
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json)
Hash identifier: TSu8rBVLSHNgmZLHNEiYlX+5Y5+d6aO2/FQe6sFlSYk=
Subject key identifier: 8C:F5:7D:BA:C5:35:F8:EC:3B:19:6F:D2:4D:48:39:80:FB:CD:3E:12
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
Manifest number: 01EE
Signing time: Fri 27 Mar 2026 02:58:48 +0000
Manifest this update: Fri 27 Mar 2026 02:58:47 +0000
Manifest next update: Fri 03 Apr 2026 02:58:47 +0000
Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: pOsH1as2LPXeN5pTGqHzm7uB8qiuO/cvlyLjihExbrA=)
2: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: /aPiYkMEN8C6qUO8Pny2rmzkP4V9An/tcZvBVxLgCJk=)
3: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: 0kI9xgTVy0Q8AQiYnQllAIH+FuKivWg9E5qZ+kjunPA=)
4: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: M5QyWCb/5GM72fMpLUozBYOSJsZfEv4i/WvJccFY5tw=)
5: 9442231871C311EEB4110C83C4F9AE02.roa (hash: CtXBhxoisr4SYK/f9f/omh5fKwAOo6P6cylFnj5/1Yo=)
6: F5E4AAFA2A2711F0A842B012C4F9AE02.roa (hash: Zrvz1tSEtz8Afhm7KI552/oIc3baMmXQtEytTiq93J4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Validity
Not Before: Mar 27 02:58:47 2026 GMT
Not After : Apr 3 02:58:47 2026 GMT
Subject: CN=69c5f268-2ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:8a:65:d8:a9:4e:63:77:2e:ed:d1:6e:8b:
65:8c:38:dc:2d:52:95:fc:f0:91:1d:7e:6f:f5:90:
4a:37:94:f6:5f:6d:2b:10:cb:ab:7c:2d:af:44:1a:
9b:53:82:f4:c7:34:57:42:6d:f7:bf:aa:82:58:db:
18:ed:7f:de:be:ce:b6:1d:26:e5:cf:a8:4c:21:99:
06:d9:5c:d3:06:60:0c:12:ab:8f:0e:ad:84:92:1d:
50:88:5a:55:ee:12:9b:2a:84:d0:9e:2d:cd:39:27:
e2:1a:f7:ff:12:9c:63:de:12:93:b4:a8:c1:54:81:
d1:45:45:f4:64:e4:7c:f7:74:49:60:9c:7c:fc:05:
2d:91:ee:85:f1:b6:d5:8c:39:41:ec:08:91:f5:2e:
57:80:56:dd:9d:a4:4b:cb:3e:b9:49:70:93:79:a7:
ca:5e:51:83:7a:a4:d0:d3:25:9c:e4:3e:d4:1f:ff:
6e:88:c2:55:83:91:3a:9d:12:58:b4:72:f4:68:04:
2c:d0:e5:67:7f:fd:5c:d2:45:b2:5f:83:1d:db:3d:
bf:76:fb:6c:d4:a0:d1:a6:50:3d:bc:05:1d:85:3c:
aa:22:29:af:30:fc:86:1f:b9:51:c2:42:4e:8a:5f:
e4:e1:33:c9:41:05:d0:e0:f4:4b:84:6e:f8:98:99:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:7D:BA:C5:35:F8:EC:3B:19:6F:D2:4D:48:39:80:FB:CD:3E:12
X509v3 Authority Key Identifier:
keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:19:44:a5:1b:5e:90:0d:96:75:23:f2:32:a1:8d:3c:d2:ae:
c4:d6:21:9b:fe:02:21:7e:0b:02:31:fd:dd:8c:09:5d:16:9a:
10:b3:8a:07:00:05:4f:bf:78:a3:47:36:8f:8d:e4:e0:e4:1a:
60:94:3c:dc:2d:08:9b:b5:a1:2b:5f:31:18:ff:0c:d9:80:9e:
b5:e2:ae:b2:8a:46:d5:bd:dc:2c:9b:df:d4:20:df:29:12:80:
65:cf:49:6f:5e:00:a0:4d:5a:d1:2b:b5:30:6c:cf:21:9d:0a:
d3:79:03:01:08:3e:30:69:8d:1b:77:c1:cb:31:8c:e0:33:bc:
ec:c2:37:32:64:82:26:7d:58:54:ec:04:3a:91:a9:ad:02:3e:
d9:fb:77:7e:90:7b:13:68:ee:e6:f5:d9:46:99:6c:78:c9:d7:
ec:24:cb:38:4b:fd:3b:87:fb:8a:78:48:0e:f8:43:49:72:a2:
16:e8:59:88:ab:78:b2:c3:1e:3c:94:f7:d6:88:19:12:11:23:
57:9c:d5:e5:bf:f4:55:a8:c5:1e:ac:ef:48:ff:b7:aa:b9:82:
2a:7e:cb:5c:86:a0:ff:30:01:de:82:1a:85:7d:c0:58:55:e8:
e9:a9:aa:7c:48:1d:a5:3b:29:e4:94:b4:f2:39:53:4e:b6:9e:
38:f5:ea:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw
RjQ1QjUzNUIwHhcNMjYwMzI3MDI1ODQ3WhcNMjYwNDAzMDI1ODQ3WjAYMRYwFAYD
VQQDEw02OWM1ZjI2OC0yZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbqKZdipTmN3Lu3RbotljDjcLVKV/PCRHX5v9ZBKN5T2X20rEMurfC2vRBqb
U4L0xzRXQm33v6qCWNsY7X/evs62HSblz6hMIZkG2VzTBmAMEquPDq2Ekh1QiFpV
7hKbKoTQni3NOSfiGvf/Epxj3hKTtKjBVIHRRUX0ZOR893RJYJx8/AUtke6F8bbV
jDlB7AiR9S5XgFbdnaRLyz65SXCTeafKXlGDeqTQ0yWc5D7UH/9uiMJVg5E6nRJY
tHL0aAQs0OVnf/1c0kWyX4Md2z2/dvts1KDRplA9vAUdhTyqIimvMPyGH7lRwkJO
il/k4TPJQQXQ4PRLhG74mJkxmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIz1fbrF
NfjsOxlv0k1IOYD7zT4SMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy
MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV
MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04
QVNZSEI3ZHRYUklQUmJVMXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApRlEpRtekA2WdSPyMqGNPNKuxNYhm/4CIX4LAjH93YwJXRaaELOKBwAFT794
o0c2j43k4OQaYJQ83C0Im7WhK18xGP8M2YCeteKusopG1b3cLJvf1CDfKRKAZc9J
b14AoE1a0Su1MGzPIZ0K03kDAQg+MGmNG3fByzGM4DO87MI3MmSCJn1YVOwEOpGp
rQI+2ft3fpB7E2ju5vXZRplseMnX7CTLOEv9O4f7inhIDvhDSXKiFuhZiKt4ssMe
PJT31ogZEhEjV5zV5b/0VajFHqzvSP+3qrmCKn7LXIag/zAB3oIahX3AWFXo6amq
fEgdpTsp5JS08jlTTraeOPXqRA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:25 2026 by rpki-client