
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier: PtSGNG+q2wBYA/ZrB8adWTOs/5qzc7wxky0tHCKsDH8=
Subject key identifier: B7:2A:B7:8C:C8:D1:66:90:8B:74:BE:DA:E3:20:1F:D6:91:84:1E:19
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial: 01C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number: 01BC
Signing time: Mon 11 May 2026 03:55:53 +0000
Manifest this update: Mon 11 May 2026 03:55:53 +0000
Manifest next update: Mon 18 May 2026 03:55:53 +0000
Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: ly+G5qVcOX/hpjFOUmpfy/1AvRunx5mfaN7E4WfhS00=)
2: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=)
3: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Validity
Not Before: May 11 03:55:53 2026 GMT
Not After : May 18 03:55:53 2026 GMT
Subject: CN=6a015349-803a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:e3:64:c5:d6:37:70:c8:c2:d6:23:74:26:
f1:88:67:05:5a:21:93:27:98:54:a6:83:b2:27:f7:
71:20:3f:ee:89:3c:d0:73:6f:5d:47:6b:d5:7a:98:
26:64:2c:d5:05:d5:d9:a0:06:d4:d6:92:98:45:2b:
f8:b7:1b:4b:b3:65:20:3c:05:11:5e:94:37:d9:90:
5c:2e:9d:2b:79:fc:5e:4c:55:8e:de:19:10:49:86:
52:f2:17:4d:0c:e0:12:7b:2c:0b:ef:60:e4:06:b0:
71:4a:ca:94:b9:9d:d1:fd:e5:9c:49:bc:7b:da:a6:
9a:9f:ad:b5:b0:56:12:b7:d7:19:8b:c3:61:d2:83:
30:13:9d:92:33:45:56:a5:75:cb:a5:13:dd:ee:e7:
fb:f8:ba:bf:2c:cd:7c:ec:8f:c4:67:70:52:f6:24:
19:a0:51:80:85:82:96:0e:66:87:14:87:01:1d:59:
f6:fd:7d:38:a8:c8:15:92:58:cc:62:87:71:c3:df:
9d:7c:0d:03:4e:c1:d3:8a:b0:71:25:eb:24:1e:6b:
a7:1a:7f:ce:1f:cc:0b:d0:48:c7:79:cf:31:53:0b:
72:f6:59:58:81:84:3b:29:ed:cf:6d:44:b2:a2:d4:
d1:54:09:e3:86:47:79:30:75:c5:48:c5:1d:0a:d3:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:B7:8C:C8:D1:66:90:8B:74:BE:DA:E3:20:1F:D6:91:84:1E:19
X509v3 Authority Key Identifier:
keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:51:73:0e:38:54:1f:af:04:63:8d:3e:07:f4:a5:87:e4:c2:
a0:f4:8c:dc:85:90:3a:d4:c2:6e:c7:ef:00:bb:bd:9c:df:02:
81:4b:86:33:e6:88:9f:d3:41:77:b2:c7:a3:48:22:d6:b8:18:
86:dc:c7:ae:76:64:38:f2:0d:6f:aa:9b:23:13:c6:c3:49:39:
c7:9b:ad:8f:d3:13:03:f3:d6:36:af:7b:4e:40:0d:9b:5b:13:
c9:4a:b3:45:87:a4:ec:9a:c9:af:8e:21:46:37:d2:f8:bc:89:
ee:79:b4:bb:39:81:1e:d2:67:71:c9:75:42:ff:da:2b:02:a3:
f9:7a:d1:be:b3:90:a9:e7:2b:f0:16:d3:5b:b7:ff:52:ca:50:
68:5a:97:79:4f:d4:90:e9:f5:8a:e8:70:a3:2f:ae:ab:5a:d7:
f1:2e:b8:98:65:d9:cf:8b:3c:1c:86:03:2e:32:f4:34:28:db:
de:58:b2:87:66:82:80:8c:54:49:4f:b3:97:57:b0:d6:e6:dd:
dd:b5:98:32:dd:b6:17:aa:10:27:ae:cd:7b:ce:a3:d9:2a:88:
3e:6b:0a:96:9d:82:10:a8:5c:c0:e0:e6:f6:42:3b:a0:35:79:
8d:a3:84:af:2e:87:95:ca:c4:e1:f3:c7:d5:a3:1c:3a:e7:f7:
eb:65:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:28 2026 by rpki-client