
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
File: 4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json)
Hash identifier: SkWL2G2tZbsnwxbWKJefrb2sJf7llJQjvTHaIRC6nsc=
Subject key identifier: BB:D4:D1:81:17:F8:E4:3F:2C:9B:6A:44:55:1A:7F:9D:C9:6B:24:13
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial: 190D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
Manifest number: 18CA
Signing time: Mon 12 Oct 2026 16:32:10 +0000
Manifest this update: Mon 12 Oct 2026 16:32:10 +0000
Manifest next update: Mon 19 Oct 2026 16:32:10 +0000
Files and hashes: 1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: utXBVs0RNUrO3y9JfiRu6UBKs5y06DvRQ1OoXjbYEW0=)
2: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: 7ZAEA0r9lzg48+UEX+NDAtHxRbz47d+Yj5cRgz6OmvE=)
3: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: dgLQAd17tzBsK66kQ0H0dwAp53SX6GdmC4ibG9feFVM=)
4: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: X9rsotZF7CeUjy+uRHBz/MOZBNYjTpkQ13IOleGdKEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6413 (0x190d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Validity
Not Before: Oct 12 16:32:10 2026 GMT
Not After : Oct 19 16:32:10 2026 GMT
Subject: CN=6acd0b8a-7cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:83:c8:cc:ca:07:5e:ce:00:f2:dd:d7:76:64:
fc:98:14:2d:4b:13:09:2f:25:f0:a0:e7:82:b2:32:
cf:fd:09:bb:91:2b:e5:5a:54:0a:f4:cf:ed:98:e1:
dc:87:7d:df:7b:8a:69:ed:95:f6:ec:e5:56:db:2c:
64:91:9c:9d:eb:f2:00:97:12:b5:18:4c:df:41:c2:
a7:94:b1:ed:32:4f:a1:14:16:c6:bb:52:ec:0d:b7:
d8:c8:0a:6e:ae:e9:99:13:2e:5e:8b:af:ee:6e:10:
e9:f9:68:70:ff:d1:84:5d:d8:22:ad:71:38:0f:bc:
4a:eb:7a:56:08:7a:bb:42:e4:d7:42:a8:dc:6a:d1:
b7:8e:a7:5a:e1:8c:6d:c3:24:d1:bb:54:93:33:5b:
0b:74:1b:3f:4a:ee:46:0f:ae:72:d6:72:69:f4:43:
89:3f:9d:2f:a4:b6:02:1f:2d:54:f1:4c:a6:85:72:
80:56:21:a0:78:f8:23:c0:d9:55:db:47:77:2d:6b:
76:30:7a:2a:fa:3f:18:b5:24:58:5d:b9:e0:13:e6:
cf:35:d1:16:05:1b:ca:2f:cf:48:f2:cf:55:74:1a:
22:f5:cd:f2:13:a4:2f:f7:8b:20:eb:d3:ec:9a:9e:
28:dd:aa:17:4e:69:88:d4:7e:86:57:15:2b:48:9e:
04:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D4:D1:81:17:F8:E4:3F:2C:9B:6A:44:55:1A:7F:9D:C9:6B:24:13
X509v3 Authority Key Identifier:
keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:ca:19:5b:45:96:a2:99:8f:74:27:7b:8b:1a:03:09:be:7c:
d7:a0:e1:a1:77:ac:65:2a:73:74:d6:95:62:6b:b1:7e:6f:4f:
13:55:af:ec:c3:46:92:16:7b:71:ae:3c:86:67:89:54:c2:d3:
99:7f:36:60:a1:c8:c1:92:17:d8:ba:85:74:98:f0:02:ae:52:
fd:87:94:3d:90:1f:a7:cc:50:82:a9:87:c2:87:32:82:68:ff:
30:15:66:12:78:cb:00:c8:1a:de:2c:91:c9:91:41:7b:d2:5f:
40:07:52:20:a5:97:4c:2b:08:83:56:19:ec:7e:d1:37:7b:c5:
73:07:a0:01:a9:6b:99:e3:25:27:1b:e5:75:d8:d2:58:dd:c3:
8d:aa:43:4a:75:f2:7b:d1:92:49:92:cf:84:16:de:4c:71:82:
af:97:f1:d0:b9:20:44:c1:39:ee:14:e8:ae:b9:32:4c:e8:5c:
db:c6:41:03:84:d3:47:0a:b0:66:55:3c:d0:74:32:4c:33:20:
8c:41:3c:9e:c6:7c:47:93:b8:55:b5:d1:d0:f4:ab:1b:f8:c8:
f7:ad:85:d1:ac:e4:45:0c:29:03:db:39:c0:24:a9:e7:e7:0a:
c5:23:36:b4:42:b8:c5:e9:3b:01:52:0d:31:ff:07:85:08:38:
02:04:cf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:49:55 2026 by rpki-client