
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json)
Hash identifier: LvFHCQHMA8prjeSLyK2MTDVl7F65swFi0pXiW/oetMw=
Subject key identifier: 68:18:39:8F:19:A1:4D:34:3F:9F:9E:D8:DA:3C:C7:BF:B4:02:9B:2B
Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
Manifest number: 01D1
Signing time: Thu 23 Jul 2026 05:01:50 +0000
Manifest this update: Thu 23 Jul 2026 05:01:50 +0000
Manifest next update: Thu 30 Jul 2026 05:01:50 +0000
Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: vis6HEaMFqhENpJloCKXTX8bqBVAftEkY+H6x/HQdNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Validity
Not Before: Jul 23 05:01:50 2026 GMT
Not After : Jul 30 05:01:50 2026 GMT
Subject: CN=6a61a03e-db66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:2c:6c:8b:4c:92:bc:45:25:75:0c:cd:96:
80:55:e0:2f:18:c8:c4:2a:39:76:47:78:77:fa:b8:
32:d6:45:b8:8c:00:1c:78:89:c5:3f:62:ec:6e:15:
7d:ef:4b:03:cc:1e:0b:ac:22:16:b4:47:e2:a8:d6:
18:a2:f2:12:eb:6d:23:2b:d5:72:b5:38:6f:1e:57:
75:dc:c3:cd:4a:6d:b1:86:76:70:ac:0d:2c:8f:65:
a1:e6:ce:4e:0e:14:24:fa:32:4a:1d:dd:0b:89:74:
6b:02:a8:9b:fd:6c:ec:e4:38:75:09:70:1c:df:89:
c1:4d:56:1a:91:ad:d3:62:7c:74:3f:29:23:ff:0b:
e7:c3:6b:e5:a3:9d:5e:d1:ed:68:5c:19:a0:cb:79:
2f:bf:73:cb:c5:37:44:f5:02:64:ef:a4:ac:36:c8:
02:ee:92:53:41:a4:f0:38:5c:c2:fb:ea:25:b3:4b:
f0:73:2f:61:24:fc:60:ed:e2:39:85:24:25:34:20:
ae:a9:3e:d1:1b:ff:89:12:10:ff:67:a3:d2:37:e4:
8b:df:b9:3e:a7:d8:98:77:88:07:aa:cb:ca:e0:ca:
8c:25:b1:0b:ee:46:81:20:31:94:84:37:23:09:91:
d8:c3:2d:81:22:24:2e:86:63:dc:aa:c6:4e:61:c9:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:18:39:8F:19:A1:4D:34:3F:9F:9E:D8:DA:3C:C7:BF:B4:02:9B:2B
X509v3 Authority Key Identifier:
keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:17:eb:e2:2c:ec:b9:3e:78:84:68:90:7c:ef:9d:7f:00:a2:
c7:8c:8f:91:00:b9:3c:b6:2e:b7:b8:6b:a6:e5:bb:be:6d:93:
ae:8a:5d:ca:c8:7f:03:2c:2f:54:05:6e:5f:3e:43:97:05:17:
3d:0d:7e:61:78:31:bf:24:5d:47:31:f6:da:7c:61:ce:06:3b:
87:8c:b8:6b:e1:a2:0a:8f:29:a1:19:26:a0:6f:21:63:a3:b3:
7f:5f:29:fb:9a:b0:64:fc:87:18:e8:1c:68:91:9e:6b:88:f4:
93:17:7d:12:3e:75:ee:f2:cf:e5:01:dc:85:50:a0:15:d3:50:
cd:bb:9d:cc:99:c9:55:a8:fa:30:01:6f:8b:3c:1a:c7:26:ad:
e6:e0:0c:ff:59:53:8e:8b:af:93:96:ba:7c:5f:79:55:ac:5f:
a3:19:9b:c4:14:db:72:a6:07:55:6a:34:e3:2d:59:51:18:aa:
ff:38:03:bd:ee:c4:68:21:cd:18:f8:32:fb:dd:59:6d:f0:6f:
f4:9c:ee:73:83:4d:17:bc:a6:37:3c:00:19:ad:f8:01:b4:d9:
04:31:7c:6e:fa:e7:11:2c:a6:33:f4:bd:be:2b:70:58:a1:f8:
4f:bc:ae:24:df:4b:38:f4:23:f0:5a:d8:d7:5e:b9:94:91:be:
24:e8:1e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:49 2026 by rpki-client