
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
File: 4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json)
Hash identifier: Yk6knRCupUAj1IUOWTQKW3e9DUoirXWdbQfB/i6C7Sg=
Subject key identifier: 8E:4F:7B:2B:FF:9D:6A:82:06:BA:AE:04:72:20:D8:CE:97:0D:9C:70
Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89
Certificate issuer: /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689
Certificate serial: 1717
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
Manifest number: 1706
Signing time: Tue 22 Sep 2026 16:34:11 +0000
Manifest this update: Tue 22 Sep 2026 16:34:11 +0000
Manifest next update: Tue 29 Sep 2026 16:34:11 +0000
Files and hashes: 1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: Ip9Z13WdASlduD2zNNKgyrb53cTn4mm5CnQQ+bdS8+Y=)
2: F6EC99AE26A111F1A6B92646BF833773.roa (hash: F3guSpGm8GcV6RFX5BxyucYNTiqMtw8fTbZ/W0lp6OM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl
rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5911 (0x1717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916814B, serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689
Validity
Not Before: Sep 22 16:34:11 2026 GMT
Not After : Sep 29 16:34:11 2026 GMT
Subject: CN=6ab2ae03-7aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:1c:e5:bf:2c:fd:1d:80:72:1f:93:71:73:
2b:45:08:01:c7:20:c7:86:45:c3:9b:ec:62:c1:9b:
21:e4:b6:70:02:b1:d1:e5:5a:20:15:e1:20:76:77:
04:0f:9c:84:e7:f2:08:64:39:be:15:37:17:df:2c:
50:54:e6:d4:10:ed:37:85:a7:df:76:66:eb:4d:4a:
8d:49:ef:a1:4f:68:38:f7:47:25:34:87:17:21:37:
a6:5a:fe:56:81:28:83:4b:bc:6d:39:2b:4b:28:fc:
7d:4c:10:44:76:e6:6f:2b:6e:c8:86:7d:08:55:30:
d3:71:46:c0:19:1e:26:e1:28:37:b4:8c:e6:b5:90:
90:ef:53:c5:0d:19:f3:f3:9d:00:94:5d:1f:0d:06:
aa:c8:12:14:a0:fd:34:5c:09:c3:4f:f7:df:fc:c6:
74:98:ba:69:aa:25:0e:10:20:5a:79:36:be:39:14:
f1:83:92:2d:6b:a9:42:85:c2:a8:5c:a6:c6:c4:af:
af:7b:ef:00:3d:72:ef:bb:e5:2e:e1:c4:2a:00:c2:
bb:45:40:87:b0:64:a8:e5:d7:6c:b2:cd:71:0d:30:
8c:5e:66:7d:23:20:a3:d9:e0:c2:2a:e0:b2:5f:f1:
b2:63:7c:95:25:10:01:36:e6:86:56:ca:4c:9a:44:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4F:7B:2B:FF:9D:6A:82:06:BA:AE:04:72:20:D8:CE:97:0D:9C:70
X509v3 Authority Key Identifier:
keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:d4:29:34:43:1e:d8:75:ff:00:8d:9d:3b:31:46:6a:ad:1b:
8a:44:67:18:6a:ba:f6:00:ef:59:81:f5:79:64:e4:54:43:e4:
2f:b5:38:f0:4d:0e:14:ee:28:12:96:e1:62:3f:c4:0a:2c:bc:
96:93:95:1b:b3:c3:b8:41:85:bb:33:ab:dc:e8:b9:4e:0c:94:
bc:ae:d5:dc:c3:3b:78:82:1d:24:ce:43:80:c2:d6:94:63:0f:
b1:3c:be:06:ae:fe:f1:22:4e:c7:0e:e1:34:4f:b6:3e:4b:65:
c9:43:01:00:7c:e4:5e:e7:c9:bb:51:15:d8:dd:7d:c5:cc:57:
95:d0:54:6c:93:a4:7e:15:2c:11:2c:8c:1e:04:bf:a1:5b:06:
de:b0:83:25:40:c0:08:d0:42:a2:8f:f3:f6:c1:34:27:90:1d:
30:91:18:31:6c:f9:e3:4f:1d:e4:22:e5:13:88:2b:f3:e7:be:
0e:a0:8a:e4:fd:d6:80:fa:45:34:9a:76:75:22:6c:26:7b:04:
83:f7:f2:56:69:31:e3:34:f4:ee:5c:fb:e9:59:82:3c:f3:fd:
ca:1b:fd:e8:9c:fc:b9:c8:56:fd:c7:ae:d1:e3:bf:65:03:52:
24:fe:33:27:3f:ac:ad:de:7b:1b:f6:4a:22:3b:29:46:c6:6c:
13:7c:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:48:48 2026 by rpki-client