
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File: 4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier: qGjf2+XHi5MmUSf4JsLgzcVAFXkYscrYROANnvDM5ps=
Subject key identifier: A9:39:92:92:90:73:73:91:54:2D:6A:4F:C3:15:E7:8D:63:C0:CC:B3
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer: /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial: 074F
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number: 0729
Signing time: Sat 18 Apr 2026 16:44:37 +0000
Manifest this update: Sat 18 Apr 2026 16:44:37 +0000
Manifest next update: Sat 25 Apr 2026 16:44:37 +0000
Files and hashes: 1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: g7BzX/4ehoaHsm6ut38CTl97Uu6DBCy5e10V9f1d03c=)
2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: +C2epm2cuJ3GR0nAkShPOcsEF6oYoWgKxDRuq2dxIhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1871 (0x74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Validity
Not Before: Apr 18 16:44:37 2026 GMT
Not After : Apr 25 16:44:37 2026 GMT
Subject: CN=69e3b4f5-4f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:a9:5b:d9:7f:d5:b4:8b:31:d1:f7:b6:0e:
3f:35:92:b9:a5:63:05:84:86:4f:fb:cf:6a:fb:89:
a7:1a:1c:87:cd:5b:24:37:a5:2a:5d:58:22:94:44:
f8:04:87:85:98:9a:a9:2f:6c:9e:74:19:2b:3d:3b:
8b:62:64:cc:0a:0e:ff:a3:f2:db:01:5e:16:99:8e:
af:50:ea:1a:8c:63:61:7b:17:0b:24:ec:e0:cb:3c:
76:7c:89:cc:f1:5f:55:01:2f:32:b2:f3:cb:7b:89:
4a:15:28:0c:a7:1e:8d:a2:94:9d:87:3c:db:ae:13:
cb:19:59:c9:dd:4f:98:c3:dd:56:e8:2f:e9:ce:71:
44:78:3e:4d:5a:f9:50:0b:18:fe:ec:6a:62:c8:b2:
ea:ad:ed:4f:a8:36:d2:06:09:fb:2c:f3:b2:7f:57:
a0:48:38:28:a4:73:0a:a0:6a:d2:b9:e4:4e:80:aa:
c4:9c:ba:48:a2:ad:84:a3:bb:8d:a8:a7:9a:70:fc:
c3:0d:4e:f0:6c:54:0a:1a:54:65:a2:c2:82:20:d4:
bc:10:36:28:1a:c3:cb:b9:1b:bd:b9:7e:dd:f1:ba:
f6:b1:ce:94:c4:5c:ee:e1:94:ac:ee:12:58:4c:fc:
74:c2:7f:d9:b5:eb:52:ee:80:f8:37:5c:f7:67:0a:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:92:92:90:73:73:91:54:2D:6A:4F:C3:15:E7:8D:63:C0:CC:B3
X509v3 Authority Key Identifier:
keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b7:55:cd:00:90:9f:7b:9e:ad:84:1e:eb:20:de:da:3a:1b:
a8:8f:5f:8f:ad:7c:23:e2:5d:33:50:24:39:c0:25:53:d8:06:
4e:cb:87:c8:87:71:06:c8:e0:3a:6b:54:34:74:76:85:47:c7:
1e:b4:8c:26:08:50:ad:3d:13:cb:26:30:a0:a1:0d:f7:9d:09:
45:58:87:c6:e9:d0:a9:22:73:bf:87:a2:87:3a:fc:41:1e:32:
56:ca:c8:29:47:b1:aa:f6:e3:8c:8d:1e:ea:cf:ba:44:cf:c0:
f0:48:5c:05:bf:ac:68:e5:42:70:58:d8:3a:98:c2:fb:ec:36:
0d:fc:55:22:52:65:17:37:a8:e6:03:3d:47:d8:0f:6a:7f:a4:
3e:74:33:aa:75:66:5e:19:ef:70:7a:89:98:62:8e:b1:73:55:
d0:48:a0:35:2b:6d:9b:a6:2b:24:6f:02:bc:3a:02:56:77:bf:
05:c2:df:d2:b5:bd:dd:10:f2:3c:cd:43:73:06:9e:e2:be:27:
dc:d7:e5:c5:4c:18:73:27:e9:ba:55:5f:1c:a9:a4:7f:75:80:
3e:c8:2f:7c:39:b2:7f:eb:3f:e0:3e:31:7e:49:01:cd:5b:68:
75:92:9c:d0:b9:49:09:29:25:01:a5:9f:48:5d:10:c7:34:e7:
19:50:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:15:32 2026 by rpki-client