
$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
File: 4JyfckW5hJiukjOxmA17T0xzjQ8.mft (raw, json)
Hash identifier: KF4TnBvd/b2kkkwAFh9NEtF5fiDwz1Joj5sj7F6hc70=
Subject key identifier: 93:AF:34:C6:08:A6:58:C9:F9:C7:0A:BC:AF:38:7B:A5:7F:5C:53:BC
Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
Certificate issuer: /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Certificate serial: 0807
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
Manifest number: 07F9
Signing time: Tue 12 May 2026 21:19:37 +0000
Manifest this update: Tue 12 May 2026 21:19:36 +0000
Manifest next update: Tue 19 May 2026 21:19:36 +0000
Files and hashes: 1: 4JyfckW5hJiukjOxmA17T0xzjQ8.crl (hash: mY6j9XoQyiB0vr/iELycsJ10Byrejod35Dc+V6ZbjuY=)
2: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (hash: sWItZVAsoO/9NQlv0a6tFISakAe8J+H+LJW2vp4Rwhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2055 (0x807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Validity
Not Before: May 12 21:19:36 2026 GMT
Not After : May 19 21:19:36 2026 GMT
Subject: CN=6a039969-65f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:c4:ab:f0:05:1e:0b:9a:a5:c7:89:3e:f1:
57:69:d5:69:4b:c4:9a:3a:fa:66:5c:cf:8b:af:85:
b0:b7:e4:5f:12:2e:96:1c:dc:94:ec:f5:25:23:0b:
2f:6a:f4:e3:34:04:4c:99:88:34:94:f0:90:b0:fd:
db:57:44:92:e5:e3:77:57:9f:a3:41:35:ab:91:19:
b8:96:08:3e:58:de:12:7e:bf:54:73:19:01:ee:84:
1b:7d:af:6b:e5:e0:bc:cc:ca:28:0a:c8:58:51:8a:
88:58:2f:e0:c5:e6:9e:e2:56:b2:fb:8a:57:dc:92:
90:61:45:80:5e:b5:74:68:ba:00:41:79:a9:67:b5:
68:67:34:4a:a6:46:42:50:89:7a:f7:07:b6:6e:ef:
88:f8:3f:24:5e:bc:92:64:28:68:6c:94:a7:6f:b3:
be:4f:1f:6c:bf:7c:6d:83:44:42:86:a6:1e:0c:c8:
53:1b:91:93:67:28:2a:c8:5b:a3:d5:05:67:c8:6a:
3a:04:74:d2:d8:9f:45:5b:6d:21:5d:bc:4a:e9:94:
d9:2c:75:4a:1f:a4:2a:64:0a:b0:3f:8f:cb:18:55:
ae:09:f4:27:41:e1:51:50:92:20:ee:b9:01:1c:24:
36:b1:82:35:91:bd:c9:a2:64:55:86:61:88:37:fe:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AF:34:C6:08:A6:58:C9:F9:C7:0A:BC:AF:38:7B:A5:7F:5C:53:BC
X509v3 Authority Key Identifier:
keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:fe:c6:0d:5a:30:f9:86:2e:98:2b:51:6b:e8:27:76:4c:1d:
82:1f:75:f2:10:8e:32:e4:79:d3:60:f0:ba:ca:3c:de:49:f2:
12:34:b0:8c:07:bb:f5:54:65:e2:75:99:15:28:40:8a:98:77:
5b:9a:52:25:67:a1:e8:a9:b7:51:75:cb:83:b7:b0:c9:85:f3:
4f:1c:9a:a2:c6:3e:6a:e8:26:a8:ff:69:6b:d4:ba:d7:3f:50:
01:0a:d4:7c:3d:37:a3:21:11:f8:c3:2f:86:ae:93:fa:47:e8:
23:cd:ef:6d:c1:79:df:02:38:6a:61:eb:10:91:7a:1d:d5:2f:
99:e6:64:22:9a:01:03:b6:26:53:99:c8:93:37:59:04:e9:ea:
db:58:17:06:17:f4:02:e4:a5:b2:36:a7:7d:66:ae:b9:0e:b0:
56:a1:a0:00:4f:b4:70:f3:8f:d3:11:ff:d7:35:f5:77:9e:d8:
90:17:a3:7c:20:55:98:d0:55:d7:ee:81:2a:89:85:28:27:ac:
d7:87:bb:67:d4:aa:48:54:7a:72:71:76:4b:c5:60:9b:fe:d0:
59:bc:e2:2e:56:45:ee:11:98:6a:4a:83:9f:d3:49:47:4e:bd:
ad:44:0f:67:54:30:e4:b7:d5:7f:65:6e:5f:b0:1d:9d:af:e6:
9a:41:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:17:53 2026 by rpki-client