
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
File: 4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json)
Hash identifier: wqbfVlHwCWw/wsqK/M5qaqv4STJDcw0A/9/um8/OPkY=
Subject key identifier: D0:67:0F:98:1F:8E:A0:DF:79:5F:DC:AB:D4:0C:1F:83:2B:2C:BD:1E
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial: 18E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
Manifest number: 18A1
Signing time: Fri 24 Jul 2026 16:38:01 +0000
Manifest this update: Fri 24 Jul 2026 16:38:01 +0000
Manifest next update: Fri 31 Jul 2026 16:38:01 +0000
Files and hashes: 1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: pt98ZSdeMQlUrqie+rqAuWzdGTM0GHnm/QyiUnFczjQ=)
2: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: 7ZAEA0r9lzg48+UEX+NDAtHxRbz47d+Yj5cRgz6OmvE=)
3: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: dgLQAd17tzBsK66kQ0H0dwAp53SX6GdmC4ibG9feFVM=)
4: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: X9rsotZF7CeUjy+uRHBz/MOZBNYjTpkQ13IOleGdKEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 16:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6372 (0x18e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Validity
Not Before: Jul 24 16:38:01 2026 GMT
Not After : Jul 31 16:38:01 2026 GMT
Subject: CN=6a6394e9-7747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:d2:77:f8:66:a0:37:de:d0:62:ac:b1:ee:
17:e0:b9:dc:7b:7b:41:fc:54:12:22:c7:ef:dc:e2:
40:8a:b5:34:96:4c:02:ca:fd:62:53:1b:ab:02:20:
6d:cd:e2:77:c8:62:c9:a3:b0:98:17:9d:e6:f3:6b:
0f:d6:b4:31:1b:3b:2a:be:d1:d8:41:61:d6:06:f9:
eb:c8:5a:1c:65:22:2a:68:3d:71:5b:4b:5d:af:55:
da:d2:ef:44:20:dd:a0:d4:f5:5c:33:01:50:78:25:
0f:5c:01:cd:7f:e5:3a:10:82:ed:b1:b1:dd:42:8d:
1e:c0:26:5a:77:4c:f3:4e:d0:3a:bc:0a:57:22:8e:
78:56:31:23:47:27:b3:7f:88:c4:b1:9c:66:90:98:
22:1a:77:cd:28:3a:94:af:0d:d2:66:d3:85:a8:cc:
e6:ec:8f:f8:c1:c4:05:84:c8:17:17:87:cb:b2:0a:
c0:43:5a:6d:32:b4:76:62:85:b9:a0:fb:08:88:c0:
2b:1e:65:da:b6:57:36:52:e8:1c:90:e4:51:6e:bb:
c0:11:6d:03:08:a4:85:2d:82:27:4b:8e:89:a9:35:
f6:66:b5:0b:b8:ee:da:a5:cf:2b:d4:61:ba:74:26:
86:00:eb:97:f8:d2:22:31:c0:e7:9e:62:12:1d:9a:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:67:0F:98:1F:8E:A0:DF:79:5F:DC:AB:D4:0C:1F:83:2B:2C:BD:1E
X509v3 Authority Key Identifier:
keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:5f:03:33:2b:d5:0b:39:a2:be:f6:e8:fc:dd:46:18:de:a3:
21:5f:84:38:0b:99:76:d5:db:15:3d:b8:9d:20:92:4a:88:2e:
f4:67:d8:2a:ce:a9:67:bb:90:03:58:60:2f:5b:6f:6d:8d:8a:
5d:61:8f:ce:f3:8a:b4:a8:e2:a1:dd:5d:75:d9:7c:39:94:43:
2d:58:cf:56:ac:c3:90:ea:80:2b:00:ee:ff:46:71:e4:e8:df:
e4:2a:08:fa:3e:54:cf:97:28:03:56:3e:87:44:68:ae:25:1d:
5f:45:ed:61:91:8a:0f:f9:a4:d2:e8:a6:3c:42:a2:ab:c5:23:
09:84:a1:b5:49:c4:74:d5:c0:a4:35:3b:56:0c:65:83:a7:ef:
82:63:4c:be:2c:20:29:42:b6:db:c4:0b:1d:9c:50:f6:57:96:
ef:ac:ed:d7:99:09:02:ca:3b:4f:09:d6:68:6e:5e:8b:7f:c5:
68:1c:7c:66:04:d8:7c:97:88:9d:93:78:ca:13:a9:ec:2a:1a:
14:9b:cc:cc:d8:64:ce:76:a4:4f:83:da:4d:cf:de:66:93:47:
78:d5:7a:2a:6e:84:c8:d3:67:16:fc:3f:a0:b1:c0:50:b6:85:
cd:62:0e:94:52:14:69:32:9a:5b:9f:e6:41:c0:fc:e5:9a:35:
46:e1:ea:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:08:51 2026 by rpki-client