
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier: j91qCKzcmsakxfKK+yEKEtL+sVy17qM6+39l0J4obhg=
Subject key identifier: D9:8E:03:B4:F3:99:DF:C2:57:AA:0D:09:1D:07:93:0E:43:0B:D3:A7
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial: 08B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number: 0893
Signing time: Fri 18 Sep 2026 20:42:30 +0000
Manifest this update: Fri 18 Sep 2026 20:42:29 +0000
Manifest next update: Fri 25 Sep 2026 20:42:29 +0000
Files and hashes: 1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: C4J0+eQKbUPGRcTBEeWt0sWTDqxCgElEZJQH0cNKHRw=)
2: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: 816YLoIvH9Oaj07rOnlACoUv6ymscAs9lYY/BFhZ/Lc=)
3: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: WzKy9u9B88D10HY+ConM6LT0I2T55QHznbzlIn3dfH4=)
4: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: sI6tR4a2HYfJurDOPfrB4Umd60Gjw1lCZTz+9gBI5MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Validity
Not Before: Sep 18 20:42:29 2026 GMT
Not After : Sep 25 20:42:29 2026 GMT
Subject: CN=6aada236-32d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:11:22:bf:59:8c:c7:38:d6:28:e4:bc:7f:b9:
d1:a8:08:d5:32:23:b7:63:f3:e1:74:49:8c:ed:63:
a9:a3:4d:8a:4e:04:29:de:c1:14:90:7a:38:36:54:
8f:98:69:85:f7:0d:36:8b:35:4d:32:f9:fc:17:85:
81:38:cc:42:f3:5c:6b:4f:3f:53:34:ca:3f:71:b6:
ac:9c:c1:a1:87:48:ff:c7:99:4a:01:a4:70:03:8e:
fb:af:46:5c:88:85:10:bd:94:09:b6:a0:86:de:98:
4d:37:2a:a3:34:35:9f:d0:93:2b:91:c9:d4:13:d6:
6d:95:87:53:ff:72:67:15:2d:9a:1b:67:97:1f:22:
b8:b2:f0:13:66:3b:fb:c7:44:02:24:cf:70:18:22:
fa:08:6e:ab:ec:ad:87:57:8f:0d:0f:89:6b:a7:4d:
e9:9c:0f:a0:d5:f5:b1:ce:20:65:92:da:03:a5:85:
83:57:21:16:4f:6f:47:ee:f5:bf:a2:4a:a2:5b:fd:
65:9f:0f:72:82:c5:1c:cd:a8:94:cf:6f:12:e4:80:
bb:4b:9c:5f:f3:d3:64:15:dc:30:19:a5:5b:6d:39:
d7:f1:62:23:84:41:bb:3b:4b:8b:84:0f:a5:c9:59:
8e:95:93:1c:45:a3:b4:d9:d0:62:2e:9f:e6:93:5f:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8E:03:B4:F3:99:DF:C2:57:AA:0D:09:1D:07:93:0E:43:0B:D3:A7
X509v3 Authority Key Identifier:
keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b3:d6:af:04:06:13:49:8e:a1:1b:32:8c:c1:d8:27:30:74:
da:2f:3e:a6:89:24:e4:e5:fd:b5:c1:1d:09:51:91:90:11:af:
be:50:99:d6:c3:6f:fa:48:c3:93:af:3a:6e:84:c5:07:a7:c2:
95:ba:0f:43:0d:28:f3:47:6d:4d:ad:7f:47:4c:e7:81:46:2a:
96:dc:19:83:b5:93:b6:d7:9b:a1:41:ce:e4:98:ee:6c:28:86:
12:11:39:8f:fc:38:7b:ba:cc:f0:5f:76:93:a7:4e:cf:25:74:
79:97:d7:6a:5f:61:f4:3b:92:78:65:46:e0:1b:42:21:fc:de:
1e:11:d8:90:93:52:67:f4:ec:d0:d5:77:14:89:20:94:7d:71:
7c:5f:e0:82:f1:14:9a:d2:50:fe:c0:38:ed:c2:4b:8b:2b:a2:
0e:62:11:32:c5:5a:1f:e1:00:54:f1:83:b7:88:da:3d:f6:40:
4f:14:47:b8:4d:38:6f:7b:4c:37:1e:34:07:3c:ae:a5:b9:50:
8d:21:2e:38:91:ad:80:bc:46:a1:13:2d:80:cc:f0:af:65:3a:
68:4c:f5:1b:eb:94:a6:76:e8:61:a7:ef:56:d1:fa:5f:11:08:
58:dc:38:01:df:b7:ab:88:9f:be:e9:4b:8d:67:cf:97:e8:29:
b7:fc:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:39:32 2026 by rpki-client