
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
File: 4bzIEhAO1GAiFweJMk8cw6-_aq0.mft (raw, json)
Hash identifier: i3nJvos8aC/TlgfIMHlpuEh0xyEqB9qn5SWSBrfsnX0=
Subject key identifier: 2E:0E:52:29:CE:79:E5:89:63:7D:7C:07:4A:D4:15:25:AE:98:A5:44
Authority key identifier: E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
Certificate issuer: /CN=A916AAFF/serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
Manifest number: 01E1
Signing time: Thu 23 Jul 2026 04:59:27 +0000
Manifest this update: Thu 23 Jul 2026 04:59:26 +0000
Manifest next update: Thu 30 Jul 2026 04:59:26 +0000
Files and hashes: 1: 4bzIEhAO1GAiFweJMk8cw6-_aq0.crl (hash: kDbt+5jH49CQ0Bn1GWe8T5wzmtfK+CtfEH0yyj7+cfY=)
2: DB4BDEF8686911F1BDD5F198A147A888.roa (hash: iqgrkmCxNLB1Vu6irNonHXhWmrxbWNO5kKg/rLYZZq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AAFF, serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Validity
Not Before: Jul 23 04:59:26 2026 GMT
Not After : Jul 30 04:59:26 2026 GMT
Subject: CN=6a619faf-e329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:a6:02:5c:d9:48:69:59:98:04:94:ba:09:
b0:0d:36:fb:46:42:bd:3f:b3:cb:fd:56:87:40:2f:
44:2c:0d:c9:32:24:06:1b:95:12:71:04:aa:13:b6:
55:6e:63:51:bd:7c:40:6e:65:7d:35:b3:26:cd:1a:
aa:bb:61:7c:c6:79:7b:a5:70:6a:55:7f:70:b4:e6:
9d:e7:0c:f6:54:19:f8:20:e6:84:95:3e:a2:9d:0c:
af:c6:52:41:bc:3d:75:7c:06:58:96:00:e9:90:a2:
85:e3:cd:73:98:73:dc:cb:7d:8c:2b:1e:45:59:fc:
7f:f1:ee:6f:47:a4:37:79:6f:d1:0d:f9:f8:76:13:
f1:73:bf:cb:ad:3f:7f:d5:30:ce:ec:2e:04:0d:81:
17:36:60:df:ee:ac:76:63:a6:2b:14:84:66:fe:fe:
41:e1:cd:3a:5a:8e:12:5c:94:c9:22:e0:cc:21:11:
96:8b:b3:e1:e7:11:0a:a1:ed:f1:a1:96:40:06:ae:
ad:4f:69:87:fa:b7:de:d9:ea:52:15:1f:4d:5d:c4:
c0:7b:52:ec:3e:17:3f:90:e6:dc:01:14:2a:b6:29:
c2:b3:82:2d:36:9c:ab:16:35:11:66:aa:cb:ae:54:
fd:8f:81:21:da:99:81:2b:ad:b5:2d:61:16:87:71:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0E:52:29:CE:79:E5:89:63:7D:7C:07:4A:D4:15:25:AE:98:A5:44
X509v3 Authority Key Identifier:
keyid:E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b2:37:33:da:25:b0:f4:d1:a3:8b:2e:02:27:a9:07:76:c8:
fb:73:07:40:ee:4f:6a:17:50:13:1d:17:3e:4a:b9:a5:06:ed:
fd:c5:1e:7e:39:55:93:81:ae:20:3e:ee:57:d0:4c:51:9e:e4:
eb:91:8f:9c:43:da:72:5e:0d:1e:6b:31:7c:66:5a:d7:07:5c:
aa:02:e9:82:e0:ce:4e:66:19:68:81:c9:cc:0d:b6:d6:95:d6:
cd:6a:50:2e:7c:f2:5b:df:d8:bb:ae:ea:34:24:db:99:c7:67:
f5:df:db:7b:be:b0:11:57:c9:f3:cf:9c:53:5e:83:36:25:48:
f7:55:40:cd:75:cb:c9:86:3e:7d:73:fd:19:aa:6e:0e:7c:db:
86:6d:af:91:a5:94:93:4b:21:f9:bb:4c:41:9f:11:43:35:c5:
98:29:c4:fe:fd:d5:ad:b3:2e:03:6b:10:c6:0f:2a:2a:86:c7:
ee:9a:65:85:79:d0:00:50:54:cc:89:a8:88:ea:86:a2:ce:a7:
de:0e:6e:75:50:21:dd:43:76:f6:e6:3a:97:00:e7:45:31:9a:
18:f8:a0:42:b6:10:f6:26:07:8d:d5:a3:d8:4a:40:41:ca:b2:
ac:93:3f:17:8f:52:6e:d3:0b:76:b5:cd:40:6d:b5:bd:ff:8d:
35:73:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:34 2026 by rpki-client