
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
File: 4W5PZeLjl-n84FeFomXGGXyCIMk.mft (raw, json)
Hash identifier: x3cjBVowqyDhJWcf+d0BKh2zoA3hddM46116Lqj4ypM=
Subject key identifier: 4F:91:B4:56:33:53:AF:44:51:83:59:E6:95:29:1D:4B:FD:10:78:10
Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
Certificate issuer: /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
Manifest number: 01C5
Signing time: Fri 17 Apr 2026 03:29:36 +0000
Manifest this update: Fri 17 Apr 2026 03:29:35 +0000
Manifest next update: Fri 24 Apr 2026 03:29:35 +0000
Files and hashes: 1: 4W5PZeLjl-n84FeFomXGGXyCIMk.crl (hash: 67hStXnBWb4EleJiHszt0FCu3qVs5eY5RW1POP5QmKw=)
2: 880E53BC852A11EE8B988A85C4F9AE02.roa (hash: k5DYksJixKDhcJPFopcX+J9k9P/tVTzxnGH1/taUbzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl
rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DED9, serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
Validity
Not Before: Apr 17 03:29:35 2026 GMT
Not After : Apr 24 03:29:35 2026 GMT
Subject: CN=69e1a920-e677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:78:80:bd:5f:65:8d:c9:08:aa:c9:dc:9e:
8a:ca:1c:5d:60:ed:20:c7:d8:28:c9:6a:70:d4:76:
f7:ed:9d:69:76:62:e0:e0:b9:22:9f:fe:82:67:cd:
85:0f:f4:d0:19:e8:c7:ad:18:91:ed:14:81:7b:f0:
80:da:ff:72:3a:c4:22:07:b1:35:35:77:e0:9d:e9:
39:c4:59:00:92:c4:5f:18:7f:a0:33:10:ac:a0:86:
13:6f:78:6f:7e:a0:a1:4f:e8:a5:2c:b5:75:f9:c0:
55:98:60:bd:3b:d3:f2:20:00:7d:99:81:61:91:76:
63:c0:ba:df:fe:94:f7:64:92:85:a2:00:03:5e:ec:
75:ee:f5:5a:7c:d2:df:47:ee:ff:8f:11:05:97:d4:
69:82:72:30:d7:a7:81:e8:54:96:18:ec:bd:21:76:
ce:c2:65:30:7e:97:20:b3:44:6c:8f:b5:48:1b:dd:
42:af:58:46:50:0f:c5:4a:c7:54:59:e5:fb:c6:f2:
27:6b:26:55:4c:c6:d3:14:36:81:85:73:c0:6e:9b:
36:0e:2a:2b:60:b2:37:82:10:90:68:28:73:5d:46:
fa:ff:93:99:58:02:6b:f9:50:58:9d:0e:9e:f0:d9:
23:3c:50:b3:0e:7c:a1:e3:2a:05:07:c0:df:de:f4:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:B4:56:33:53:AF:44:51:83:59:E6:95:29:1D:4B:FD:10:78:10
X509v3 Authority Key Identifier:
keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:44:77:a4:2e:7e:49:a9:43:77:9a:0a:4a:0d:e1:ae:30:60:
1b:20:ad:02:b6:47:9d:4d:8b:5f:3f:6e:4b:30:9a:e3:ae:14:
2d:1e:ed:e9:79:a0:e6:23:5c:bd:c3:0d:ad:c3:58:37:ec:b8:
8e:ff:69:85:e4:0f:79:83:4f:a8:e9:30:d4:c1:40:ec:d7:4d:
ca:70:66:5d:a4:a4:28:aa:8a:2e:93:bf:15:d6:4e:e0:34:40:
f3:35:17:4f:6a:bd:d1:8d:f1:af:2a:04:ed:c9:61:15:3d:54:
72:66:56:e5:58:09:42:84:41:40:23:c6:89:b1:6f:82:f2:43:
a2:77:48:85:af:5a:73:ea:ef:af:37:fa:a8:35:f2:b3:84:8a:
a4:e2:14:4a:cf:f5:3b:66:e5:16:be:ce:34:a0:5a:12:7f:07:
4d:c4:a5:f0:7a:01:ed:80:69:a7:7c:76:0b:93:96:fc:4f:8a:
cc:9d:f2:18:0e:bb:01:c1:8e:0f:ad:15:90:0b:d6:f2:8e:05:
b8:9d:e2:05:35:a2:b6:a6:28:41:95:84:c5:68:8c:e8:bc:8e:
8b:8d:8a:62:97:75:d3:73:3c:80:87:cc:b8:5c:d3:c9:fa:57:
e0:76:16:6b:15:07:c4:4a:f8:d0:f9:60:a5:dc:d7:15:bf:70:
56:b7:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:34 2026 by rpki-client