
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json)
Hash identifier: RG6VAXydH55m0AhEnf5a8Tk29kA8FhCP2XoPLNjE3Lw=
Subject key identifier: 7E:CF:57:BC:85:4C:FA:09:0D:EE:6B:E2:A3:FC:86:8F:66:75:F6:85
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
Manifest number: 0138
Signing time: Mon 27 Jul 2026 07:35:04 +0000
Manifest this update: Mon 27 Jul 2026 07:35:04 +0000
Manifest next update: Mon 03 Aug 2026 07:35:04 +0000
Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: 5csTFpJp0TENWEakk3qCt5q97QCFeQjgj8R8J9XFwNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Validity
Not Before: Jul 27 07:35:04 2026 GMT
Not After : Aug 3 07:35:04 2026 GMT
Subject: CN=6a670a28-52e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:42:a5:7b:0c:52:70:9a:c3:19:6e:fc:a6:
4a:d9:ba:83:53:7c:74:0e:2f:b5:61:4e:04:40:44:
1c:ed:7a:b6:b9:18:57:22:60:0c:3b:c5:b9:8b:0c:
3a:19:27:b4:9a:17:42:c3:d8:0d:bd:2b:a0:3f:03:
cc:fb:aa:74:5a:44:d1:7a:fb:8e:9c:33:1d:f2:ff:
b8:9e:ea:d2:3e:d5:6b:a6:5b:ce:19:b0:68:6f:d6:
da:a0:c7:f2:0b:5a:65:c4:77:7c:89:85:8a:b4:ea:
39:01:7b:09:00:a6:1b:24:95:22:7a:0f:29:da:68:
98:73:98:88:27:70:a7:46:dc:de:3a:32:84:63:ca:
70:75:09:fc:dc:a6:43:f6:73:fb:17:7c:74:01:af:
fa:7f:d4:df:0c:0b:11:32:5e:ef:05:ff:14:13:69:
09:01:22:c1:c6:26:0e:cd:a3:f2:f4:4c:89:ec:0c:
fa:05:15:65:4d:36:8b:8b:ad:bc:0a:41:8c:5b:3b:
a1:44:54:12:78:58:c0:19:5b:d8:80:98:a3:6c:7a:
51:4f:42:0b:5d:25:20:8c:86:9c:68:84:e8:2e:a1:
16:17:b3:c5:02:f7:2e:9b:60:8f:9c:75:e9:a0:6d:
4a:e7:ee:c6:af:ab:bf:66:fc:76:91:c4:f4:a1:84:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:57:BC:85:4C:FA:09:0D:EE:6B:E2:A3:FC:86:8F:66:75:F6:85
X509v3 Authority Key Identifier:
keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c7:78:78:e8:98:1b:e5:cd:c6:49:cf:06:6f:1f:01:f7:ba:
b4:ad:ad:ad:5c:63:56:1e:42:98:74:5d:75:02:e2:54:1d:26:
b8:ea:5f:0e:54:f9:aa:15:1b:35:66:14:3c:da:fa:48:e5:a3:
8d:e9:3c:df:4d:da:78:c7:4e:a8:23:92:3f:3f:25:f1:5e:ff:
96:1b:9a:bf:f9:d2:f7:d8:28:d2:11:c4:8c:ad:c2:4b:b4:36:
74:bb:2d:c8:ef:df:b7:73:7b:c6:79:4d:02:47:36:c8:83:29:
df:9d:49:e7:93:4f:20:1d:37:c5:61:1d:f7:ef:16:3f:37:72:
6a:e6:6c:91:88:33:f2:f5:99:76:c8:80:5f:ab:9d:ef:18:a1:
41:f7:f6:3d:74:73:33:48:9b:e2:5e:92:9f:85:1c:68:f9:f5:
50:08:dd:4e:ea:ac:43:64:8f:39:01:85:07:9e:64:bf:65:bf:
5d:66:45:6b:03:5a:ca:ca:9b:ee:b4:e3:6c:10:32:58:7a:a0:
a1:ba:4b:06:0d:d6:19:ae:e2:55:c2:4e:b7:31:ae:e6:69:19:
6b:5e:96:c2:e8:77:f6:7f:7a:36:27:69:23:ff:d5:7b:b9:a1:
8d:7b:fe:32:8f:b8:1b:fb:b1:62:58:55:89:12:d3:3a:3d:e5:
27:85:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:19 2026 by rpki-client