
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
File: 4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json)
Hash identifier: 231v7omwyvwZJi9ghl3Zuj7XMvbU/ZvWVy/P7ehZL5I=
Subject key identifier: 87:FD:DB:21:71:95:FD:06:75:B0:AC:6F:32:12:A5:A3:2D:52:54:C7
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial: 190A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
Manifest number: 18C7
Signing time: Tue 06 Oct 2026 16:30:48 +0000
Manifest this update: Tue 06 Oct 2026 16:30:47 +0000
Manifest next update: Tue 13 Oct 2026 16:30:47 +0000
Files and hashes: 1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: TmNEz4IxEGzZqKnLcjp5w1ef2o+tpU8ZO1pmRsLe5aI=)
2: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: dgLQAd17tzBsK66kQ0H0dwAp53SX6GdmC4ibG9feFVM=)
3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: X9rsotZF7CeUjy+uRHBz/MOZBNYjTpkQ13IOleGdKEE=)
4: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: 7ZAEA0r9lzg48+UEX+NDAtHxRbz47d+Yj5cRgz6OmvE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6410 (0x190a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Validity
Not Before: Oct 6 16:30:47 2026 GMT
Not After : Oct 13 16:30:47 2026 GMT
Subject: CN=6ac52237-ab88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:31:96:19:16:11:80:78:be:78:d8:84:20:
e4:2c:68:08:fd:1c:15:4e:7f:c0:ed:2b:44:26:e3:
1f:b6:6d:f0:46:48:3e:fc:67:e1:3a:11:a4:e1:9d:
ec:a1:9d:0a:ab:fd:ac:ee:3a:03:dc:66:af:50:cf:
f4:79:20:1d:2a:69:73:a2:0d:fb:64:10:34:d0:78:
9e:73:72:ba:01:90:db:c4:10:c3:6d:4f:db:62:eb:
62:62:da:a2:81:73:51:99:c4:0d:1e:2b:d9:4d:90:
c0:56:94:b3:bd:20:80:08:eb:3a:e7:64:c9:d1:d6:
6d:25:0d:14:09:1b:05:1f:12:24:54:d3:45:54:d7:
e7:00:35:b6:07:55:1b:8a:32:56:bc:50:1c:27:38:
12:f3:79:e0:dc:61:f7:32:cf:14:4b:35:dc:e8:59:
93:63:1a:33:61:c6:40:28:a1:09:4d:14:db:af:81:
c7:93:dc:87:2a:ce:e6:5d:43:19:a7:15:7b:1a:9c:
40:40:ed:4e:e3:cd:1f:d0:29:99:10:26:e7:1d:0a:
f6:6c:50:75:a4:28:21:84:31:4b:1d:70:f1:36:02:
af:a8:9d:d7:bb:51:56:47:78:06:62:f2:78:0b:54:
41:31:63:d4:5b:80:f9:04:d6:ad:14:96:56:47:a0:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FD:DB:21:71:95:FD:06:75:B0:AC:6F:32:12:A5:A3:2D:52:54:C7
X509v3 Authority Key Identifier:
keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8b:b8:b0:e3:17:96:bb:25:85:57:98:c2:c4:7d:9d:ff:3f:
21:ae:5f:c7:35:bf:03:e3:ff:02:41:75:ca:8c:7d:7a:53:53:
65:d7:00:1d:be:6c:d1:6c:e4:4f:8e:20:35:f2:88:64:ca:70:
5c:89:0e:ae:da:a3:f0:87:d1:f8:01:2f:23:c2:4b:37:de:45:
5c:d9:6e:82:78:9e:0b:92:5b:c1:87:3f:9d:8f:c5:47:f1:c6:
fc:01:f1:28:0f:eb:a0:03:32:79:6c:cb:07:cf:40:ce:8d:7f:
1a:0f:2b:e8:e5:07:9e:b7:0b:21:f7:3a:3f:80:2c:e8:c0:13:
c0:ee:af:94:82:88:0b:17:3c:9a:89:60:00:80:aa:c5:64:48:
ee:d9:4a:0e:39:db:1c:4e:b5:62:ff:56:8e:78:ac:fa:9a:fb:
ae:4c:dd:ce:d8:d2:16:4c:77:04:72:3f:98:cb:11:8e:23:31:
56:9f:ad:7e:ca:32:6a:c5:bd:af:c6:62:74:5a:9c:fb:d6:d4:
de:2f:2c:dd:ae:64:46:54:01:da:a7:f2:4f:31:5b:71:c8:a9:
20:64:bb:02:d1:e2:53:48:cd:d3:7d:2b:60:f4:89:fa:7c:d8:
67:e4:58:67:db:34:29:e7:4c:8e:a6:56:fa:24:29:30:c6:1a:
e5:10:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:51:58 2026 by rpki-client