
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
File: 4goGuYVhP9oaaujHZ7pLjX9yQFs.mft (raw, json)
Hash identifier: AXcc0sNwx2Earxz1yri3TiTQdAwcTRZYImymxnK55as=
Subject key identifier: 79:92:20:92:2F:23:FF:48:8F:59:68:94:EC:D2:7C:AF:81:1D:25:91
Authority key identifier: E2:0A:06:B9:85:61:3F:DA:1A:6A:E8:C7:67:BA:4B:8D:7F:72:40:5B
Certificate issuer: /CN=A918B2BC/serialNumber=E20A06B985613FDA1A6AE8C767BA4B8D7F72405B
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
Manifest number: 28
Signing time: Mon 21 Sep 2026 08:45:10 +0000
Manifest this update: Mon 21 Sep 2026 08:45:09 +0000
Manifest next update: Mon 28 Sep 2026 08:45:09 +0000
Files and hashes: 1: 4goGuYVhP9oaaujHZ7pLjX9yQFs.crl (hash: C5CaqNiVJrRBy0LR8+nbiJrDwol9wHdLwuVhJrQPMj0=)
2: F407EC687A8711F18A4B7A2898A30FBC.roa (hash: dbJOtySmHlCrVLnA91Fl15rpXoiwAXBjnY/J/x5tB+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.crl
rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B2BC, serialNumber=E20A06B985613FDA1A6AE8C767BA4B8D7F72405B
Validity
Not Before: Sep 21 08:45:09 2026 GMT
Not After : Sep 28 08:45:09 2026 GMT
Subject: CN=6ab0ee95-460e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:c9:a3:09:b4:07:38:5d:a1:c6:84:d2:08:
7b:29:12:dc:41:a6:1c:f7:c3:44:c5:38:49:4e:93:
59:7d:44:42:fd:84:96:98:6c:07:c9:41:47:3a:8a:
f8:fc:17:9a:ed:f9:c3:70:f8:d6:21:6d:35:0b:fe:
80:17:32:a4:47:6b:1d:51:ff:24:80:6e:2a:89:6d:
b6:7e:99:25:15:28:88:f6:cf:75:68:5b:ed:89:3f:
48:19:f3:d1:d1:53:d0:ca:d9:9a:d7:d3:5b:3b:91:
2c:1d:35:54:8f:93:72:d6:a3:a1:7b:e2:71:78:a6:
ba:63:59:0b:85:af:a2:e0:64:56:38:1f:72:f4:c2:
9e:12:b5:00:68:b8:26:80:62:67:c7:b2:77:33:26:
52:06:9c:1a:d5:31:a8:1b:75:3e:85:e3:09:8c:18:
1d:2b:90:7e:6d:5b:82:e0:3e:d4:94:d9:6e:c0:b9:
67:a0:57:0f:5d:16:84:1c:ae:71:40:bb:f8:65:d1:
95:df:95:15:df:ce:f7:97:93:b0:d1:44:b8:49:47:
48:7f:28:09:02:5c:41:34:e8:e4:12:88:e9:d6:8f:
21:df:01:74:b3:e2:b8:ce:fc:94:f6:2f:6d:f3:4e:
9d:4f:43:ad:0c:d0:62:f3:f2:bf:c8:50:6c:db:0f:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:20:92:2F:23:FF:48:8F:59:68:94:EC:D2:7C:AF:81:1D:25:91
X509v3 Authority Key Identifier:
keyid:E2:0A:06:B9:85:61:3F:DA:1A:6A:E8:C7:67:BA:4B:8D:7F:72:40:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1b:2c:9d:c1:50:0e:a0:4d:33:d2:91:c4:f0:e3:b9:fc:81:
74:5b:91:04:47:65:6c:20:2b:46:6d:ae:36:e5:66:5e:47:ab:
52:bb:73:e9:06:12:46:d3:0b:db:14:71:74:ff:53:56:aa:95:
8b:4e:39:e3:5a:82:d2:53:4d:e9:d0:1d:28:c1:47:10:b2:ec:
0f:c0:ff:3d:00:3f:f3:e4:a3:88:16:c6:10:28:56:76:04:13:
1f:d3:15:08:5d:15:06:50:a8:28:82:9e:59:75:6a:fe:b5:e1:
2e:f4:29:55:8d:3c:f8:0a:80:b4:dc:70:9f:b7:84:b8:88:6a:
ba:da:57:4f:37:16:a6:15:bd:de:05:5c:07:4d:c0:70:f2:5f:
8a:8f:f1:85:7f:f6:eb:db:5f:1f:a8:29:31:ec:aa:28:36:fe:
7b:48:b8:86:fe:b5:c3:44:1d:3e:1f:2d:a9:c8:9f:c1:20:db:
f9:dd:5f:68:81:1f:c2:91:7c:a0:ba:a1:24:2d:2a:e8:24:73:
b5:c0:53:9d:94:b6:b7:84:7c:08:c6:15:22:ff:f3:4c:4f:df:
7b:00:46:38:f8:09:cb:0e:75:fb:b4:8c:db:ae:b1:ac:17:dd:
a5:84:a2:8e:43:52:85:6a:3d:f5:da:04:8a:51:88:19:3d:38:
78:b6:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:22:32 2026 by rpki-client