
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
File: 4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json)
Hash identifier: TpldBnrLhRCBEFNvFZjvk98cfm5O6FM22F7S9Rjwyx4=
Subject key identifier: B8:CE:BD:D1:49:CE:F5:36:95:24:52:FD:00:B5:0D:1D:EB:27:4F:6A
Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89
Certificate issuer: /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689
Certificate serial: 16D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
Manifest number: 16C2
Signing time: Tue 12 May 2026 16:40:20 +0000
Manifest this update: Tue 12 May 2026 16:40:20 +0000
Manifest next update: Tue 19 May 2026 16:40:20 +0000
Files and hashes: 1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: KNwTao05fcspimm6ETxREo7j4fpCaEH/sQEYDDoFb8k=)
2: F6EC99AE26A111F1A6B92646BF833773.roa (hash: F3guSpGm8GcV6RFX5BxyucYNTiqMtw8fTbZ/W0lp6OM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl
rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5843 (0x16d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916814B, serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689
Validity
Not Before: May 12 16:40:20 2026 GMT
Not After : May 19 16:40:20 2026 GMT
Subject: CN=6a0357f4-fa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:01:1e:8e:e2:f4:5f:1b:c9:27:3c:98:7b:
87:2d:5f:74:ea:8d:4a:9e:52:71:cd:39:df:62:6b:
2d:a1:77:98:9a:e4:5a:c6:81:7b:a8:75:35:7e:0a:
a0:2f:80:a9:2b:27:94:09:57:6d:78:2b:f6:d6:ac:
97:f6:2b:28:11:28:95:20:2e:7a:00:c9:e5:15:76:
31:10:61:55:58:dc:32:a3:1a:87:2a:6d:80:49:bf:
54:d9:c2:50:aa:6a:24:f1:19:c0:96:be:a0:2a:f2:
8e:f6:b0:8e:eb:9c:1f:40:c7:64:90:5b:62:36:a0:
3e:10:d3:de:61:3c:c0:13:a5:97:cb:6e:c2:18:63:
5d:80:91:89:71:e6:09:c6:07:03:00:08:9f:8d:e1:
5f:0b:d4:81:dc:e3:68:59:3a:7e:7b:16:6f:72:16:
86:60:9c:8b:0e:17:1b:03:0a:65:a5:79:19:f5:a6:
a7:13:cf:89:e2:d1:19:91:fd:52:fb:12:5b:95:98:
1d:da:0a:5a:5f:fe:cb:ff:07:a3:14:ac:c1:c6:0a:
87:4a:07:46:f8:53:69:58:24:1d:99:2a:9a:32:bc:
cc:e5:b3:20:ae:08:17:80:3f:33:74:9d:8a:53:d0:
ac:35:a0:07:4d:c9:f2:c4:2d:4c:4c:a0:19:23:e6:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CE:BD:D1:49:CE:F5:36:95:24:52:FD:00:B5:0D:1D:EB:27:4F:6A
X509v3 Authority Key Identifier:
keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:95:3e:9e:06:4b:79:52:11:09:0d:39:86:b8:b7:63:7d:c1:
f5:c2:cb:ac:52:b2:07:8b:2d:d1:39:39:a9:10:c5:57:4f:ff:
f9:90:ca:c9:f9:a7:97:02:d6:dc:1f:83:98:e3:24:0d:2a:56:
fa:ac:ce:46:bc:cc:24:fe:d2:f8:de:a9:c8:69:62:cc:27:b1:
e6:78:d0:26:4e:17:7d:d7:71:ec:ce:65:50:25:12:3c:1d:3b:
80:cc:55:0e:f4:3d:44:a3:ea:bc:11:00:a9:dd:30:45:85:03:
e6:ef:4c:59:6c:ca:aa:cd:09:c7:fb:fb:74:27:3f:56:2b:e1:
a2:79:8a:9d:93:f5:7f:6b:7f:2e:96:a4:28:b9:b1:b4:0e:35:
2a:24:4e:a7:5e:9a:67:f4:8e:9a:a1:f6:39:c1:d7:4d:5f:0f:
61:56:2b:72:51:ed:b8:57:ff:d5:c6:9e:9e:77:b9:0f:e8:37:
07:e4:ce:9e:d4:66:61:d8:2a:d6:c7:68:97:f9:7a:8c:1a:bd:
11:cc:f3:b9:50:3d:35:e8:f9:86:0a:41:6f:ce:ac:74:c1:fc:
f5:df:7e:cc:de:be:62:c9:d0:bf:fb:ea:c2:ee:9c:c1:5b:8d:
db:b2:f4:3a:3e:f6:e9:ee:f5:55:09:93:95:e5:6c:b9:c7:5d:
03:80:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:26:18 2026 by rpki-client