
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
File: dEjFUfV_GGOM8awfxMv-1D3vT64.mft (raw, json)
Hash identifier: vL1XkYji5KBHDRLB963R0uZsj+osoIeCyMWGbsnpD7k=
Subject key identifier: EF:FB:E5:2F:70:0C:A6:93:0E:B3:38:7B:93:67:80:FB:64:5B:FD:CB
Authority key identifier: 74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE
Certificate issuer: /CN=A914354F/serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
Manifest number: A4
Signing time: Wed 23 Sep 2026 07:07:26 +0000
Manifest this update: Wed 23 Sep 2026 07:07:25 +0000
Manifest next update: Wed 30 Sep 2026 07:07:25 +0000
Files and hashes: 1: dEjFUfV_GGOM8awfxMv-1D3vT64.crl (hash: yJkSdP4xNmAtjGvXNWsSWfat7KOORxV63NchKZADPDE=)
2: 8EF088C4D77311F0882D4FBB79D3641D.roa (hash: o1fiXCjFDXjKshZmXjJ558GbsN9d78xYw5aDtUQ+m18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl
rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914354F, serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
Validity
Not Before: Sep 23 07:07:25 2026 GMT
Not After : Sep 30 07:07:25 2026 GMT
Subject: CN=6ab37aae-3127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:a2:f9:54:de:89:52:9d:1f:09:04:cb:31:
23:b7:4a:2c:ab:32:65:5d:42:fa:33:c0:22:4e:57:
0d:f0:38:04:ee:a5:0f:3e:bc:b1:da:40:b4:c8:a8:
d2:8e:d4:d5:ff:e7:5b:45:82:51:b9:10:b2:b6:e3:
ee:4a:e5:84:bf:fa:f1:f2:28:f8:43:21:26:0f:94:
6b:2d:31:b1:a2:08:ad:73:2b:c8:8f:34:40:fe:21:
da:9b:0c:a9:e3:77:73:fd:ba:1a:7c:6f:49:8c:74:
97:f8:3a:d7:33:23:02:48:46:d3:cb:f2:c7:bb:88:
9a:7c:47:2c:c1:b5:38:f3:3a:99:78:49:13:6d:19:
01:8e:04:9d:14:25:c8:5c:57:f8:1d:23:dc:6f:1c:
b7:33:21:cd:a6:44:af:57:20:34:5f:ba:ef:6a:01:
64:69:60:04:11:a5:f0:9a:ec:02:af:4b:6b:33:55:
57:a6:52:ba:52:4f:19:7c:98:2c:80:52:8d:cc:3d:
de:30:5d:ac:d7:95:79:a0:87:8c:a0:7c:ec:33:b9:
38:09:a4:f2:e7:56:9e:e5:71:63:ea:3a:b5:8e:31:
a4:65:e6:1b:82:4d:8d:a9:ad:89:a7:10:30:2e:d5:
0d:f6:b0:63:ab:1e:88:02:4b:13:09:3e:04:22:86:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:E5:2F:70:0C:A6:93:0E:B3:38:7B:93:67:80:FB:64:5B:FD:CB
X509v3 Authority Key Identifier:
keyid:74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5a:41:dd:a1:2b:5d:d7:db:a8:90:e6:03:0a:0c:1f:a7:22:
6d:f3:fb:87:9b:ae:e6:96:44:d9:57:72:81:fc:3a:cb:23:ce:
e5:27:b3:83:df:6f:11:a3:1f:8c:19:8a:49:c6:11:08:a0:bb:
a3:b7:b3:04:7e:6a:b5:4a:21:e9:40:50:61:f2:c5:7c:db:69:
59:21:8d:39:98:1d:02:0f:ae:1c:4c:43:56:8a:1d:85:5b:5a:
e1:25:cb:8a:49:65:46:2b:f8:f6:22:a6:72:dd:52:b1:78:52:
40:ee:66:d4:d8:a0:5a:61:71:3a:88:6f:9e:9d:68:f7:47:a6:
c2:d6:67:62:cb:7c:01:ad:35:1e:1d:07:0b:37:64:5e:3a:c4:
ca:87:b5:15:fb:d9:6d:7b:d4:af:66:be:ab:6a:ef:08:52:d2:
52:ad:75:77:ba:35:9f:82:d7:57:ea:73:7f:04:ae:de:bf:0c:
df:f7:c4:7a:ef:fa:a3:1e:58:99:4f:a6:ae:aa:df:9f:cb:b1:
94:49:a9:36:4e:d0:27:bb:c3:f9:57:b4:aa:e3:8e:cc:fd:a1:
60:f6:12:fe:f6:9b:b1:38:8e:3b:e6:d9:14:7c:65:27:39:b7:
eb:d1:e3:6f:23:62:34:e2:ae:22:b3:c2:4b:88:6d:e3:57:99:
e5:fe:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:23 2026 by rpki-client