
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
File: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json)
Hash identifier: 8aEFWaOk6u2N3JnFt/Jv7M+ZrZSzSRsbLwdWj7Zh+Do=
Subject key identifier: 0A:F9:45:38:F6:A7:86:64:12:D8:4F:76:FC:EA:3F:10:47:A7:FA:8D
Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
Manifest number: 012A
Signing time: Wed 13 May 2026 05:46:00 +0000
Manifest this update: Wed 13 May 2026 05:45:59 +0000
Manifest next update: Wed 20 May 2026 05:45:59 +0000
Files and hashes: 1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: kotACS5KWdeWmo367Pp8nj/yat9JQ37HijwAV2tiI4w=)
2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: FZWu1eNv8uHcQDNf81sl/oJ0iCfpzPgZBc4wD/nd7tU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Validity
Not Before: May 13 05:45:59 2026 GMT
Not After : May 20 05:45:59 2026 GMT
Subject: CN=6a041017-d952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:7e:39:91:ab:b0:cd:2e:82:b7:99:45:fe:
98:f6:cd:2e:52:96:51:d7:54:8b:f3:2e:9b:64:0c:
bf:3e:7e:60:9a:9f:0a:82:54:00:50:24:c1:a0:63:
60:17:55:97:e1:fb:b8:7e:35:bd:cb:0b:3b:7c:ac:
39:76:2c:87:34:fc:f8:ba:c9:36:d7:d2:f1:4c:9d:
e6:d3:bb:bb:40:02:18:65:f2:5a:a8:db:8b:ef:e0:
eb:35:81:bb:d7:99:3b:41:16:0f:bf:88:31:ab:1a:
55:35:f5:a2:07:35:84:45:c0:42:a7:6d:00:82:73:
66:95:dd:e0:76:b1:a2:31:4b:42:a7:00:55:0d:bc:
1a:21:87:26:bb:97:e9:bc:70:d2:e3:79:21:d0:54:
4b:9b:be:f1:37:fa:27:eb:33:36:15:44:c2:d3:7a:
bd:76:8c:46:6a:cd:48:63:a4:df:0e:a3:95:bc:f2:
23:ec:fd:2e:26:0a:e1:a2:99:dc:43:71:fc:cf:b5:
c3:75:73:a9:ed:17:ec:9d:28:57:74:23:3f:28:ff:
52:b3:f9:04:a7:f1:1f:68:8f:b0:42:ea:c7:49:7d:
59:a1:b2:d9:b4:75:1b:c3:12:d1:b2:33:dc:99:9a:
3b:a4:05:71:85:d8:aa:93:12:56:9a:4b:df:2a:a7:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F9:45:38:F6:A7:86:64:12:D8:4F:76:FC:EA:3F:10:47:A7:FA:8D
X509v3 Authority Key Identifier:
keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:48:82:0c:c5:a5:1a:b2:82:7a:4f:3b:58:a4:c8:c7:e3:51:
7f:84:74:8c:63:35:2c:f9:ba:32:ed:26:c3:80:6f:ec:de:5f:
98:bd:b2:8b:dd:8e:97:3e:8d:35:35:22:50:a0:dc:0b:88:f5:
1c:38:54:4d:51:79:e4:c5:c7:d0:6e:ba:62:03:9e:b9:23:2f:
3c:db:5a:54:65:88:1a:b0:00:bb:ff:53:2c:3f:77:0d:a4:71:
70:e3:b9:9f:59:21:84:45:bd:2d:9d:e2:fa:08:67:ba:49:7d:
ab:81:51:86:66:78:1f:63:11:63:8f:3f:8e:84:ac:a4:55:36:
29:21:3d:9d:36:a9:21:60:39:b3:8d:04:dc:00:80:b1:5b:ee:
e5:9f:78:7f:3d:06:24:ef:d0:5b:1e:2a:7d:a7:fd:30:98:d7:
f2:8d:bd:0d:8d:82:95:e9:90:91:5d:b7:82:09:50:c0:7a:2c:
00:c5:57:31:31:2b:49:d1:18:b4:b0:2c:4e:fe:8c:1d:0b:bd:
79:01:04:83:6b:b6:9f:70:35:0b:8a:ec:1e:2f:85:4f:33:c5:
d1:c7:6c:f5:e9:2a:72:9e:7e:87:e9:1d:87:d6:4e:44:89:7c:
50:1e:39:dc:11:ca:3a:38:67:68:13:4c:97:fc:4d:2d:aa:e4:
e2:b0:60:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:23:25 2026 by rpki-client