:bd:c5:27:b3:9e:
05:65:02:f0:c7:43:58:7f:58:fb:fd:b2:9e:b1:ac:
08:f5:ea:c3:8e:14:c8:d6:4b:a9:63:57:c2:8c:1e:
fe:28:18:17:c9:07:cb:8a:b2:44:6b:54:78:a8:fd:
14:ae:c5:3f:f7:ef:87:65:18:17:dc:8f:66:b3:d2:
ba:14:e8:c1:2d:ba:c4:85:88:ba:bb:4c:56:51:30:
79:dc:74:14:33:61:c9:05:b1:41:b5:f9:9d:9c:83:
f2:1f:8a:59:2a:1f:b3:3b:a0:00:ce:83:e3:70:2e:
a8:5b:93:e2:bb:13:e6:de:53:2f:cb:e9:4d:30:2b:
a0:73:59:b8:0b:fc:65:da:d2:79:25:e2:7e:46:92:
e0:61:84:7b:c8:50:74:89:4f:38:14:83:67:82:39:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:29:B8:A3:56:AC:4D:29:CC:02:50:01:8D:36:99:6E:D1:71:29:3A
X509v3 Authority Key Identifier:
keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:80:7a:10:34:f2:2d:19:0e:61:aa:4e:d6:ba:53:37:cd:fd:
04:c9:22:a3:5b:2b:80:46:7d:89:f8:b8:8e:09:cc:ea:91:d3:
ac:69:4e:ee:5c:b6:0a:7d:22:c7:3b:01:35:ac:eb:bc:7c:52:
9f:a2:91:6f:78:39:a8:ad:54:d8:84:aa:97:a0:fb:7b:49:5a:
20:0a:ba:09:a0:55:53:61:f2:20:38:d8:4b:62:ea:3b:25:1e:
73:93:70:6b:a5:29:74:3e:c2:43:30:32:ef:aa:e0:dc:12:60:
53:29:a0:81:3d:bc:d8:ba:60:a5:43:ef:3e:83:58:df:4c:04:
d4:c1:3c:87:37:c4:25:18:30:c4:76:8e:b4:77:b5:72:f7:ee:
df:f0:97:b2:e9:d2:8b:41:fd:e4:e1:98:e3:23:96:d5:b6:c7:
89:fc:7d:b1:9f:52:9e:72:c8:8f:5d:1b:89:e3:b4:36:48:6d:
5f:54:0e:6d:5a:d6:6f:ea:03:20:fd:a6:f6:b2:50:b5:63:d8:
c0:c4:ed:1d:1f:7b:fe:2c:aa:27:51:40:9c:0d:f9:00:61:3a:
2a:1b:30:13:28:71:c7:e5:0f:ae:73:a1:8c:f3:65:6b:a0:d5:
b8:d2:ff:d8:37:63:27:c6:87:1c:d3:b2:a1:bc:3a:ed:30:1e:
14:17:17:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:17:47 2026 by rpki-client