
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier: dcEfa1WM19So+QsFmkXReNSYUu1fOszrYzvj1iXP0zI=
Subject key identifier: E1:3E:39:78:E0:D9:E1:57:CB:5A:10:DF:19:43:B4:53:6D:B9:54:B9
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial: 0876
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number: 085D
Signing time: Fri 12 Jun 2026 20:54:16 +0000
Manifest this update: Fri 12 Jun 2026 20:54:16 +0000
Manifest next update: Fri 19 Jun 2026 20:54:16 +0000
Files and hashes: 1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: 5ZixwIovgRxpgABiZilsFmHP5p1XSm0GP+28PAN8A5M=)
2: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: uB1ptL86TUYIpYIuNSpFFg8ZR5mh0LibkD3yr4cunXE=)
3: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: WVnMtC67sqQYeTgYbTZ4xUIDg4NnFA5/AGE6r2DSlK8=)
4: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: 1jBi7AFnVCtlT74K0SmC0UKxzEEwhVrbK9WIUjseLKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Validity
Not Before: Jun 12 20:54:16 2026 GMT
Not After : Jun 19 20:54:16 2026 GMT
Subject: CN=6a2c71f8-4bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:f3:8e:f5:e2:03:ef:01:ae:09:61:27:b6:
22:fa:f7:9b:f0:13:95:a6:fb:43:b8:45:98:1c:f7:
d2:71:0d:d1:1d:ba:e2:5f:69:51:00:9f:17:54:eb:
ee:1d:8c:ef:da:bd:8b:08:ce:29:21:a4:9f:c7:64:
0b:a0:19:af:6c:7b:48:56:79:3b:54:32:2a:53:43:
3f:80:2d:d7:f9:bf:ea:4a:7e:83:0e:16:f9:fe:20:
6d:90:47:41:37:0f:66:42:8f:16:66:7a:ec:76:2b:
4e:6c:ff:ec:9f:68:72:f7:76:23:cd:95:f6:6e:b1:
de:89:68:85:6d:e4:35:e6:73:b0:d9:39:78:e1:cd:
69:cb:ab:e1:23:29:f9:39:30:81:6c:36:53:e8:f8:
bc:45:04:8f:88:81:3b:95:d0:42:77:b2:f2:70:ed:
02:8b:2e:b2:c1:f2:9f:b6:12:16:55:db:83:5e:da:
68:8a:94:4c:0d:d4:94:49:89:3e:78:17:70:23:2e:
66:38:d8:e4:4c:33:52:60:44:24:ef:05:66:12:2a:
0f:3f:1e:fb:9f:d5:f3:80:3b:31:07:a1:2f:9e:fc:
cf:01:2a:32:78:75:2e:df:e0:38:3f:77:12:4f:05:
91:61:5d:d5:04:3d:e7:b0:54:c9:0e:04:55:80:96:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3E:39:78:E0:D9:E1:57:CB:5A:10:DF:19:43:B4:53:6D:B9:54:B9
X509v3 Authority Key Identifier:
keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:3f:a0:13:13:22:5f:01:7d:98:0b:c9:93:c7:00:cb:8c:89:
49:6f:0e:8f:ab:01:69:32:5f:8c:8d:e9:44:1d:8b:fc:01:b6:
67:1f:88:d2:bc:a9:b8:74:87:0c:91:6a:05:7e:51:8c:0c:cc:
aa:eb:4c:05:7a:d2:11:c6:50:49:22:e9:43:7e:09:34:07:43:
4a:ef:af:6b:e5:de:dd:14:38:2f:b8:dd:e3:ff:30:94:7c:75:
2c:2f:48:e3:85:0b:a5:2f:f6:9f:54:c4:61:74:e6:47:ae:94:
7a:93:d3:0e:21:b2:fe:d4:ed:ae:66:29:bd:a1:7c:4c:ee:17:
bd:1b:30:da:bc:7b:6a:a0:92:f4:61:6c:26:7c:f1:af:27:0e:
aa:db:e0:5d:cd:ed:c7:0e:99:2f:0b:95:72:67:0d:12:b9:3e:
2b:17:e4:56:33:a5:33:bf:6c:48:7d:ed:33:6c:13:eb:81:80:
44:fe:2b:98:2a:e5:d6:44:ed:52:fe:46:c0:0f:4f:cf:73:2f:
a0:56:25:dd:a4:7a:ce:85:ac:75:14:7e:27:94:75:80:4e:d3:
49:64:d1:fb:8c:2b:70:06:b2:66:d3:84:4b:bb:4e:10:0a:76:
03:02:ac:48:d8:48:bc:5c:95:f3:b6:f5:39:67:37:b6:cf:43:
ef:1e:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:52:44 2026 by rpki-client