
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json)
Hash identifier: 5fTbK7P88Ol6ywOwnx53bb4p1NnFxnuN5wt0pt4X8mg=
Subject key identifier: 68:CC:83:9E:C9:E1:7A:3F:10:0E:BD:34:99:6D:D4:0B:84:F6:75:6A
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
Manifest number: 020A
Signing time: Wed 13 May 2026 03:18:02 +0000
Manifest this update: Wed 13 May 2026 03:18:01 +0000
Manifest next update: Wed 20 May 2026 03:18:01 +0000
Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: 5bI1c19aIUDE6vw8JMlhicyWI0daQ05Dh7I668w0Xb8=)
2: 9442231871C311EEB4110C83C4F9AE02.roa (hash: CtXBhxoisr4SYK/f9f/omh5fKwAOo6P6cylFnj5/1Yo=)
3: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: M5QyWCb/5GM72fMpLUozBYOSJsZfEv4i/WvJccFY5tw=)
4: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: 0kI9xgTVy0Q8AQiYnQllAIH+FuKivWg9E5qZ+kjunPA=)
5: 7A8F4240393811F1A6F67D5ABF833773.roa (hash: /u24Mf/LgFYg4eR3AP4svNvCuvsa7zKvkdwusWLNwWw=)
6: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: /aPiYkMEN8C6qUO8Pny2rmzkP4V9An/tcZvBVxLgCJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Validity
Not Before: May 13 03:18:01 2026 GMT
Not After : May 20 03:18:01 2026 GMT
Subject: CN=6a03ed6a-05e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:6c:c9:a6:02:98:07:8a:8a:d4:45:8e:8a:
5b:30:99:f5:1a:ed:b8:c3:3a:df:71:ce:53:73:76:
e3:14:1a:ab:62:54:1b:6c:15:f1:91:e8:72:39:5c:
6e:0e:5d:f4:2b:96:48:61:3b:39:ee:60:f1:bb:34:
87:2b:79:56:87:74:10:48:4b:3c:5a:91:ef:55:ff:
5b:1e:b8:d8:26:a2:6e:5f:63:4d:e3:66:89:82:46:
8c:e0:2b:3f:d4:47:9e:5f:f9:1a:9c:dd:88:fc:c0:
09:f7:b0:a8:d0:4a:13:2d:15:23:f2:46:3c:0d:d2:
5c:5b:2d:e3:73:86:d9:57:f3:27:79:62:0c:76:78:
eb:42:1b:dd:fd:93:e9:f0:d4:c9:d4:dd:a2:39:df:
56:fb:a0:bb:2d:82:bb:1e:cc:67:c2:07:59:a2:27:
77:c7:bf:53:ea:c6:7d:00:c7:df:e0:33:23:4d:e7:
fd:fa:43:9f:51:3f:49:54:9d:6b:82:bd:a1:d3:2f:
24:9b:4b:d8:b8:a8:c0:4f:83:e2:90:b9:67:05:d6:
14:8d:9d:7e:ea:31:5a:cf:a2:6e:e8:36:44:dc:d6:
70:56:9e:cc:77:98:71:be:87:1c:64:ed:98:4b:f2:
37:ef:66:01:8e:8d:de:65:6b:5a:90:7f:65:aa:9e:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CC:83:9E:C9:E1:7A:3F:10:0E:BD:34:99:6D:D4:0B:84:F6:75:6A
X509v3 Authority Key Identifier:
keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:34:96:7b:95:1d:e0:f3:10:5e:b6:aa:b0:59:b7:7f:39:6e:
b5:67:2a:37:71:ce:3e:79:3a:46:81:61:9d:63:76:04:b1:ee:
0d:8f:e0:5c:34:fe:8b:6c:ec:5c:93:66:17:ba:36:d6:bf:42:
e7:ce:b1:f0:2e:b0:fe:4c:14:dc:4b:07:1b:d5:bc:20:a4:d0:
9f:31:10:2a:4f:94:a2:8b:8b:7f:4c:19:8d:f6:c8:eb:31:87:
fa:22:bd:64:08:09:8e:17:43:70:f9:93:5b:c8:cc:4b:91:00:
d6:df:53:4d:cf:a3:7a:b7:7c:43:de:44:9a:b1:61:b4:7f:74:
99:8a:70:67:2a:97:54:a8:c8:12:09:be:8e:61:0a:20:34:06:
ad:82:68:6a:96:0e:1c:5f:d5:2c:36:77:a3:a7:88:90:ac:7e:
9d:4c:53:1a:04:4b:76:08:b7:92:18:cb:98:d6:23:32:71:72:
57:17:ab:54:65:4a:65:45:2f:40:a7:a5:8e:e3:13:20:59:0a:
81:5d:44:f7:64:86:80:cf:ea:98:a5:08:23:b8:79:7a:34:9f:
2c:51:9c:cc:77:b1:e0:85:56:b8:da:5f:8f:56:fd:5f:68:c1:
6f:68:0f:2b:35:91:5b:60:7b:56:a6:8b:11:ed:5d:56:27:51:
2a:97:bb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:41 2026 by rpki-client