
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier: ZNLoCQrH6CcIQP3z3oziAMc7slR2CvvqcHl0pZ8IlGs=
Subject key identifier: E9:86:57:D4:38:63:A8:20:13:97:C5:B3:DD:C4:D8:1C:EA:CA:70:03
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number: 0200
Signing time: Wed 23 Sep 2026 03:02:57 +0000
Manifest this update: Wed 23 Sep 2026 03:02:57 +0000
Manifest next update: Wed 30 Sep 2026 03:02:57 +0000
Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: g+wPt6Ed6GxiiRVltnhEfxh+4NRMrJxAI5cUV2QC12A=)
2: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=)
3: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Validity
Not Before: Sep 23 03:02:57 2026 GMT
Not After : Sep 30 03:02:57 2026 GMT
Subject: CN=6ab34161-7774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:6b:a9:f2:b9:8d:ac:22:10:6a:36:c7:40:
77:71:c0:79:ef:10:31:48:c9:2f:78:ac:69:95:05:
f9:78:33:8c:e7:11:8f:60:dc:52:16:18:12:f1:a4:
bb:bb:78:79:59:50:7a:34:3d:48:f4:53:66:58:a0:
2c:a3:98:23:18:d0:8d:a6:bb:1d:dc:d4:7d:82:41:
2d:b5:e1:83:5e:cc:19:3e:5a:d3:a5:0e:39:10:1b:
f5:88:13:d1:3d:02:ce:fe:74:09:29:1a:07:4a:76:
22:15:b9:11:25:bc:9b:68:9a:38:74:23:79:1f:ef:
24:f6:0f:4a:4f:01:dc:5f:6f:ee:04:ff:a2:75:cf:
7b:9f:60:50:c9:db:5e:e7:47:77:39:2a:db:a0:80:
47:88:42:c3:3c:f5:9b:32:77:14:1e:0c:bd:bf:91:
d7:5a:d0:b7:e3:51:d2:eb:c4:66:9c:33:ed:ba:42:
ad:20:dc:47:50:7b:13:60:ae:1f:49:a1:a7:c5:70:
c1:ed:3e:de:8c:0f:f2:6a:95:fc:a6:04:10:6c:91:
96:27:ee:00:3f:62:28:35:75:30:81:f2:31:1c:c6:
5a:4e:06:28:d3:1b:6c:cb:c9:fd:cf:2c:d5:b3:36:
11:c1:91:76:a7:59:a8:24:88:f3:34:af:7c:8d:c8:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:86:57:D4:38:63:A8:20:13:97:C5:B3:DD:C4:D8:1C:EA:CA:70:03
X509v3 Authority Key Identifier:
keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fb:03:1d:36:9f:95:d2:f6:b0:b3:2e:4a:33:37:e3:2f:39:
72:ca:8d:d3:28:93:4c:0a:d0:94:f2:84:08:b9:be:ee:78:d6:
ee:67:46:40:5f:15:11:f8:a0:45:2d:28:48:6e:7b:92:18:0b:
86:24:f3:29:d4:b3:ce:2f:b1:ad:16:96:d4:8c:e3:2a:8c:67:
e8:df:28:ae:11:6e:96:9f:8d:f5:17:1d:e4:e3:05:70:94:e7:
8c:8d:5e:ae:8c:ad:7c:21:82:40:e5:87:37:7e:f1:3b:09:a1:
2e:ff:cb:ac:27:f9:a0:3a:28:20:a0:40:b5:27:b4:81:5c:27:
68:c3:a7:cc:46:c8:18:ea:3b:fc:46:66:fa:66:44:28:90:f5:
85:95:23:23:84:e7:64:19:dd:80:ce:cc:34:d0:54:8f:ee:de:
38:4b:50:9e:56:0e:64:e8:3d:c0:52:a8:d2:5f:be:58:df:31:
d9:8f:ba:d6:68:3b:ae:ef:70:f9:f4:5d:73:44:bb:b8:da:38:
ff:15:9f:c5:0e:c1:c4:d6:fe:48:46:db:d1:31:f8:28:2d:7c:
d1:6b:86:f7:59:78:f2:95:88:fd:45:03:cb:86:b6:77:10:bc:
aa:0e:66:28:2b:92:0a:a8:a7:32:c3:c9:d1:0a:92:2f:63:e4:
e2:29:3b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:07:35 2026 by rpki-client