
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier: YGpqONvyuJ0WrHbzL9li0REVyL2IUciuq30eInqOEJQ=
Subject key identifier: E2:5F:0E:A2:3F:6D:EA:F0:A0:1A:28:D3:98:A2:3C:44:E3:C7:7A:54
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number: 01A4
Signing time: Wed 25 Mar 2026 03:28:19 +0000
Manifest this update: Wed 25 Mar 2026 03:28:18 +0000
Manifest next update: Wed 01 Apr 2026 03:28:18 +0000
Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: Pe2c+QOG39ods7GJYqh5p/m6j3vB1Vb6l/WoUVCIzSQ=)
2: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=)
3: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Validity
Not Before: Mar 25 03:28:18 2026 GMT
Not After : Apr 1 03:28:18 2026 GMT
Subject: CN=69c35653-75c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:66:17:15:05:52:f7:77:2b:c2:f5:c8:5c:
1e:91:c0:24:5d:f4:83:0e:45:63:9f:9f:3d:54:cb:
c5:1f:07:4b:55:93:f0:95:42:8b:57:1b:51:b0:92:
7f:6d:1b:f1:57:27:01:b5:f6:78:69:64:de:77:cf:
7b:f1:b4:f1:2e:1a:cb:9e:16:95:e0:42:1d:0f:5b:
b0:a0:ad:91:32:ab:29:71:e9:ae:c6:e2:69:6b:a4:
b9:2a:26:2a:1b:f3:03:8c:b7:c4:8f:d1:fe:61:b4:
e3:d2:7f:b8:2d:65:78:b5:85:d7:53:18:01:9b:ad:
54:a8:e5:2e:69:2b:10:7a:68:03:16:76:19:81:a2:
3d:42:7a:f3:bb:fe:95:83:28:21:ba:67:65:d0:d9:
f5:e1:e7:ef:92:9f:4c:a3:97:2b:2a:4f:ed:03:a9:
7c:5a:93:94:10:52:57:9a:e8:53:a8:19:e6:36:9e:
b6:4c:fb:7c:2e:16:08:42:43:02:ee:9d:7a:c0:8e:
68:e3:81:43:2e:9b:1f:f7:1b:be:b5:97:eb:47:fe:
4b:a3:7b:c2:0b:c2:9b:4d:2b:2c:a2:b9:07:ce:27:
cf:18:c4:7f:d9:39:8f:91:a8:1b:e4:b0:d0:59:11:
0c:bb:b8:bc:84:54:d2:ae:c6:bf:ce:1a:e4:27:4f:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5F:0E:A2:3F:6D:EA:F0:A0:1A:28:D3:98:A2:3C:44:E3:C7:7A:54
X509v3 Authority Key Identifier:
keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9a:d6:4d:b2:33:09:81:a8:bd:71:3a:38:c4:d3:65:56:1a:
6e:d6:d5:cb:2a:7a:6c:2e:04:e9:46:12:f2:94:c6:83:26:5c:
61:32:e9:b2:4b:df:d1:7f:32:00:22:39:98:0e:67:4f:df:be:
e9:01:f4:6c:e1:f9:50:c7:e5:b8:08:c9:20:b4:a6:6f:4f:7a:
46:80:bc:38:a3:a8:88:a3:e2:27:a6:02:9f:ef:b2:e8:00:f7:
39:a8:54:f6:46:2d:d9:f4:b9:2c:1e:90:01:5d:1e:5f:42:d7:
59:42:08:8f:e4:7b:9c:8f:61:4b:2a:53:4d:b9:c1:14:7f:9b:
63:42:40:10:6e:55:b3:26:5d:73:b1:5a:68:6c:fc:2b:d2:6f:
cb:e3:67:6f:b5:ca:ca:df:b7:fa:58:dd:8c:11:42:73:f0:4c:
85:58:09:59:0f:d3:0c:e8:37:1a:84:62:50:29:9d:c2:ac:e2:
54:e5:b4:60:15:06:d1:d3:f7:69:d2:33:e1:ff:2f:e5:78:07:
e8:f7:87:03:e5:85:df:a7:6e:9a:38:3a:25:cc:e4:e7:55:c8:
69:20:93:0a:94:bd:43:44:94:69:31:46:30:c5:c3:83:e9:7e:
5f:91:0f:cb:dc:d9:67:90:82:7f:21:fd:ec:5b:ec:5c:89:d7:
2a:53:48:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:00 2026 by rpki-client