
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json)
Hash identifier: oToMy41+RLHq0jqszGclx1cGyR91o/vnv2KiYkWZdPM=
Subject key identifier: BF:D1:A8:72:6F:70:14:BF:47:57:B7:DB:C0:82:C7:23:27:CD:12:21
Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
Manifest number: 0240
Signing time: Mon 02 Mar 2026 01:01:24 +0000
Manifest this update: Mon 02 Mar 2026 01:01:21 +0000
Manifest next update: Mon 09 Mar 2026 01:01:21 +0000
Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: WmoLJoBE//S58hUQtiopS3P8OEar02Ll2CFcOVJoWdE=)
2: A4D24AE4C8A811F0B2500664C4F9AE02.roa (hash: 5KyYdKKzKKNZJ5o3lIKnEvZm4/+01rm3shU8ePI1af8=)
3: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: 1d10xZbJawZOgiRoLspusD2wd9i5IKQYkPksSCGbosM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Validity
Not Before: Mar 2 01:01:21 2026 GMT
Not After : Mar 9 01:01:21 2026 GMT
Subject: CN=69a4e163-acc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:38:bc:e2:de:6b:f8:b5:34:86:d1:64:89:
30:e1:cc:3e:30:f3:e2:21:5e:56:bc:f2:21:0c:9c:
dd:fe:96:10:d3:2c:f6:4e:bd:2b:4a:5f:e5:4e:bd:
08:c7:51:d7:14:6f:a0:08:a7:3f:fe:5b:ef:7a:42:
a8:82:11:41:a8:0c:81:d3:78:f2:b1:e6:4c:0b:f9:
b8:e9:c8:9f:31:c2:80:96:1a:75:46:d6:7b:e7:ac:
ed:66:af:e8:d7:c6:4d:07:5b:2e:4a:d5:99:e8:6c:
99:89:1b:c9:ab:8c:27:f1:29:c4:ec:a5:f3:ed:12:
6b:ca:4c:42:d5:3f:cb:73:ac:3a:5d:c4:2e:88:43:
03:8c:f9:62:f0:13:24:aa:5d:f9:15:f1:6e:3d:d8:
1c:14:00:7a:b7:e7:77:f2:69:22:58:6d:cc:1d:2a:
ab:70:bb:6d:72:e5:5f:76:41:51:69:e2:6c:ae:4f:
56:dc:13:29:76:dc:c3:53:42:38:e7:36:9d:a9:eb:
c4:1a:a3:6a:c6:f8:cb:5d:60:4b:42:2c:7d:a4:50:
3c:2b:c3:d5:d5:a1:be:1a:97:55:78:9b:ee:a1:f9:
ba:83:5c:f4:36:68:15:09:b2:75:5b:8d:6f:6a:84:
1f:ed:74:46:91:b5:41:61:30:ab:9b:ee:22:1a:91:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D1:A8:72:6F:70:14:BF:47:57:B7:DB:C0:82:C7:23:27:CD:12:21
X509v3 Authority Key Identifier:
keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:db:36:44:ae:a3:e6:2b:4c:7f:4b:6f:62:82:9d:80:8a:b3:
7f:97:36:78:a8:c2:8a:b6:4d:8b:0d:6c:78:1a:23:bd:c5:02:
d2:14:16:43:d4:45:aa:57:27:06:92:6e:82:59:28:c9:2a:32:
a0:02:4f:d8:1c:90:59:5a:35:d7:85:cf:00:5e:a4:15:a3:04:
e7:0d:be:ed:91:69:1c:03:d9:f7:7d:cf:76:a5:e4:ad:a2:34:
fb:b1:89:42:e5:de:49:42:9e:fd:97:39:19:e9:6e:aa:72:4f:
15:de:15:a4:6f:65:f3:d0:9b:33:e7:a7:62:d4:2e:dc:1b:89:
05:ea:cd:7c:d1:b9:8c:d9:62:ab:b5:60:f4:ae:a9:7c:d3:05:
e2:24:2a:23:90:45:ab:f4:db:3e:81:e0:53:e7:3d:f4:a9:f9:
d9:48:be:c1:e1:06:05:01:33:43:de:25:99:81:b3:f6:ab:ee:
33:50:f0:a9:88:38:e8:2c:c8:7d:b2:2e:5e:4a:e0:27:76:a3:
82:eb:26:19:c0:ef:b5:81:f8:82:73:27:7e:50:68:33:de:37:
2e:a9:23:6d:29:43:e1:56:ab:f7:0d:cf:39:e8:75:de:d2:b2:
f4:bc:4c:a5:80:6a:3b:0b:86:5e:12:4e:33:04:91:f1:c0:ad:
eb:69:b4:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3
RTEzQUUxMDMwHhcNMjYwMzAyMDEwMTIxWhcNMjYwMzA5MDEwMTIxWjAYMRYwFAYD
VQQDEw02OWE0ZTE2My1hY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuv44vOLea/i1NIbRZIkw4cw+MPPiIV5WvPIhDJzd/pYQ0yz2Tr0rSl/lTr0I
x1HXFG+gCKc//lvvekKoghFBqAyB03jyseZMC/m46cifMcKAlhp1RtZ756ztZq/o
18ZNB1suStWZ6GyZiRvJq4wn8SnE7KXz7RJrykxC1T/Lc6w6XcQuiEMDjPli8BMk
ql35FfFuPdgcFAB6t+d38mkiWG3MHSqrcLttcuVfdkFRaeJsrk9W3BMpdtzDU0I4
5zadqevEGqNqxvjLXWBLQix9pFA8K8PV1aG+GpdVeJvuofm6g1z0NmgVCbJ1W41v
aoQf7XRGkbVBYTCrm+4iGpH8GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/RqHJv
cBS/R1e328CCxyMnzRIhMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1
QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY
OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUts2RK6j5itMf0tvYoKdgIqzf5c2eKjCirZNiw1seBojvcUC0hQWQ9RFqlcn
BpJuglkoySoyoAJP2ByQWVo114XPAF6kFaME5w2+7ZFpHAPZ933PdqXkraI0+7GJ
QuXeSUKe/Zc5GeluqnJPFd4VpG9l89CbM+enYtQu3BuJBerNfNG5jNliq7Vg9K6p
fNMF4iQqI5BFq/TbPoHgU+c99Kn52Ui+weEGBQEzQ94lmYGz9qvuM1DwqYg46CzI
fbIuXkrgJ3ajgusmGcDvtYH4gnMnflBoM943LqkjbSlD4Var9w3POeh13tKy9LxM
pYBqOwuGXhJOMwSR8cCt62m0YA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:55 2026 by rpki-client