
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json)
Hash identifier: kIgSgoxLzhEqsA1A4XEdwnw83HNW4fqMoBvRYgzgjns=
Subject key identifier: B5:57:DC:35:C0:72:90:BA:1D:29:A7:1C:F6:52:7F:5E:F8:74:0E:D5
Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85
Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
Certificate serial: 088E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
Manifest number: 0880
Signing time: Wed 22 Jul 2026 21:13:35 +0000
Manifest this update: Wed 22 Jul 2026 21:13:34 +0000
Manifest next update: Wed 29 Jul 2026 21:13:34 +0000
Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: VZQVVRwXwH2Qo/+Zby+0yBwtxb+cr2Zorjz8X5bc0ZQ=)
2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: 8slOQpxcJ7i4Fqpb2U0NO9KtNpjmpZLi6X29SuRjdfI=)
3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: mcE/kCUcZ9XtkapXLq0nvxx/GVcFi46zNxigdP3tLvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl
rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190 (0x88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
Validity
Not Before: Jul 22 21:13:34 2026 GMT
Not After : Jul 29 21:13:34 2026 GMT
Subject: CN=6a61327f-d966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:dc:80:71:ac:00:43:b2:5a:a4:b4:8a:7e:
56:a7:73:3a:f3:34:ee:34:0d:c1:7f:04:60:45:dd:
bb:cc:67:74:e5:1d:c8:f8:88:de:b6:8b:28:97:41:
e6:2a:df:5f:cb:ca:6f:f0:fc:ad:57:5a:6e:b7:cc:
98:d8:a2:e5:87:8e:bb:b0:2f:33:0c:d9:6a:cb:64:
a3:97:d0:ba:eb:9a:3a:f6:ae:bf:64:61:6b:05:1a:
9f:c0:9b:30:f0:8d:0e:2a:6f:59:6c:5b:59:a5:46:
98:0d:3a:78:1b:fd:1e:c9:79:4f:64:f6:18:38:22:
cd:38:ca:b1:ed:58:22:da:17:44:1b:ad:af:31:88:
92:ea:25:87:73:97:86:bb:ce:27:e7:2b:a2:7e:a9:
06:e0:f6:10:83:4f:d0:76:b4:2a:ec:14:da:23:59:
aa:56:5d:18:5f:44:09:bb:50:d5:a4:d9:ac:53:31:
f1:f9:7f:e1:71:ef:6f:93:ce:a9:2b:2c:16:e3:70:
37:84:c7:81:02:f9:c6:a9:2c:74:66:d3:01:96:c8:
29:2f:3c:40:fa:37:45:41:07:93:36:4f:9d:1b:a1:
dd:63:ea:16:78:f5:2c:03:3d:d8:91:2f:a2:ca:26:
f2:5c:ec:9a:95:0c:54:0b:ae:f9:ec:a9:61:64:86:
24:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:57:DC:35:C0:72:90:BA:1D:29:A7:1C:F6:52:7F:5E:F8:74:0E:D5
X509v3 Authority Key Identifier:
keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:cb:57:81:e8:a6:68:c6:3d:aa:43:a8:99:ec:f2:79:a7:bf:
62:1d:70:1a:d7:00:6f:97:5e:53:07:00:d4:a5:a0:c3:b4:fd:
e9:02:fd:63:ad:fd:80:1a:da:f3:09:17:20:f6:84:9b:6a:f7:
c4:a4:e0:cc:08:f9:1c:d2:12:11:21:33:4b:6f:b7:7c:bd:b6:
82:35:69:da:3b:1c:88:0e:62:99:7d:dc:8f:40:14:d5:de:c6:
47:8d:1f:4c:2d:8b:05:80:5c:8a:5a:5f:9c:c5:0d:46:ad:c5:
d9:55:c6:76:18:4e:1b:27:23:ef:a9:b2:75:1a:ec:10:b9:e0:
79:26:16:e5:c0:1c:ab:71:ae:fe:cb:33:1c:8d:37:d4:db:97:
a2:44:71:38:e3:8a:ea:db:9d:16:46:8e:b2:2b:ea:6e:98:c0:
85:fc:10:19:d2:a1:2d:37:92:99:36:cd:8c:6a:fd:63:9c:94:
9f:7a:b3:90:b1:73:7a:53:6d:cb:fc:9b:73:e1:17:77:1f:1c:
57:c0:9b:64:94:7d:d8:6a:0c:0e:dc:5c:27:29:b1:bf:98:45:
cb:26:81:33:9f:8d:3e:0d:33:82:a0:2e:b3:7d:5f:47:28:6b:
bc:a0:af:09:e9:83:1b:41:cf:f5:50:0d:6e:c0:03:4b:11:31:
99:ca:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:31 2026 by rpki-client