
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
File: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json)
Hash identifier: 8n35xGZPRRtHsOZ18EhtEexbvYrmL5l3vUkhRL2Fy+Q=
Subject key identifier: BD:15:25:32:05:1A:74:33:88:45:E4:E0:7D:BF:43:71:30:3C:4A:21
Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53
Certificate issuer: /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
Manifest number: 0123
Signing time: Wed 25 Mar 2026 04:59:32 +0000
Manifest this update: Wed 25 Mar 2026 04:59:32 +0000
Manifest next update: Wed 01 Apr 2026 04:59:32 +0000
Files and hashes: 1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: mV8HjGnXlin+TK+LwPP1iAt0rdAarvPF/5/jNKPNFhU=)
2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: s8ZLRx82qpKC8d+4Ji2PmMxFJJ+eKUDb3t+BPotA2Pc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl
rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
Validity
Not Before: Mar 25 04:59:32 2026 GMT
Not After : Apr 1 04:59:32 2026 GMT
Subject: CN=69c36bb4-bbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:82:9e:bb:e1:8d:c1:0b:5b:68:0d:7b:98:
c2:7a:32:ff:99:34:1b:d6:da:47:22:57:b6:0b:7a:
86:4a:2b:65:4e:5c:9f:2a:27:fe:94:0e:4b:9b:18:
b7:f9:52:db:a1:f8:e9:33:8f:3a:6c:e8:a6:44:c2:
2e:9a:a5:2b:81:b8:3a:fc:a3:4a:91:98:b6:7e:be:
58:d6:88:6d:86:6c:77:67:f2:9f:1c:4c:e4:2b:74:
8c:4d:8b:ca:40:29:3a:f6:ed:59:06:83:7d:93:77:
dd:69:40:a8:55:2f:55:22:e3:48:bd:de:ca:27:ed:
21:6c:cd:bc:f0:1c:12:20:da:38:88:f6:fb:af:f8:
e0:a7:5d:04:e6:4d:c5:b1:b8:75:eb:c9:27:13:cf:
f5:c3:3c:91:be:e9:a8:0e:98:10:b5:89:1f:cf:88:
41:78:db:24:c4:34:52:26:cb:d6:da:85:b0:77:cc:
6c:17:3c:b7:9e:68:3c:31:01:ae:15:02:4b:47:a4:
d8:a3:0b:bf:52:b5:5f:a9:4b:60:d7:1b:32:c2:62:
be:87:dc:44:1b:a9:a3:60:23:40:4c:f6:ff:13:53:
fe:13:a9:14:31:81:4a:47:09:d2:f7:05:85:40:bd:
86:a3:05:8a:c6:a6:f1:8f:cd:ec:5d:b9:4f:03:7f:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:15:25:32:05:1A:74:33:88:45:E4:E0:7D:BF:43:71:30:3C:4A:21
X509v3 Authority Key Identifier:
keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:00:29:c6:56:eb:36:eb:88:fc:01:a1:c0:88:6e:0c:44:70:
89:6c:d8:2c:b7:11:66:ca:b9:fa:e3:55:60:1c:9d:67:e5:3a:
a0:7a:cc:6e:3c:65:42:36:06:af:fd:a6:2e:ff:16:ff:17:ef:
f0:1c:42:c5:8b:3e:a9:64:36:ef:6d:fb:84:2a:e2:7b:ff:41:
50:75:42:e3:76:49:14:82:77:08:4b:ea:03:7f:0a:26:9e:21:
70:bb:fe:f1:0f:97:a8:e8:1e:6e:de:d8:a2:b9:41:d7:ac:b5:
63:81:1e:4e:d1:ad:90:bc:e3:88:3d:c4:4e:27:7a:38:e0:f9:
27:00:11:a6:96:d5:c1:a6:10:d1:85:6b:de:a7:e1:b7:60:89:
f7:d3:a2:28:b9:60:45:b7:19:11:5b:8a:c5:7c:c1:a8:12:d9:
41:aa:3f:4b:d4:47:10:b2:bb:7e:33:5c:c0:79:2f:cb:f4:10:
ce:cf:6b:32:82:21:97:d9:c4:61:23:e6:79:d1:f1:d0:ec:8d:
37:00:b7:6a:b3:bf:7d:f7:cb:8c:5e:07:c1:fd:ba:3f:3a:b5:
3c:15:b9:84:12:44:7c:ad:fc:80:c7:dd:19:09:01:93:c7:79:
ed:e9:05:78:cc:fd:75:c4:76:5c:68:73:98:cc:01:d9:17:60:
35:2c:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:28 2026 by rpki-client