
$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
File: 4mZe42LlzFj31n9Ka3YhqkYL044.mft (raw, json)
Hash identifier: Lr8VVCqSk5QDZIzWpW4JNPwAIVmgjpr3Mc0wf5yBwhA=
Subject key identifier: CD:B0:5B:24:2D:95:2E:A5:0D:D8:89:AD:AD:EA:ED:C3:9C:9C:6F:1D
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Certificate issuer: /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial: 0836
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
Manifest number: 0822
Signing time: Tue 12 May 2026 21:11:43 +0000
Manifest this update: Tue 12 May 2026 21:11:43 +0000
Manifest next update: Tue 19 May 2026 21:11:43 +0000
Files and hashes: 1: 4mZe42LlzFj31n9Ka3YhqkYL044.crl (hash: N8cQVXsOGt3uO48fIJa1SLzh4R+TSncUY5QWIW6WCIU=)
2: D57EF608BC6C11F0894F2331C4F9AE02.roa (hash: f8pFfqOlKwbMcOlsLYiaoXkLN8x81tbb8jp/DlYQckI=)
3: C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa (hash: 18BOQVkvXKyICdOvY28gtv+H12kNh8iZyI0ncNzVj+4=)
4: C08B23401DA511EBAD78BB46C4F9AE02.roa (hash: 6dxQbscKD9BpisiGIvmhEruYks1OCWVGKkbkjxYZYu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102 (0x836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Validity
Not Before: May 12 21:11:43 2026 GMT
Not After : May 19 21:11:43 2026 GMT
Subject: CN=6a03978f-e762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:10:2f:ec:6d:81:76:36:3a:d3:a9:be:24:
5a:f6:cf:e0:7b:e4:38:0b:9a:d1:8b:6f:fc:1d:12:
1c:ec:d9:54:3f:bb:bb:6f:53:8e:f6:d0:ad:95:de:
b4:79:65:66:e7:4e:f3:5e:35:5b:bf:f1:6f:b7:df:
ca:ff:a5:34:8c:e7:7e:71:be:37:84:51:f1:79:a6:
66:93:8d:e2:10:02:24:a8:b1:6c:bf:5d:17:61:dc:
40:dc:d8:2b:0c:3e:1f:7d:c2:73:bb:0e:c2:b8:df:
7d:60:2a:fd:b5:74:99:52:83:54:ba:54:09:28:af:
88:b1:09:da:9b:c2:6b:0a:68:91:b7:a6:3a:41:f7:
5c:83:4d:b2:13:22:51:49:0d:2d:4a:e1:94:dc:5f:
23:e5:d1:71:b9:91:c2:04:eb:f1:6e:07:3a:4f:19:
f7:f5:e6:92:ee:cf:a4:78:48:e9:47:d5:fa:91:f4:
db:7d:69:ed:f2:14:65:2c:68:4c:5f:ab:ea:28:22:
33:f6:94:58:1c:e1:44:a2:84:0e:b7:9a:e7:67:b5:
f0:bc:33:38:18:20:3f:63:e5:fc:bd:63:7f:35:b3:
d0:07:12:70:3d:4b:39:79:b2:d8:7d:a9:7e:7d:51:
b7:c8:d6:78:a8:06:e2:9b:39:2e:04:2c:3a:b5:ad:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B0:5B:24:2D:95:2E:A5:0D:D8:89:AD:AD:EA:ED:C3:9C:9C:6F:1D
X509v3 Authority Key Identifier:
keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:7f:4d:5c:0d:0a:c8:28:0b:08:a3:aa:15:57:90:78:19:10:
00:90:4a:63:2d:cf:97:2b:8b:7a:3e:ed:3c:e8:bf:4d:4d:b8:
b8:23:c5:55:06:83:50:e3:ab:a8:5c:80:67:c5:ec:bb:56:4e:
43:5d:d1:db:a0:8c:66:60:0d:09:79:85:a1:11:dd:1c:f0:fe:
8e:c8:50:e1:4a:27:03:23:f4:21:b6:e5:da:b3:90:ab:d9:12:
ac:29:87:a0:0d:fd:0d:6c:7e:b9:69:f2:43:5d:4f:97:a4:ce:
67:2b:e5:a7:c0:db:41:ad:95:96:7f:f8:f1:22:9d:fa:12:50:
0e:15:c2:f5:57:8f:f1:26:2b:71:72:35:6d:be:83:6d:4a:f0:
eb:f6:57:04:88:f2:4a:5c:67:16:df:39:bd:5d:e9:0f:6d:57:
2c:49:13:ca:e0:30:b9:85:0b:04:04:5b:67:19:23:3c:53:df:
78:ce:4d:3d:6f:a3:f9:19:d0:24:a8:46:50:95:a7:5e:e6:d0:
d5:16:a8:a8:13:ba:b7:00:77:a0:af:32:70:01:2e:bc:e5:47:
0d:43:f7:68:56:dc:15:91:22:b4:7c:be:30:36:8c:52:dc:cc:
e0:6d:3e:50:df:61:6c:50:d9:47:0c:03:5a:a1:e7:3d:3a:7f:
15:a5:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:31 2026 by rpki-client