
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json)
Hash identifier: MyM4mSx+ANeUwJPX90U2OpK3C8TMXRWVjqnQyAWd7hU=
Subject key identifier: 68:73:D5:95:59:AC:CB:76:85:FE:5A:FB:B0:77:DE:F6:FC:0E:EA:E8
Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Certificate serial: 0D0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
Manifest number: 0CCB
Signing time: Tue 12 May 2026 18:32:04 +0000
Manifest this update: Tue 12 May 2026 18:32:04 +0000
Manifest next update: Tue 19 May 2026 18:32:04 +0000
Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: eTYRe7Xv8QOL8kgiuliHL+WI5lObjPcQ5GQVUoh6pjk=)
2: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: ApbUgdUH10Pdfa6lJVrc4XPCGZcLshELo3PIV/SWLXw=)
3: 183DE570057A11EC822F230EC4F9AE02.roa (hash: KDCY6i/WJ6l1BoCfZqKbKmaeWQcqDHXYwIFR4N1iXXE=)
4: 89EA369C2A7411F09A757F45C4F9AE02.roa (hash: 2VeVxpw4IPzgEibTNEjoXK/Qy1fd2SwF+0DbU+sMNRg=)
5: B688C61E2A7411F09C50DF45C4F9AE02.roa (hash: HqADfJ6PQAnaMYUSVaYaC1tzBINlqpUjolFi7987BYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl
rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3338 (0xd0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Validity
Not Before: May 12 18:32:04 2026 GMT
Not After : May 19 18:32:04 2026 GMT
Subject: CN=6a037224-a66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:2d:3c:dd:2f:da:8e:2f:ad:73:1c:84:3b:
dc:e3:df:95:39:fc:6f:97:1b:bd:30:5d:d9:26:1d:
ff:09:a6:04:7c:6f:d6:05:ac:c3:d9:6b:af:51:8a:
9c:d9:65:b5:67:a8:f9:6f:75:d7:d0:de:b9:26:65:
e8:fc:85:a2:15:a6:e0:bc:9c:df:e6:a7:c8:ca:0f:
b7:4c:4f:3f:78:e8:4f:88:ac:7d:c9:9d:3b:01:c5:
4c:8f:80:0d:1a:fc:dd:75:4c:01:6b:3c:ab:f2:e5:
cc:aa:2f:4b:06:e1:43:16:67:b2:b6:f8:e4:0a:de:
e1:4f:87:c9:4d:53:37:af:b0:54:98:16:83:10:db:
a6:6f:21:7e:2a:85:41:98:de:6a:be:3a:58:5d:1c:
78:c1:62:af:84:13:c9:23:e2:62:a2:44:c1:dd:41:
08:60:a4:c2:9b:8f:f1:d2:4a:18:87:7b:d0:18:67:
90:86:72:ef:3c:0b:ff:05:29:25:27:31:d3:92:b9:
80:0e:a0:67:b2:d8:b4:4f:b9:2b:c5:9d:62:5b:aa:
cb:b9:15:f0:4a:8f:77:2c:9e:36:9a:c2:95:48:07:
9f:3b:d8:b5:e7:fd:87:f5:d3:a8:6c:d2:24:bf:3f:
00:f1:ae:2c:d2:a8:ef:8b:70:e2:b0:48:fa:a5:7c:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:73:D5:95:59:AC:CB:76:85:FE:5A:FB:B0:77:DE:F6:FC:0E:EA:E8
X509v3 Authority Key Identifier:
keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d6:e9:54:49:57:31:7c:1c:74:d4:0a:19:e1:e4:b8:96:9e:
e5:69:2b:81:69:ff:b1:39:85:d8:0c:be:1a:35:76:46:4f:13:
ca:05:ca:fa:e9:e3:b4:2f:5b:9e:67:97:c3:58:af:f8:ef:e0:
74:69:ea:06:c1:47:5e:3a:d8:45:ab:31:1b:a5:e1:ad:2a:3e:
7c:6c:54:d5:be:26:07:35:00:44:45:0d:4b:50:80:f7:e5:cf:
23:e7:d6:57:a8:cf:17:d7:dd:4e:70:77:27:46:42:8b:9d:1e:
5d:d1:a9:54:27:6f:99:fe:7b:36:12:79:3c:86:c0:00:80:31:
1f:e2:9b:8d:f0:63:d1:36:85:4f:4d:9f:9c:2e:cb:55:b6:7a:
17:2b:0e:14:7e:93:d9:71:3f:23:da:eb:7a:a4:e8:14:5e:f1:
15:46:af:b4:3f:56:9f:b9:66:ed:e5:67:e2:1d:c7:82:e1:e1:
80:c8:f0:a4:9a:e7:ab:e5:6a:17:fd:55:ad:ae:70:20:e5:76:
a3:c3:48:d0:0b:44:af:e4:fd:28:0f:c3:f7:7a:18:12:75:db:
04:43:c4:07:2e:4d:d5:7a:9d:e8:98:cd:20:6a:c8:6d:1f:53:
ea:40:90:54:69:a2:cd:4a:fa:b1:63:59:87:07:81:d5:a5:ac:
a2:63:55:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:43 2026 by rpki-client