
$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json)
Hash identifier: llyruJadc6iUbirxmApG6wL5jGpQKTW5VbLKs1HMXK0=
Subject key identifier: F0:32:FC:06:79:55:F2:B7:83:9C:9A:4B:D6:E5:90:1D:0A:2B:A4:CD
Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Certificate serial: 09D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
Manifest number: 09AE
Signing time: Fri 24 Jul 2026 20:29:19 +0000
Manifest this update: Fri 24 Jul 2026 20:29:19 +0000
Manifest next update: Fri 31 Jul 2026 20:29:19 +0000
Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: l9NaMLIF4YWHGtdm4QdshLZ7XFFCgBgC8mjID/e8uTw=)
2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: bij0GPc4q/HmqyQVEL/k0toCpN5+LlxlDW2eG5CFpnk=)
3: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 2QiWBnPaUCTJvdNP0zBmyWdyn7oHyts1Ul70IjP2j6Q=)
4: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: gVcn2SvZaK2nbxle9CZzKz71vAlE+GFSMyND+4DCZiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2512 (0x9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Validity
Not Before: Jul 24 20:29:19 2026 GMT
Not After : Jul 31 20:29:19 2026 GMT
Subject: CN=6a63cb1f-be1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:68:c9:aa:27:8a:a6:ef:52:2a:83:a5:af:
7d:bf:a7:f3:59:22:2d:c6:7e:06:b7:82:0c:cb:70:
34:bb:1a:46:f0:04:37:26:fc:0c:6c:e6:db:07:93:
f9:3d:08:27:16:76:a5:04:b5:15:a7:2c:5c:fb:66:
b5:88:bb:86:fd:97:c2:29:33:f6:3e:cb:d2:76:69:
47:62:9f:4e:34:db:e8:74:23:43:c4:c0:8f:da:89:
cf:0f:dd:5f:89:2f:aa:95:f3:cc:e8:92:b4:ed:b2:
dd:4f:47:4e:0b:11:35:73:22:cb:99:3e:8b:2f:ac:
8c:fa:5a:a7:5b:57:cf:a4:be:25:c1:1f:f2:ee:82:
42:d7:86:5a:1f:b1:ed:50:16:06:1e:33:99:8a:23:
d7:34:48:d0:fe:19:f0:18:54:5d:8c:a0:1d:fa:f4:
ec:90:e8:c8:f1:fc:b5:a3:68:a8:04:d8:61:c3:d3:
ac:7a:2c:c5:34:d1:c1:16:f5:f7:8b:06:21:b8:60:
43:fd:52:4b:ca:54:48:e2:1e:b3:1e:55:06:42:78:
df:1b:a7:c1:27:72:90:26:af:a4:fe:03:42:4f:c7:
9d:21:bc:9b:df:3d:b2:b0:f9:96:02:cc:23:38:40:
16:de:a4:d3:e7:68:80:6b:e1:e6:77:76:40:b7:e3:
d3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:32:FC:06:79:55:F2:B7:83:9C:9A:4B:D6:E5:90:1D:0A:2B:A4:CD
X509v3 Authority Key Identifier:
keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:68:92:90:40:c0:4d:2c:15:70:62:b4:73:72:d2:eb:1f:
ca:1c:18:57:df:93:0e:1a:bb:ce:88:7a:5d:12:f8:b4:31:5f:
e0:88:60:5f:a5:ca:f9:0a:97:b3:2a:7d:67:e3:29:e4:60:1c:
67:b2:2b:7f:c3:06:20:c3:2d:ba:57:4d:b9:c9:2d:8c:4c:56:
81:79:e4:4e:71:1c:24:ba:65:f9:18:e7:5a:3c:8a:a1:f1:6e:
c7:c2:cc:1a:73:c6:d1:6f:cd:05:0a:f7:df:63:8f:fc:b3:e6:
83:52:19:cb:8d:95:79:5c:06:b7:36:76:00:12:5e:d1:98:e4:
bc:36:1f:b1:9a:e1:51:7f:9a:1d:c8:b8:6d:e8:d4:9e:2d:b5:
bd:4a:a5:2a:54:54:7b:aa:f5:f1:2d:53:1e:c0:63:31:77:84:
a9:d1:ec:19:cc:0b:55:af:ac:13:37:9b:c6:e6:8d:e3:f1:30:
ab:77:c7:22:40:37:3a:c8:02:22:d2:2c:bc:df:f0:f1:16:09:
c9:fb:7b:af:64:0e:75:78:a4:5f:c2:62:43:35:cd:49:a8:5c:
aa:d8:ad:b2:db:86:fa:b6:fb:17:c8:06:3d:e4:69:b0:20:ac:
5b:78:2d:af:3e:5f:9a:9b:e7:13:40:15:ac:9e:17:ca:16:3a:
44:29:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:52:42 2026 by rpki-client