
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
File: 4nmL4YzWTgg46agi1HhCBArIA0M.mft (raw, json)
Hash identifier: MfqExmqO8iJXQui3S6vAjPdhTizKZMRXCcHh8kwjBjI=
Subject key identifier: 10:65:17:29:F2:1B:2C:FA:3F:30:50:C6:31:93:DE:2C:CB:B8:B2:F8
Authority key identifier: E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
Certificate issuer: /CN=A914823C/serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
Manifest number: 4D
Signing time: Sat 03 Oct 2026 09:06:05 +0000
Manifest this update: Sat 03 Oct 2026 09:06:04 +0000
Manifest next update: Sat 10 Oct 2026 09:06:04 +0000
Files and hashes: 1: 4nmL4YzWTgg46agi1HhCBArIA0M.crl (hash: Jkbf8Trs4BgEoqfhP3E3nxSUXDM+6OcTK0noDMfD2aI=)
2: DB626DF24AF111F18CF4AA40CD833773.roa (hash: Qc04/3jafq1HIqjArWLPfNu0P5WLlwA1tLsJj60Zayw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914823C, serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Validity
Not Before: Oct 3 09:06:04 2026 GMT
Not After : Oct 10 09:06:04 2026 GMT
Subject: CN=6ac0c57d-2aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:67:32:2b:aa:58:84:31:b4:6d:da:52:79:
00:a6:9b:c2:28:98:9c:83:7b:e9:25:cf:78:46:f6:
3c:8d:58:b6:61:e3:7a:1f:8b:a9:5c:8a:7f:6d:f4:
66:39:7a:d0:b4:a4:49:32:72:f0:d8:94:35:43:f8:
fa:5e:f3:03:6b:9e:dd:6e:dd:b3:6a:9e:50:e1:42:
ab:d3:c1:b2:6d:cc:57:01:8a:0b:f1:7b:38:4a:30:
6f:34:2b:f4:a1:7a:0d:91:4e:7a:05:47:75:d8:81:
46:af:cb:b7:54:f8:ee:23:d2:40:16:38:e9:90:de:
d8:37:39:f9:ff:a5:9f:c5:37:9f:43:05:89:18:f5:
bc:7c:9b:bf:41:14:9b:14:15:3f:7c:a9:aa:c6:65:
db:d9:07:ce:fa:cc:8a:71:b1:b3:cf:84:e2:92:7c:
1c:ce:89:d7:ed:fb:a6:58:d2:7d:45:d5:a5:98:7c:
bd:2b:33:45:ed:27:4d:61:5f:53:02:f2:25:c8:f0:
ed:da:b3:c2:db:5e:31:1a:e4:b0:23:97:57:ef:da:
31:17:73:32:da:dc:da:bc:8c:68:84:c4:3e:9d:f2:
c9:7d:bf:76:d1:96:c7:6f:5d:a1:b0:eb:34:7f:07:
1e:9e:99:8e:1b:d9:15:6d:c4:3d:c2:fe:3d:b4:ed:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:65:17:29:F2:1B:2C:FA:3F:30:50:C6:31:93:DE:2C:CB:B8:B2:F8
X509v3 Authority Key Identifier:
keyid:E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3b:a1:bf:20:5d:4f:66:10:93:2d:85:8c:38:b8:4e:d0:8a:
fe:50:ac:aa:3d:af:c7:89:0d:4d:51:e8:7a:94:0e:65:45:04:
1f:73:a1:bf:c3:37:b7:91:6c:c5:9d:19:ba:93:6c:f3:29:32:
39:3d:fb:cd:3f:d1:e0:70:30:4c:93:ba:29:6d:87:21:de:70:
97:5e:32:cd:05:a5:0a:96:99:c2:5b:c8:3d:5f:dc:e1:ed:2f:
3f:34:45:76:0f:09:80:ed:0a:f3:9b:ff:82:37:ff:17:32:af:
16:d1:d9:56:8d:17:e9:b6:a2:df:75:b9:3e:0c:d1:3e:02:0d:
fe:f6:6d:13:3f:17:f2:24:e2:0b:f0:bc:31:5c:52:5d:b9:11:
56:b3:9e:ac:9c:ae:70:41:2a:c4:91:ea:37:6c:dd:1b:e8:7f:
0b:2e:06:8e:78:7c:32:ca:b2:6e:08:92:41:b6:9a:c0:05:f9:
e6:3c:6d:cd:14:a2:ce:2b:fa:1e:a7:70:c8:ac:fb:53:23:d3:
37:fa:2b:a4:6c:cf:22:73:12:09:71:82:09:52:8b:74:89:a0:
ca:0f:7f:56:39:36:8b:74:c2:3c:e7:97:3b:37:7a:61:81:bb:
8f:3f:d0:10:c6:91:45:ce:d6:1c:b6:d2:66:07:44:78:bb:8e:
fc:d1:3b:43
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
ODIzQzExMC8GA1UEBRMoRTI3OThCRTE4Q0Q2NEUwODM4RTlBODIyRDQ3ODQyMDQw
QUM4MDM0MzAeFw0yNjEwMDMwOTA2MDRaFw0yNjEwMTAwOTA2MDRaMBgxFjAUBgNV
BAMTDTZhYzBjNTdkLTJhYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCSFmcyK6pYhDG0bdpSeQCmm8IomJyDe+klz3hG9jyNWLZh43ofi6lcin9t9GY5
etC0pEkycvDYlDVD+Ppe8wNrnt1u3bNqnlDhQqvTwbJtzFcBigvxezhKMG80K/Sh
eg2RTnoFR3XYgUavy7dU+O4j0kAWOOmQ3tg3Ofn/pZ/FN59DBYkY9bx8m79BFJsU
FT98qarGZdvZB876zIpxsbPPhOKSfBzOidft+6ZY0n1F1aWYfL0rM0XtJ01hX1MC
8iXI8O3as8LbXjEa5LAjl1fv2jEXczLa3Nq8jGiExD6d8sl9v3bRlsdvXaGw6zR/
Bx6emY4b2RVtxD3C/j207fZDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEGUXKfIb
LPo/MFDGMZPeLMu4svgwHwYDVR0jBBgwFoAU4nmL4YzWTgg46agi1HhCBArIA0Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4MjNDL0EzMDhEMEQwNEFD
QTExRjFBNDQ1OTRCMUMwODMzNzczLzRubUw0WXpXVGdnNDZhZ2kxSGhDQkFySUEw
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNG5tTDRZeldUZ2c0NmFnaTFIaENCQXJJQTBNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4
MjNDL0EzMDhEMEQwNEFDQTExRjFBNDQ1OTRCMUMwODMzNzczLzRubUw0WXpXVGdn
NDZhZ2kxSGhDQkFySUEwTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBbO6G/IF1PZhCTLYWMOLhO0Ir+UKyqPa/HiQ1NUeh6lA5lRQQfc6G/wze3kWzF
nRm6k2zzKTI5PfvNP9HgcDBMk7opbYch3nCXXjLNBaUKlpnCW8g9X9zh7S8/NEV2
DwmA7Qrzm/+CN/8XMq8W0dlWjRfptqLfdbk+DNE+Ag3+9m0TPxfyJOIL8LwxXFJd
uRFWs56snK5wQSrEkeo3bN0b6H8LLgaOeHwyyrJuCJJBtprABfnmPG3NFKLOK/oe
p3DIrPtTI9M3+iukbM8icxIJcYIJUot0iaDKD39WOTaLdMI855c7N3phgbuPP9AQ
xpFFztYcttJmB0R4u4780TtD
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:13:14 2026 by rpki-client