
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json)
Hash identifier: Et4H8LaUT/fkv5U4kIhasEjzz/8Ib6IWiG3eGvLQAQc=
Subject key identifier: BB:20:C1:03:3D:9E:91:8D:5D:9D:19:00:01:F4:AD:DB:15:AE:88:06
Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C
Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
Certificate serial: 0631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
Manifest number: 0624
Signing time: Sun 20 Sep 2026 22:41:22 +0000
Manifest this update: Sun 20 Sep 2026 22:41:22 +0000
Manifest next update: Sun 27 Sep 2026 22:41:22 +0000
Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: NZfP3aP7oZ8/W/9d5j8MqOd+KhhlbivhL9chq3T1yHA=)
2: 4DF26D46067211F18F3D57B53B3D8C67.roa (hash: Ie0o0ttXy7z+sEjKx1s0YqFva0nXWZDRzhLC9SPdFOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl
rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
Validity
Not Before: Sep 20 22:41:22 2026 GMT
Not After : Sep 27 22:41:22 2026 GMT
Subject: CN=6ab06112-3b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:9f:26:ce:dd:bf:a0:24:79:52:df:23:56:
d4:e2:19:36:e2:ba:80:54:aa:62:1f:40:5c:79:35:
54:3b:5f:08:c0:46:a2:94:d3:eb:e1:49:e7:12:96:
1f:e9:77:b6:27:b0:37:c3:f4:5f:27:85:b6:ac:c4:
ef:8d:80:6f:b3:dc:14:f5:ce:a3:a5:a6:cb:8c:91:
58:1d:6d:be:e6:3c:97:07:ea:b0:23:e5:7f:64:95:
03:aa:0b:fc:14:3a:94:5e:5c:f4:be:bc:65:9e:0d:
f0:60:44:db:6b:ad:e6:bc:c3:52:c4:d0:dd:a2:11:
93:36:80:79:50:05:8a:70:33:c3:c7:2d:ac:82:3d:
40:45:87:88:bd:af:27:4b:b6:28:ee:e2:1c:29:c0:
38:16:7e:e5:a6:52:d6:31:25:ed:b4:ea:49:dc:83:
8e:e2:62:7b:c9:f3:40:0c:f3:54:82:bf:db:cb:b4:
4f:ad:bc:b4:4f:89:01:60:33:9d:db:ba:92:b3:21:
21:97:21:2d:f4:ef:1b:8f:f4:77:76:1a:25:10:44:
96:b1:fc:a9:6b:22:03:25:96:56:5e:23:ef:95:e5:
df:76:03:90:42:29:f4:60:97:be:4a:d9:86:57:f0:
7c:db:f9:6b:94:49:0f:62:e9:05:02:6a:b8:25:61:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:20:C1:03:3D:9E:91:8D:5D:9D:19:00:01:F4:AD:DB:15:AE:88:06
X509v3 Authority Key Identifier:
keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:50:09:55:31:bc:03:1a:d1:05:a8:46:b2:69:18:95:fb:fa:
13:d6:b6:87:72:11:ff:30:4b:51:b7:c3:70:1b:d2:1f:ef:76:
bb:f8:04:2f:04:ad:4d:10:4c:55:b1:73:4e:b9:67:73:fb:8c:
95:a8:76:00:6e:f1:d9:02:a3:77:da:0d:18:41:54:57:6b:3b:
70:b6:9c:94:59:79:e7:3f:d7:80:93:ec:92:b3:54:af:fe:54:
e1:2b:6a:79:08:0f:7e:ce:f2:ac:b2:20:1c:8d:fc:34:45:32:
11:b3:25:e3:82:51:14:68:60:8d:b9:01:11:64:3a:5f:ed:d3:
f3:4c:d5:dc:7e:49:4e:91:41:9c:2c:02:0b:a4:b7:ba:1b:02:
ac:c7:d1:ff:4a:cd:c9:c9:81:00:81:2a:91:86:6c:b0:a3:f5:
d8:5e:9f:00:6e:35:d4:9e:bc:78:68:db:c1:fd:5c:82:31:8c:
f1:51:dd:ce:2f:9d:5a:fb:a3:0a:4b:08:81:51:3e:c2:28:58:
77:35:0e:85:6f:62:19:28:20:e7:5d:6b:0d:23:8b:4e:18:60:
6b:34:6f:01:f4:20:4e:ec:bd:d6:51:29:5b:3d:41:59:e1:37:
c3:33:6c:db:2f:d8:b4:47:01:0f:97:cf:83:4b:fe:46:3d:ea:
9d:59:48:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:16:33 2026 by rpki-client