
$ rpki-client -vvf rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
File: 4nmL4YzWTgg46agi1HhCBArIA0M.mft (raw, json)
Hash identifier: o0u8Um551Z1uNz1bjJS3gH0UkNt35Gxk7wqtsvyt1MY=
Subject key identifier: 55:A1:CF:2A:61:4B:D5:79:A7:4D:78:C5:03:60:45:F4:11:27:5A:C8
Authority key identifier: E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
Certificate issuer: /CN=A914823C/serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
Manifest number: 06
Signing time: Wed 13 May 2026 09:23:21 +0000
Manifest this update: Wed 13 May 2026 09:23:20 +0000
Manifest next update: Wed 20 May 2026 09:23:20 +0000
Files and hashes: 1: 4nmL4YzWTgg46agi1HhCBArIA0M.crl (hash: 0aC1m4rq4cH/dL+myRNpZqLwiqg9zRNEvZOUYWpMlyw=)
2: DB626DF24AF111F18CF4AA40CD833773.roa (hash: Qc04/3jafq1HIqjArWLPfNu0P5WLlwA1tLsJj60Zayw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914823C, serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Validity
Not Before: May 13 09:23:20 2026 GMT
Not After : May 20 09:23:20 2026 GMT
Subject: CN=6a044309-c715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:cc:bb:e1:29:92:48:e7:b3:56:42:1e:bb:
7c:21:d8:b5:89:ad:c7:56:f8:73:bd:36:ca:d9:a0:
6f:36:e9:5e:2b:c9:1e:95:7d:17:62:1c:fb:0e:5f:
ae:bf:7e:5f:8a:d0:df:b4:8e:fc:f0:86:93:5c:78:
59:d1:57:52:68:66:9d:eb:5c:9e:e0:54:a2:a5:5d:
31:21:6b:44:ff:d8:fb:e4:af:cd:4c:b0:e1:d7:22:
3f:ad:52:af:b2:40:6e:f5:a0:a9:2f:61:58:ec:d9:
31:d2:f1:17:7a:63:07:68:e8:88:d9:3d:55:00:8e:
e3:35:3d:d0:44:da:c2:a5:34:d2:01:8c:ea:f3:9a:
8d:e3:04:66:24:c8:d2:ba:13:11:a7:3d:a2:1d:9f:
7d:92:5c:a8:f2:54:a0:21:a7:8f:45:02:a0:c1:4c:
84:34:1c:34:c0:b7:12:b7:ca:95:c6:88:42:48:2c:
ba:3e:28:0d:5e:2e:e7:d6:90:ef:6d:dc:4f:46:f6:
0e:c8:a9:96:59:20:2d:d8:c5:04:aa:36:3f:e5:38:
4c:dc:9b:a5:3d:b7:0e:d9:e6:3e:60:91:18:97:80:
0d:57:f0:64:74:a7:95:30:5b:3a:53:1c:a4:f2:3d:
7c:8a:8d:6c:2a:fb:d4:11:ba:75:58:58:1e:fa:1f:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A1:CF:2A:61:4B:D5:79:A7:4D:78:C5:03:60:45:F4:11:27:5A:C8
X509v3 Authority Key Identifier:
keyid:E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4b:82:45:e8:9f:59:35:d8:de:43:6d:40:b4:da:93:5a:45:
95:52:93:70:b8:55:28:d4:fc:b2:81:97:7d:61:91:f0:a1:6f:
01:9c:71:a6:23:fa:c5:00:9c:3a:fc:55:3e:58:e5:07:b4:55:
66:0e:cf:ae:ed:8c:d5:d3:05:8e:30:c3:90:97:ba:4a:b8:69:
1c:fe:f5:34:a2:98:00:5a:6d:42:31:3d:a3:96:80:3f:ad:b2:
e0:3e:e5:aa:9b:48:88:40:f1:79:a3:f2:5c:ff:58:6f:27:ab:
4a:0d:c1:6e:0a:d7:45:2c:eb:d2:ff:89:21:03:14:58:b0:3a:
09:0c:8f:c1:69:4f:22:92:72:9f:b7:f1:ba:22:9d:31:ce:84:
34:72:13:d5:55:0d:bd:bb:b8:5e:67:67:5b:ae:37:4d:65:11:
3b:ed:09:e0:51:51:28:b9:aa:29:61:18:39:75:30:aa:56:58:
e4:99:c9:f7:58:7b:e7:ce:0b:72:8d:53:5e:f8:11:e3:ad:36:
5d:53:a7:de:72:c3:2b:f9:9a:d4:6c:d5:c5:e7:5b:40:36:0f:
ce:ca:a1:87:ba:82:7d:f1:6e:58:07:44:d5:4e:ab:ff:f2:34:
94:47:b3:71:75:c5:f8:83:31:ab:dd:53:f7:b9:22:c2:b5:5f:
92:fa:69:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:26 2026 by rpki-client