
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
File: 4XM7lw_d92f_GVQoQ34SQqN2knc.mft (raw, json)
Hash identifier: 8QF0g1K4hxLpJzIDsPBfCp2yEeEJWvQVyof/eOUn5bc=
Subject key identifier: F8:F7:3A:B7:37:39:E3:B1:B4:7A:28:D7:91:66:CD:4C:D1:F8:DF:8A
Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Certificate serial: 02D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
Manifest number: 02CE
Signing time: Thu 01 Oct 2026 01:55:27 +0000
Manifest this update: Thu 01 Oct 2026 01:55:27 +0000
Manifest next update: Thu 08 Oct 2026 01:55:27 +0000
Files and hashes: 1: 4XM7lw_d92f_GVQoQ34SQqN2knc.crl (hash: 64x/PUHnQfiDJM8Z0rB7Xz42WvNGJiUcpHVgAvqPeGU=)
2: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (hash: LdRxke1Bck5JxIBRCGjM9TpaCqk+l96r/JCtzyDPs+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 01:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Validity
Not Before: Oct 1 01:55:27 2026 GMT
Not After : Oct 8 01:55:27 2026 GMT
Subject: CN=6abdbd8f-44b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:c0:83:2c:cf:c0:d5:28:e4:54:4c:47:20:
04:11:92:74:8e:f3:29:73:dc:dc:30:da:5f:6f:61:
a8:15:87:2a:36:28:b9:29:57:c6:de:d1:97:90:d8:
09:cc:51:7f:32:50:69:72:3d:d8:c6:fd:b7:30:82:
d0:2e:64:d0:b2:8b:68:d7:f0:6a:de:dc:2b:41:f1:
3d:e6:42:75:79:2e:04:b8:96:1f:ff:25:ea:67:14:
64:31:34:c7:8c:10:aa:b4:76:5b:b7:8a:a3:00:0e:
c3:d5:d6:13:14:fc:1a:d6:29:ce:b5:ea:f9:e1:1a:
f1:e7:58:bc:b9:af:be:53:45:69:71:79:2c:2c:7b:
fd:89:d1:00:9a:7e:4a:9d:db:cf:d1:a4:f3:0f:56:
b0:c9:94:27:0b:60:73:c4:81:4d:eb:69:e2:70:14:
a2:c2:c5:7d:d7:8d:47:d0:60:1b:45:a1:fa:98:c2:
b6:38:9c:bd:7d:41:89:59:9c:08:5b:8a:90:12:2a:
29:c6:fa:22:9a:aa:21:64:d8:b8:0c:dd:56:7f:59:
7a:dd:39:b4:3b:fc:3c:e1:54:62:fb:71:c7:c7:69:
1e:b4:3d:d5:d2:9a:03:05:a0:e5:47:97:30:b5:c1:
3e:b5:42:28:19:43:86:3b:59:ef:d8:76:1b:d1:bf:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F7:3A:B7:37:39:E3:B1:B4:7A:28:D7:91:66:CD:4C:D1:F8:DF:8A
X509v3 Authority Key Identifier:
keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3d:94:f4:ca:bd:cf:21:b3:eb:d8:a2:4a:84:3e:f4:c3:64:
63:82:6d:29:d1:dc:fd:b1:1e:02:2c:c6:4a:8c:f4:30:8b:8f:
93:4d:59:2f:c0:b8:21:c9:7f:6a:18:c1:7f:cb:02:d2:fe:4f:
a1:0c:99:68:50:b1:25:cf:b4:83:d5:c1:72:c4:60:dd:ef:d1:
9c:97:ee:db:8c:92:0a:a3:0b:2b:27:2a:12:12:40:ac:37:fc:
51:0e:e3:bb:06:81:d7:77:76:5a:ca:55:53:51:73:a2:7b:87:
58:ef:7f:21:a2:af:b9:7f:a4:cd:a4:3a:4e:d4:26:68:df:22:
ee:ed:ee:68:94:76:7c:c1:12:7a:ff:f2:bb:f3:59:9e:11:e8:
dc:5e:7b:9d:7d:36:c9:99:ee:0a:8a:b5:86:19:81:16:a5:bf:
89:30:64:ec:47:92:eb:42:4c:44:1d:c2:12:6b:52:f9:a1:02:
0b:6e:c2:60:ec:55:09:41:28:08:7d:8d:16:da:c6:89:81:03:
f9:45:0a:f9:67:19:83:37:f0:6a:a2:79:14:8a:5e:c2:13:76:
74:81:1b:2b:cb:19:a9:dc:58:b9:03:3d:1a:39:bc:22:45:60:
33:3d:8d:e6:fc:53:a7:b4:3f:38:a2:8a:ac:23:af:fa:e5:51:
ae:d0:57:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 05:55:22 2026 by rpki-client