
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json)
Hash identifier: 2Mutjk8LdUuBkwlUld+3vWeQA1AkLOGPU52WNARuVJ8=
Subject key identifier: B4:70:18:A7:45:FF:66:11:8E:29:10:6E:BD:A9:D8:DC:70:18:2A:C8
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
Manifest number: FD
Signing time: Wed 25 Mar 2026 06:11:00 +0000
Manifest this update: Wed 25 Mar 2026 06:10:59 +0000
Manifest next update: Wed 01 Apr 2026 06:10:59 +0000
Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: ILRQuzf3BQGf5YD9f+FRid+XBcWxFlvvmZgfI+CcmBg=)
2: 71A92448186E11F083760527C4F9AE02.roa (hash: b7QaG+Nx/PTzoPZCl0t+vIuGgyWjiuhcViAVTwKgxf4=)
3: C4A5B394A86711F0BD0D193DC4F9AE02.roa (hash: 1ANuhs6jNpCXfaJ6odiDHTbqhPQhhIhyQT9nqM1i4cg=)
4: 13B46272139511F0BAC02735C4F9AE02.roa (hash: 9BLP4fuFM870a7urAU2qoqDlhTnPcRo3RUzBO9Wc+7c=)
5: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: 4vHzok/E524QlRcfSwftnk85HN/jHQnXadbkicvtcjY=)
6: 95E16734187411F099AC2133C4F9AE02.roa (hash: Rb86kkLgxPAlqIwO4QvbpP4uIJywx0xREjWfrACGqjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Validity
Not Before: Mar 25 06:10:59 2026 GMT
Not After : Apr 1 06:10:59 2026 GMT
Subject: CN=69c37c74-2af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3f:8a:0b:4a:6b:cd:04:40:2d:0b:58:12:a1:
e9:dd:9d:ae:06:34:09:69:54:8e:ef:43:9b:cd:41:
15:49:de:66:6e:83:67:99:ce:40:13:0d:df:ea:e0:
c3:15:b1:77:b9:82:98:39:d1:0e:2a:fb:25:5f:a6:
43:00:ed:ca:63:62:f1:6e:3e:d7:ba:7b:fe:42:29:
e4:d3:23:72:bb:d8:8a:8c:76:6f:e9:01:75:c0:78:
aa:63:79:08:f9:c5:9c:97:b8:37:9e:bf:9c:7c:28:
a5:d4:01:b7:22:12:d3:de:85:ac:54:72:12:d3:1b:
f9:2e:45:66:d6:26:3f:b0:74:5b:bd:df:81:fa:e9:
eb:79:76:84:c8:cd:02:c4:a9:53:a9:53:17:a7:fb:
18:1a:6f:66:c3:bc:3a:d2:98:7b:81:7c:be:4d:b2:
09:eb:2a:df:6b:9e:99:7f:d7:89:b7:35:65:56:bd:
c1:1b:74:3f:b6:3d:94:70:80:dc:d0:3d:90:dd:74:
a3:72:6b:fd:03:fa:0b:de:1a:a4:fb:51:3b:35:d3:
84:4a:17:e1:f2:dc:6a:4b:10:27:3a:53:eb:85:45:
d8:e2:02:b6:e4:9e:1e:ed:a9:97:fa:18:12:3a:ab:
60:3c:55:36:da:b1:5e:ff:5a:d0:bf:fa:3e:48:e1:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:70:18:A7:45:FF:66:11:8E:29:10:6E:BD:A9:D8:DC:70:18:2A:C8
X509v3 Authority Key Identifier:
keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:21:cd:97:e1:b6:3c:ea:ec:5e:c2:ec:c1:eb:e4:6e:6a:f6:
45:89:ed:96:24:be:d5:6c:af:c9:ab:94:97:f2:15:4f:4f:a8:
2a:63:62:b0:3c:89:68:a7:a5:ae:a4:83:e3:fe:a8:b6:e0:f1:
ff:1b:76:7d:6a:76:82:fd:5f:ce:1a:24:5d:0d:77:3d:44:cc:
e4:df:23:2c:3d:09:b5:23:cb:8d:15:d4:13:bb:7b:2e:09:a6:
54:f7:37:e0:e7:38:71:78:da:cd:74:e4:1e:fa:8a:f7:a3:ce:
12:4b:56:f0:e7:74:1b:67:2b:76:20:1d:51:29:8c:a7:9a:5e:
d1:1d:ff:2d:bb:a3:84:6e:d9:35:d7:cb:2c:36:fc:fd:46:be:
f4:e7:52:b1:0f:c7:a6:23:7d:f3:19:14:20:ad:b0:42:f6:05:
a1:86:25:7c:1e:a4:89:38:01:05:79:97:45:13:ff:11:ad:ad:
a8:85:c0:91:69:00:19:24:82:f7:bf:4a:97:cf:7b:58:a1:e6:
bf:7e:35:70:85:2d:b4:30:8a:97:0a:39:f9:5a:bf:99:67:be:
57:5f:3f:f8:55:e9:14:6a:4c:94:cb:71:38:6b:d7:56:6a:13:
08:b8:b3:d3:2b:e2:6b:ad:c3:e7:cc:9d:f0:69:a2:47:5a:b8:
7f:c0:90:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:56 2026 by rpki-client