
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
File: r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft (raw, json)
Hash identifier: Hf/NrNwNHx1cS/vlYXZXXRXjsoK0+L7ow89J5CiYbcI=
Subject key identifier: 16:28:42:08:D5:70:2B:A7:9B:72:9F:4E:7C:F4:73:B4:81:D7:08:05
Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48
Certificate issuer: /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
Certificate serial: 0832
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
Manifest number: 082A
Signing time: Sun 20 Sep 2026 21:02:19 +0000
Manifest this update: Sun 20 Sep 2026 21:02:18 +0000
Manifest next update: Sun 27 Sep 2026 21:02:18 +0000
Files and hashes: 1: r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl (hash: Hd7bLQdv11rU94EVZp5lB2NCptKV85/1jD68zJDR9Ik=)
2: 72BCBB042FC211EBB8550B0AC4F9AE02.roa (hash: s+Jl83N9Gae1QXY9bBMMTJJz80QnAkoP6fzOKwbkryc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl
rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098 (0x832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F53A, serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
Validity
Not Before: Sep 20 21:02:18 2026 GMT
Not After : Sep 27 21:02:18 2026 GMT
Subject: CN=6ab049da-8357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:84:ed:2d:a4:e7:b2:a4:3c:fe:8a:78:b3:
5f:c2:3d:d6:05:c2:21:67:85:68:81:14:ac:9e:c1:
f4:d0:cf:ff:da:44:96:96:d0:5e:0a:eb:b9:21:38:
d3:ca:f9:e4:eb:33:f0:ba:3c:0a:24:f1:0e:a7:c4:
7d:a0:26:6d:36:a4:1a:12:ff:5b:f2:fc:5e:2a:a6:
04:7f:16:f5:ea:a9:18:c3:cd:20:18:84:26:41:b0:
c6:a8:f1:66:1d:17:aa:66:98:49:a9:84:50:55:e2:
3c:dd:f4:29:94:cd:1b:b6:36:c7:9b:66:90:d8:bc:
1f:ba:cf:6e:5d:6b:41:d1:c0:83:c4:a7:36:51:bf:
16:9d:97:11:01:b8:b3:2d:cb:ef:42:c5:fe:a7:0d:
b6:5e:96:ba:2f:cf:59:2f:40:e1:91:99:23:8d:3b:
a8:9c:27:9d:b8:1d:06:4d:2b:2b:b8:f6:3e:71:eb:
65:cf:2f:3a:c0:b8:f0:5b:6e:44:81:5f:15:33:32:
a2:50:04:8e:11:ef:b8:6e:51:dd:ce:3a:1e:56:20:
dc:44:d3:a1:02:73:1b:01:40:d4:11:2e:85:2f:5d:
51:1b:cb:1a:c6:92:e9:d9:f8:0d:2e:ae:3b:c1:36:
44:ae:10:7f:07:d9:d5:86:5c:63:e8:e8:a6:57:f2:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:28:42:08:D5:70:2B:A7:9B:72:9F:4E:7C:F4:73:B4:81:D7:08:05
X509v3 Authority Key Identifier:
keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:60:17:32:70:95:d8:57:0f:4b:bb:90:b1:e0:0f:98:2b:53:
ff:28:bc:2e:67:07:08:5b:42:36:69:5f:89:fe:d8:e3:8a:5e:
e5:84:d3:dd:32:27:bd:81:38:1e:0d:97:b0:6a:a0:0f:a0:ad:
d0:ba:c9:03:c6:63:13:79:bc:e0:21:bd:3a:92:e4:af:47:7b:
e9:06:b6:b3:be:6c:c2:f0:d5:a3:92:19:9d:82:67:f2:4a:b0:
94:2e:f7:f4:df:55:61:72:de:77:7a:c8:b7:fb:96:a9:a7:1d:
c7:a9:56:42:23:f4:a8:d7:2f:ef:d1:dc:b7:de:35:a0:69:17:
55:ff:71:e6:3a:2b:bb:44:1f:09:7c:1d:03:1d:6f:5d:76:41:
60:22:3d:cd:4b:e1:2c:b0:8f:3b:d1:03:8f:20:dc:f9:de:c6:
64:01:b0:b9:24:95:44:14:ef:ce:94:b2:32:61:70:6c:2e:18:
b4:99:82:1a:8f:64:46:50:80:dc:4d:0e:8b:1d:9d:c3:7d:b0:
9a:3b:1f:c7:56:f3:f3:91:c9:be:ea:77:d9:68:9f:d5:1d:60:
f1:88:d3:08:18:80:17:2a:ac:cc:4f:0d:0e:59:ad:a6:97:3b:
e4:c4:cb:04:11:ab:83:9e:c1:a9:e2:a6:0a:cf:48:8d:58:13:
d7:aa:c1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:33:10 2026 by rpki-client