
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
File: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json)
Hash identifier: 6aC0FggYapC/yuW9+nIh047IrulpwOgev4iYbVWA0GE=
Subject key identifier: 56:AC:4A:39:65:06:C6:1F:D6:6A:BC:61:D3:EC:1E:B9:D6:17:BD:33
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Certificate issuer: /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
Manifest number: 010D
Signing time: Thu 11 Jun 2026 08:19:06 +0000
Manifest this update: Thu 11 Jun 2026 08:19:06 +0000
Manifest next update: Thu 18 Jun 2026 08:19:06 +0000
Files and hashes: 1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: t9JdohgNk0tsVZjbn5XJfxTuBppeyEx0EsGSY6oxY/s=)
2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: x4m5M8TdUipL7o6slEBASzNPQRc6mguoljJR97i4R5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
Validity
Not Before: Jun 11 08:19:06 2026 GMT
Not After : Jun 18 08:19:06 2026 GMT
Subject: CN=6a2a6f7a-5ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e0:fc:51:6c:d7:1f:43:81:26:c2:30:25:43:
c5:b7:60:d2:b6:a5:e0:66:d0:d0:66:ce:5d:1b:10:
b1:4b:99:ce:80:13:3d:4a:70:74:75:67:23:fb:4e:
67:2f:af:22:c8:91:4c:b0:ed:92:59:15:b9:03:42:
5b:78:91:ba:51:40:24:6b:e1:52:16:23:9d:84:44:
cd:34:09:97:3b:2b:47:64:c4:11:41:b2:c5:0b:33:
5d:b2:bc:88:7a:f9:d5:fd:ef:f2:c3:41:5d:ee:cf:
1f:fb:70:f6:eb:69:d6:f6:27:01:a7:59:45:b8:d5:
8a:19:49:d7:bf:a5:b7:0d:1a:53:ba:99:42:53:77:
0d:ca:6a:31:7e:f0:c3:73:14:0f:05:c3:97:a8:f2:
4f:fe:01:71:be:91:bf:2a:15:80:6e:80:6f:83:cf:
75:c7:2f:c6:c7:50:e9:68:79:9e:a2:9f:5c:43:b6:
8c:4f:08:a4:e7:a4:c0:71:fd:d4:ff:7f:66:2b:a0:
d1:3b:63:80:70:be:45:82:25:93:7d:83:f2:fb:c3:
6d:f8:00:d6:45:ee:49:12:9c:4a:4e:58:c3:ec:46:
18:b0:06:c0:5a:0f:94:cf:53:67:6d:48:47:06:13:
14:c9:36:0f:37:db:ab:09:f1:0c:39:17:61:34:00:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:4A:39:65:06:C6:1F:D6:6A:BC:61:D3:EC:1E:B9:D6:17:BD:33
X509v3 Authority Key Identifier:
keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6d:51:40:2b:36:15:41:5d:66:f3:1b:c1:6f:ac:fc:61:33:
1b:12:33:d6:57:af:24:ed:8f:a3:ca:e5:61:30:eb:67:bf:89:
dd:db:40:87:8a:f8:74:ac:b0:70:4a:40:06:ce:70:d4:49:0a:
45:c9:05:13:9f:d0:d6:7a:48:e8:18:6e:b9:d3:6a:74:49:ac:
d0:18:48:4f:08:a8:2f:e4:37:ba:fc:be:2c:3b:81:1c:95:f5:
76:38:70:6d:10:0a:55:27:1d:d1:67:7b:5b:e8:74:17:1d:a5:
7c:63:e4:95:03:ef:8b:26:68:59:52:45:6d:50:e3:e8:e9:f5:
0c:fb:ab:5a:dd:15:91:2f:ad:c7:b0:0b:6d:66:9f:66:86:6c:
59:4f:8a:90:10:17:bd:0a:3b:7d:6c:6f:b1:c6:af:08:a6:40:
7b:a7:f0:ba:83:b5:74:ff:ab:ec:06:d6:f2:51:0c:ce:97:06:
dc:14:35:cd:7a:c0:63:53:9d:e7:7d:3f:44:0b:01:91:18:23:
a9:37:38:27:29:2a:23:51:72:fe:22:a1:3a:c5:18:22:47:3c:
00:35:14:fb:8a:cd:75:a8:1f:f7:8d:57:42:0e:13:97:81:a8:
f7:6e:64:79:88:d6:39:f4:78:e3:72:19:cb:cd:11:9d:29:94:
1d:2a:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:38 2026 by rpki-client