
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json)
Hash identifier: RqLyGzdow8/xlhTH6JqSC5mK2ocLRcFPIDtiO8zkufA=
Subject key identifier: E1:A4:56:9D:76:06:2B:29:C9:0F:79:9E:40:FF:E8:A1:97:67:60:DA
Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Certificate serial: 089F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
Manifest number: 0895
Signing time: Thu 24 Sep 2026 20:38:03 +0000
Manifest this update: Thu 24 Sep 2026 20:38:02 +0000
Manifest next update: Thu 01 Oct 2026 20:38:02 +0000
Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: 8yBsmQCoYcrUtZ8vA14YsL0zRhpuyN2rJ1v3V7ucZOQ=)
2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: cV6nrCI/WiBOL0Uk/5UHwH4C2GgLMHmzrahNJwrUuZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2207 (0x89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Validity
Not Before: Sep 24 20:38:02 2026 GMT
Not After : Oct 1 20:38:02 2026 GMT
Subject: CN=6ab58a2b-19e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:53:2a:c5:36:82:56:53:4b:a6:eb:63:e6:
27:71:82:c3:56:9b:2b:4f:a0:0b:ba:d7:ed:cd:4e:
0e:17:30:a3:91:f4:50:31:84:81:99:3e:ad:0b:c0:
d9:96:5a:d9:40:b6:49:2e:8c:23:fe:84:38:4b:f8:
bd:b2:11:30:1d:af:91:b0:9c:8f:36:52:58:7c:7a:
2a:51:12:59:bb:a6:d3:5b:60:80:8c:51:b5:b5:13:
c6:be:6a:19:56:66:e4:0b:ea:f7:0c:18:71:d4:6b:
80:8b:b2:c1:17:be:d1:64:24:aa:ec:bd:d0:5f:b8:
70:49:e1:94:b4:ae:ad:b8:b1:dc:be:0a:8f:8a:b8:
89:9c:65:6e:1e:c8:50:6a:8b:a6:b8:b3:a1:4b:f3:
b8:c5:9c:8d:21:11:79:59:aa:6a:0a:01:78:b1:b1:
0d:87:33:04:b5:15:7b:7b:81:6d:17:fa:1b:04:6d:
d4:c7:d1:e1:69:b7:51:a6:9c:3a:b5:c2:17:10:9d:
01:04:84:c1:28:2d:20:de:4b:a4:6b:55:0c:bf:26:
2b:b3:31:50:2e:ac:75:43:32:76:d2:59:2d:d9:c7:
0a:41:cd:8f:d9:c3:fc:37:b6:74:aa:94:16:6a:70:
d5:ef:f6:fc:69:ae:92:79:89:ac:41:cd:13:cc:6b:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A4:56:9D:76:06:2B:29:C9:0F:79:9E:40:FF:E8:A1:97:67:60:DA
X509v3 Authority Key Identifier:
keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:85:f1:22:ee:c9:fa:af:a2:dd:14:23:13:99:1d:62:3b:e1:
28:a8:cb:08:b8:de:a7:e3:78:60:76:dd:8a:ef:d8:9d:dc:99:
c8:bd:16:7b:46:fa:3a:a5:78:80:d2:a7:0e:23:a9:c9:62:bc:
f5:c5:35:09:62:d6:12:ac:dd:4c:9c:9d:f7:5d:22:db:58:f6:
3a:8a:c3:a1:24:ab:c6:dc:52:bb:e2:b8:58:35:4b:13:ba:9e:
69:06:2e:93:1c:f8:57:40:af:82:2a:3e:93:6d:c7:f2:4d:a1:
e9:0b:64:d1:d9:65:cb:5d:35:97:7c:aa:65:52:73:9a:59:2a:
2e:f1:31:43:96:4d:ac:97:dc:da:61:a9:d1:fa:c9:41:a6:70:
c4:9a:df:34:2f:62:b8:cc:f0:0b:07:04:16:29:f1:eb:f8:8e:
69:a1:d7:fc:a3:9a:38:9f:cc:a8:68:d2:d8:d3:fc:9b:2f:44:
a9:a7:43:19:a1:5d:c8:e1:b7:af:cb:8d:49:95:a3:cd:61:3f:
82:4e:8d:b8:d3:55:34:0d:e1:73:05:aa:21:3d:08:21:f5:f9:
3e:b0:66:b1:18:68:56:91:c2:59:0b:4c:80:0d:d5:36:d7:bc:
d5:1c:70:ac:28:31:c4:c8:bc:45:7d:69:0a:c0:31:c1:37:cc:
dd:0e:0f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:35:13 2026 by rpki-client