
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
File: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json)
Hash identifier: 4rijV+xZoKW7vzscYQCnh2tQoYSon90Yp3vycm/UG38=
Subject key identifier: 3C:FF:2D:D7:3E:7A:3C:A4:29:BA:EF:F5:D2:E7:4F:D3:C8:92:40:20
Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
Manifest number: 0111
Signing time: Wed 25 Mar 2026 05:10:38 +0000
Manifest this update: Wed 25 Mar 2026 05:10:38 +0000
Manifest next update: Wed 01 Apr 2026 05:10:38 +0000
Files and hashes: 1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: cCdMIosrLW5gD0lcfx8KCfj3pkAQAl3Wh0ming+A+a8=)
2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: FZWu1eNv8uHcQDNf81sl/oJ0iCfpzPgZBc4wD/nd7tU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Validity
Not Before: Mar 25 05:10:38 2026 GMT
Not After : Apr 1 05:10:38 2026 GMT
Subject: CN=69c36e4e-2f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:a8:af:4e:96:27:e4:dc:65:93:e7:52:07:
8d:0a:6c:02:42:84:00:ac:89:4c:83:df:6c:86:47:
cf:ff:01:13:aa:fd:c4:a7:2a:c2:0b:7d:7e:16:38:
6b:2b:d2:10:96:a1:59:f1:ae:56:fb:f5:e7:93:7d:
76:2b:db:9a:98:cd:bf:38:ab:5a:37:60:03:82:b5:
58:9e:7a:45:04:85:65:6b:97:6e:3d:eb:c1:c8:25:
a9:87:42:4a:61:94:1e:48:77:30:e6:e5:b6:00:25:
da:dc:64:5c:d7:88:07:70:b0:28:f9:af:0e:35:6a:
ab:34:0c:20:5c:d8:e3:a3:35:96:56:d9:74:d7:91:
c0:bd:fd:76:38:c5:81:72:2e:b5:3f:05:3e:6f:ad:
94:1e:3d:eb:88:9f:3d:8e:14:a9:51:d7:f5:0c:7c:
52:1d:f9:06:f6:49:5e:a9:a1:d4:2d:ae:e1:6e:68:
41:c5:ed:e9:1c:0e:c9:70:9c:ed:da:d8:46:1b:20:
e6:3b:a6:8a:fc:5c:47:9a:c9:b8:b1:5d:4a:a5:6d:
9c:c1:92:2f:c3:d2:6d:15:ba:ba:c7:94:7d:fc:85:
cb:4b:91:a3:c2:ed:54:5a:dd:9e:2f:de:04:94:79:
08:15:55:bf:b4:20:1a:6a:81:84:26:ee:44:b5:46:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FF:2D:D7:3E:7A:3C:A4:29:BA:EF:F5:D2:E7:4F:D3:C8:92:40:20
X509v3 Authority Key Identifier:
keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4a:99:24:5d:b1:cf:1c:3a:f3:a8:be:83:6b:56:a7:c6:19:
ec:0f:e6:97:31:d3:b8:f2:d5:2d:79:86:40:17:6e:e9:1b:19:
b3:06:51:fa:fd:df:f3:6e:1c:62:1e:cc:8d:15:d9:91:3c:c8:
36:73:c1:09:2c:05:be:ca:58:fc:6a:76:2a:f6:83:f1:0f:b6:
26:cf:9e:c0:90:05:f9:07:f9:a0:0b:40:3d:a3:20:13:07:ad:
01:ce:5d:d8:45:ab:58:a1:3a:7e:25:2a:e1:d5:3b:03:c7:92:
96:f5:f0:06:e3:b6:66:4c:29:c1:ae:84:eb:c9:85:25:e7:ec:
6d:7f:d7:de:ef:d6:1f:81:e9:e2:e1:92:fb:c6:b7:4f:94:43:
d8:a0:7c:77:ea:78:e0:cb:d3:2e:f8:b4:d6:8d:32:10:4a:3f:
ce:31:fe:6b:ed:ad:65:8f:18:40:05:71:99:c8:06:7b:17:81:
ce:b5:bc:57:a6:72:be:d9:18:30:4c:47:31:fd:dc:30:b3:71:
63:8f:88:5a:9a:ea:9f:76:0f:44:69:d6:89:49:b6:c7:bc:31:
56:15:73:2c:86:c0:41:5f:c5:95:84:56:10:7e:a1:f6:25:2c:
70:75:96:6a:de:b0:9e:17:39:9a:a1:49:27:62:0d:3a:be:23:
08:1c:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:19 2026 by rpki-client