
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier: IXILjeDAZsAI0CtI7x2KuOdbtlEa7B/MUpBtvJ/5ZnY=
Subject key identifier: 7C:7C:9A:3B:FE:70:D5:32:BB:00:9B:24:54:42:08:A4:68:3C:51:5E
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number: 0130
Signing time: Fri 17 Apr 2026 05:19:54 +0000
Manifest this update: Fri 17 Apr 2026 05:19:53 +0000
Manifest next update: Fri 24 Apr 2026 05:19:53 +0000
Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: b18NyAWQJaVuwBI5zNwAqBliwGiQWZf/Qofgz+N7vNM=)
2: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: jyhxOeVpH0OFLETq5nPbqtVCOCG8G/oOvurrxR+iOB4=)
3: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: 1lIzFQEALQy8v+QadRa7FoXrMcnKcVBzKsOnfc22ih8=)
4: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: 2lh0VekensC1iCGtapEG4/oWVTugB2CUNEuEgGTMM4E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Validity
Not Before: Apr 17 05:19:53 2026 GMT
Not After : Apr 24 05:19:53 2026 GMT
Subject: CN=69e1c2f9-4219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ce:ce:e4:2f:1d:c7:aa:ba:d6:94:0d:d6:e9:
a0:1b:9b:79:b3:2f:77:08:c7:39:c5:6b:c4:4a:26:
fa:66:cd:94:38:e0:ea:30:4e:43:4e:2f:1d:35:81:
5c:4d:e9:c0:63:6d:de:d2:14:b8:d4:ee:23:71:f5:
32:cb:94:dd:92:21:06:ea:38:ba:59:e5:1f:dc:3e:
95:db:23:4e:0a:07:1f:44:c0:a1:f7:f9:59:99:21:
30:21:46:ee:1e:73:6e:4e:97:ec:cf:53:19:9b:78:
f4:37:be:db:a4:a9:3d:ac:76:3a:38:09:17:f8:0d:
f1:e9:c6:af:34:71:de:1b:ee:3a:17:55:a6:ac:91:
b8:0d:88:f7:8c:b5:2c:df:5f:2a:a1:ac:52:bd:b8:
d9:6d:24:bc:57:65:c2:e2:cc:e8:90:15:b2:c8:ad:
2b:f5:0c:78:bc:41:09:50:2f:c9:05:c1:27:19:1a:
40:d8:3a:ac:36:86:88:4f:33:fb:28:b9:81:cc:21:
3b:1d:f9:54:5d:94:7e:dd:b5:57:33:b0:a2:4f:10:
68:df:ba:73:be:62:7f:1a:3d:88:5d:65:ce:9c:3b:
57:3f:b1:5b:f6:d0:f1:1b:7a:b5:a1:81:68:32:cf:
2b:7c:34:f8:e3:f1:e0:a3:5a:8f:03:e4:65:38:f4:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7C:9A:3B:FE:70:D5:32:BB:00:9B:24:54:42:08:A4:68:3C:51:5E
X509v3 Authority Key Identifier:
keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:73:97:33:64:76:75:37:64:45:bb:5c:8c:6d:f9:e6:62:d5:
17:19:aa:22:f8:f7:2d:76:c2:cd:13:cc:24:f6:1f:bf:52:85:
79:0f:fa:91:1d:f5:27:e2:6d:07:6a:43:43:c8:00:09:2e:14:
f2:ff:68:32:8e:e9:94:f6:bc:2a:e1:56:07:8e:5d:7a:53:7e:
f4:6b:b5:d0:81:47:ce:7f:f6:a8:6f:5b:7c:44:ff:d0:db:53:
92:ee:e3:d3:66:84:e2:d5:7b:6d:57:48:55:e4:e7:59:15:b2:
b7:6a:0c:31:19:a0:c8:c1:ae:fa:b6:7b:17:e5:98:c9:a2:67:
21:7b:54:d8:5f:8e:44:ce:93:d2:fb:6c:b2:49:1b:15:bb:b9:
17:ed:94:52:54:63:85:67:fa:e2:a2:3a:bc:db:65:6a:5d:cc:
cd:9b:a8:58:e5:3b:3d:31:62:41:15:d5:20:e2:ad:58:39:ba:
e7:e1:e2:b4:7f:4e:c9:fc:22:39:5e:03:99:13:35:6c:83:a2:
81:0b:46:38:a3:da:6e:7d:1f:27:de:78:48:e8:e4:a9:78:9b:
67:0e:c8:9c:01:c2:1f:25:84:17:60:3c:4c:a7:df:b8:23:ae:
df:0f:38:b6:c4:a3:db:75:07:f3:91:a4:7e:a9:9d:41:38:db:
7a:20:bb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:09 2026 by rpki-client