
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json)
Hash identifier: Af1W6zHhPtRxF4LcsCBcYLDa4tn3Umr9Qp9EPst4AYI=
Subject key identifier: 68:81:94:13:D0:DB:9F:AA:24:D5:70:40:79:4F:D5:9D:85:22:17:39
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial: 043D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
Manifest number: 0399
Signing time: Sun 11 Oct 2026 00:57:31 +0000
Manifest this update: Sun 11 Oct 2026 00:57:30 +0000
Manifest next update: Sun 18 Oct 2026 00:57:30 +0000
Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: fwHe1UtAFMBWWBE0o9Au5Tk8ki4tZszfXB0lvmfMORs=)
2: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: Zp1X1saUF8xeAN8dIa6PSZuihvrxW9yn1Q7v4yzeDZk=)
3: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: 7JbMjB8d3ZxwfoscdTBgnl9vn7C/XbttuTcaCLuo0DU=)
4: 62B780C46EF811F1A12CAB807BA30FBC.roa (hash: WqvK9G7du0ZUPhPlzOYqfUxNooGlr51htpi5s+9yDqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 00:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085 (0x43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Validity
Not Before: Oct 11 00:57:30 2026 GMT
Not After : Oct 18 00:57:30 2026 GMT
Subject: CN=6acadefb-0e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:b5:ff:a4:e8:08:d7:e5:01:98:25:85:86:
ec:c9:b9:96:e1:be:a1:35:1b:c9:81:96:0a:f5:c4:
3b:73:dc:20:a2:a8:8d:83:fb:41:d3:c8:57:0c:e1:
ce:ad:d6:37:a1:3c:cf:da:59:88:31:19:da:a8:27:
7e:f6:b2:be:11:55:bf:e2:b3:8e:91:a6:46:3c:9c:
52:6e:c6:5f:69:d1:95:a0:60:5d:4c:a2:5f:79:e1:
c3:a7:99:92:59:d2:c3:90:22:b2:8c:ee:eb:cf:19:
0e:74:20:b4:57:c7:fd:33:87:06:7e:00:46:6c:0c:
eb:fc:7c:a0:cc:64:8a:b6:da:95:5f:b5:42:3d:3d:
83:7e:52:be:7c:54:93:34:07:d5:9a:e6:4e:15:81:
bd:fd:97:66:26:8a:c0:18:bd:94:86:da:13:be:30:
10:05:1f:af:66:bb:22:f6:6b:13:ce:9b:29:79:53:
52:b9:34:ca:8a:c3:a7:4e:b5:d2:90:c0:27:f2:bb:
b4:aa:73:c8:c3:b2:ed:7c:1f:50:16:81:10:f6:3b:
d3:bf:1c:cc:fa:d1:65:bd:6a:43:21:73:80:47:3a:
a7:09:96:e5:18:79:75:62:c3:51:05:fb:f7:96:d0:
f4:5c:5e:ec:b2:33:11:ac:8b:36:90:32:c0:a5:51:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:94:13:D0:DB:9F:AA:24:D5:70:40:79:4F:D5:9D:85:22:17:39
X509v3 Authority Key Identifier:
keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:20:dc:96:05:cb:e5:55:73:9f:a2:ad:ed:70:da:ab:d3:cf:
8c:e5:8b:b8:0d:6b:61:36:5c:87:bc:79:12:fb:3c:52:c3:79:
54:7f:ae:e1:3c:20:a0:c0:16:1b:d2:09:ea:ef:1c:c9:15:44:
87:31:51:d7:52:68:2b:69:1a:18:ee:b4:31:b9:30:fe:0a:5f:
15:d6:56:5a:d1:2b:15:ed:6e:4d:35:69:66:3e:ec:33:25:16:
f2:54:75:1d:6e:24:60:cc:e9:d2:e5:e3:f5:ad:0a:ef:65:65:
97:84:b9:ab:7c:8c:a3:57:48:9d:f1:8c:1d:94:28:d5:88:06:
bb:6f:31:31:ec:1b:3a:6a:2e:1a:55:a2:d3:d7:57:a6:51:4f:
0f:da:cf:4a:47:7a:e1:ff:1b:49:ff:61:71:51:d7:c9:91:be:
9e:b7:93:65:89:55:10:a9:6b:ad:bb:c4:a9:3f:ce:c7:eb:2e:
c4:74:f4:81:6c:5a:4d:f1:33:bc:f8:3b:8e:f0:a4:73:80:c0:
0a:a9:9d:82:89:d1:ef:b3:30:45:ea:96:90:dc:72:35:bf:ca:
64:14:5f:c3:4f:ea:08:45:b0:b9:99:a7:dc:ba:df:6a:f1:b5:
2c:f5:6e:78:ba:8d:d7:ed:39:c0:90:bc:22:b2:7e:8a:ee:2d:
21:c3:45:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:51:23 2026 by rpki-client