
$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
File: 4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft (raw, json)
Hash identifier: 5yVw7Tu35xvR9Gk1EYfj5XPZmJEMEr/zWFbqeswPiis=
Subject key identifier: 5D:02:07:4E:45:39:46:76:58:13:3B:E0:27:4E:46:2A:17:0C:BB:EF
Authority key identifier: E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1
Certificate issuer: /CN=A914882C/serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
Manifest number: 0C71
Signing time: Wed 22 Jul 2026 19:06:44 +0000
Manifest this update: Wed 22 Jul 2026 19:06:43 +0000
Manifest next update: Wed 29 Jul 2026 19:06:43 +0000
Files and hashes: 1: 4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl (hash: iwa3JcMkGVoVVhZLHYo+I4I+U7mVAoLngNXlBKZxCt8=)
2: 2872362213AC11F18E65BA7479EE528E.roa (hash: Xw3QSa9Ss4iD8QxehrY8joIWifoDq7UToDva9Bu+pZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl
rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914882C, serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
Validity
Not Before: Jul 22 19:06:43 2026 GMT
Not After : Jul 29 19:06:43 2026 GMT
Subject: CN=6a6114c3-75b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:b4:3c:d9:97:30:ef:5a:7b:c4:2e:97:b2:
20:46:04:a8:d4:af:46:06:78:f9:6d:33:7d:51:de:
89:35:87:b9:14:c8:1d:c8:48:a0:e2:88:fb:7d:08:
0f:28:30:e6:fb:59:47:5c:20:34:79:00:0c:18:ee:
bd:57:cd:7e:1d:ca:df:dd:2b:54:d3:d0:26:fe:3d:
03:e8:e6:3d:7d:f8:a2:1b:15:c0:e9:f1:bf:a2:78:
04:9d:3d:28:af:9a:c3:52:59:c1:22:8d:d5:f9:7b:
84:80:40:b0:27:08:c6:d7:32:ee:ee:42:3f:6d:95:
6e:17:be:01:76:42:ef:9b:39:88:a3:7e:6b:9c:43:
d6:fa:58:e1:06:db:7b:fb:b0:4b:cd:d7:8a:52:0a:
de:08:db:63:62:0c:c9:7c:47:2c:b2:87:01:a1:36:
01:c8:98:22:ca:d6:75:b9:92:63:34:c3:2f:e4:93:
84:e0:8a:09:6e:43:75:02:5e:86:e0:42:2b:8a:61:
81:33:3f:0e:9d:fc:2c:c6:4c:9f:29:69:ec:55:f2:
ce:15:64:7a:f0:ae:54:ec:fb:f7:63:ec:4e:9e:21:
c5:6b:23:c4:44:92:eb:b0:b6:52:ef:b9:b0:93:a4:
47:80:de:f9:6e:09:bb:59:52:1b:c4:c0:b2:8f:8b:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:02:07:4E:45:39:46:76:58:13:3B:E0:27:4E:46:2A:17:0C:BB:EF
X509v3 Authority Key Identifier:
keyid:E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:32:89:b6:77:26:6a:7f:76:8b:5c:05:17:a5:7a:6b:d0:dd:
03:a2:73:02:be:06:28:6a:d9:2a:54:e4:ed:0d:35:05:e6:e7:
96:47:b6:a9:25:a3:8b:56:1b:8f:1a:f4:16:f3:10:ef:67:3e:
09:bd:ed:9e:d3:34:6e:0d:68:31:68:53:83:4e:8c:77:3d:72:
57:0a:2f:48:8b:11:56:fc:bc:2f:fc:1e:8e:24:e9:3a:4e:6e:
25:9d:d9:2f:9b:5c:42:b7:c2:fe:7d:57:5d:28:1a:e3:b9:21:
62:b3:ff:2b:db:7c:14:29:22:f7:08:90:47:b3:b9:21:bc:74:
29:9a:a8:b2:ff:66:d0:90:22:79:53:f8:2f:c3:58:38:4e:11:
4f:b2:a9:94:d3:5c:0d:43:87:ac:7d:aa:4b:6e:ef:ac:76:85:
4c:86:2b:ee:fa:b9:b2:ea:13:7e:8d:02:86:2d:6f:d4:40:20:
35:1a:46:28:d0:d4:98:9d:fb:20:76:a6:4b:f2:7e:de:08:b5:
1a:80:17:61:34:b9:e9:72:0c:e9:c1:53:f9:5c:e8:24:35:45:
de:1d:36:63:50:a2:11:04:c8:86:56:be:1b:95:20:2c:7a:fa:
be:3f:87:f7:08:ab:1b:57:bc:9a:ee:4b:de:22:7f:0e:a6:70:
e1:56:bc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:46:54 2026 by rpki-client