
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
File: 4W5PZeLjl-n84FeFomXGGXyCIMk.mft (raw, json)
Hash identifier: yXarnUXPEpxFp6NXHTbRYtlDpHXSlsq3UVywWLvinXY=
Subject key identifier: 59:61:26:02:32:8D:23:98:78:1A:D7:23:55:94:E7:03:39:77:73:5C
Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
Certificate issuer: /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
Manifest number: 01F7
Signing time: Mon 27 Jul 2026 04:49:23 +0000
Manifest this update: Mon 27 Jul 2026 04:49:23 +0000
Manifest next update: Mon 03 Aug 2026 04:49:23 +0000
Files and hashes: 1: 4W5PZeLjl-n84FeFomXGGXyCIMk.crl (hash: A0vKgKiT6kWgZXHFsRGmO198/I80jWgUoJoaiwDS9qM=)
2: 880E53BC852A11EE8B988A85C4F9AE02.roa (hash: k5DYksJixKDhcJPFopcX+J9k9P/tVTzxnGH1/taUbzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl
rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DED9, serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
Validity
Not Before: Jul 27 04:49:23 2026 GMT
Not After : Aug 3 04:49:23 2026 GMT
Subject: CN=6a66e353-8ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:23:a8:cc:d9:5e:a0:91:03:9d:0d:3d:36:
bb:dd:f4:9a:3b:ce:cd:db:3d:aa:c4:bf:9b:40:6a:
d7:fe:91:63:4f:6f:03:c3:a6:5c:27:bd:3d:be:10:
2d:3b:7e:4e:b9:39:3e:d3:57:af:53:34:f6:7e:83:
80:48:33:97:d5:f9:8c:e6:02:4b:d6:1a:a1:e4:52:
a3:5e:bd:b5:79:56:c9:0d:97:b1:f5:95:8d:5a:e8:
22:2c:97:20:dd:67:ad:6e:8a:4c:0d:ff:60:5e:45:
4d:10:f3:f0:cf:31:fb:2a:5e:96:19:be:6e:b5:61:
d5:24:0d:cc:1a:86:9b:9f:e4:87:97:89:0a:0f:58:
50:d8:30:92:10:8f:41:14:b4:f3:c5:c1:bd:17:08:
df:6e:e8:c9:11:34:85:1c:55:e2:ba:ee:1e:9b:cd:
95:0f:ab:fb:c8:ad:e5:3f:c6:e5:84:3a:64:46:cf:
f7:fe:6d:06:29:06:fe:dc:7b:28:fb:72:4f:d7:bc:
03:7a:61:a9:2c:5a:2d:6e:78:c5:c2:21:8c:cf:03:
66:93:8a:e9:a4:45:77:a3:89:10:b5:9e:ad:68:ca:
6d:64:79:08:0b:9c:60:9c:96:20:8d:39:98:02:03:
c8:e2:e0:c5:ae:a4:22:90:50:61:a0:c3:f3:41:6e:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:26:02:32:8D:23:98:78:1A:D7:23:55:94:E7:03:39:77:73:5C
X509v3 Authority Key Identifier:
keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:a4:38:6b:0b:51:33:50:43:09:36:3c:e6:bc:e9:6e:6b:47:
81:4b:e5:d2:e3:46:e0:67:88:69:8b:04:40:ff:db:31:c1:dc:
02:f8:21:27:12:24:d2:be:1a:aa:bf:cf:6f:c5:6e:88:a9:e5:
61:86:f7:69:b9:0c:84:6d:86:61:e1:84:1f:6e:1b:02:c5:a1:
b4:c0:da:0e:26:30:16:2b:6b:79:c5:93:a3:21:76:db:5d:9b:
5a:10:6e:11:05:1a:c7:71:63:bb:e5:b5:da:e2:ae:6c:c2:25:
b6:4f:a8:75:b8:d1:12:0f:40:03:ff:9b:9a:18:d6:2e:0f:6f:
69:01:de:9b:f6:19:91:88:ae:77:94:5e:fc:66:21:87:91:82:
8d:80:b1:a6:a6:c2:56:8b:82:a7:e9:ae:93:24:e3:d0:27:4c:
5a:dd:a5:c0:02:76:06:42:df:5a:9e:de:c7:7f:76:6d:3c:74:
33:e0:4d:4a:76:26:dd:71:4c:4a:bb:a7:cb:6b:8e:b0:fd:50:
59:27:03:4d:6d:fa:93:a9:a1:b1:30:1a:9c:77:11:88:86:97:
b2:2f:c5:c1:c2:16:93:19:88:f8:35:a3:4d:02:ee:94:e7:18:
6b:77:32:a9:28:93:57:d2:9c:4e:e4:0f:97:55:5a:68:d2:f8:
4e:d8:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:29 2026 by rpki-client