
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier: vJioOqJ49pTCzeSAfVf8n2XP5cZs1jUvhMSm1WifeSs=
Subject key identifier: 78:EE:81:E6:63:F6:E4:82:A1:C2:24:8A:D1:AA:3E:B8:6D:8E:09:0E
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial: 0430
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number: 0429
Signing time: Wed 13 May 2026 00:27:19 +0000
Manifest this update: Wed 13 May 2026 00:27:19 +0000
Manifest next update: Wed 20 May 2026 00:27:19 +0000
Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: rycMMhJPc2hUq5kWIAZk+qAIZy+jPEmRBt/FiJueOqk=)
2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: Orzj86vjC93cWR06+QsMgW2wBDc5SO3ZdbwzBN1Cn0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Validity
Not Before: May 13 00:27:19 2026 GMT
Not After : May 20 00:27:19 2026 GMT
Subject: CN=6a03c567-64ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:6b:d1:da:81:60:c2:73:c1:b4:23:8a:ee:
30:c5:5f:74:7b:47:c0:eb:97:6d:9c:e9:56:27:2b:
37:6d:60:61:7e:b3:ea:7e:97:d4:55:1f:24:d7:35:
64:e2:08:75:e4:c5:4a:92:79:76:85:de:29:22:2e:
f7:bc:eb:98:38:65:c2:47:fd:a7:54:1d:3f:ea:86:
22:a1:80:ed:1d:5f:18:ea:36:5a:d4:5e:99:76:0b:
3d:21:bb:64:86:a8:34:05:52:76:91:4e:af:c6:60:
87:1a:bf:d8:53:ab:e1:15:aa:d2:f4:17:dd:2a:d5:
8d:79:ec:fe:ea:2d:79:b9:38:01:8e:a7:01:94:f8:
3f:84:40:f8:55:cb:c9:db:03:50:1d:a1:fa:40:cf:
1d:1c:30:0a:44:c3:ef:22:77:3e:dd:38:20:de:14:
d1:1f:bf:25:24:24:d3:55:58:43:e8:04:c7:33:b7:
ff:82:2b:d6:02:1f:41:89:94:19:11:98:4d:4e:73:
99:ef:6f:04:f5:06:8c:ec:88:5d:e4:f7:43:6d:1e:
3d:67:1b:f8:66:8e:4f:5a:04:32:57:c5:a5:db:3a:
cc:b6:da:52:fc:5c:31:32:ce:97:32:62:38:59:0c:
c8:df:44:b1:ba:84:b8:98:39:50:a5:63:57:f0:b6:
a1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EE:81:E6:63:F6:E4:82:A1:C2:24:8A:D1:AA:3E:B8:6D:8E:09:0E
X509v3 Authority Key Identifier:
keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:19:a0:95:81:03:da:9f:81:44:52:e0:4d:41:f5:f2:ca:e8:
fa:c3:18:11:c0:63:68:e4:83:55:85:54:fe:df:d5:f5:de:34:
1f:b5:3c:1f:e7:fb:c2:5b:c9:22:3d:38:0f:fb:15:15:f0:bd:
65:da:ef:78:46:87:bc:e8:07:78:73:c4:a7:4b:1d:09:e8:24:
31:a8:3e:b2:3e:0f:87:3b:98:f3:76:a6:a4:30:4f:a0:0f:11:
29:67:d2:fe:29:8c:5a:31:2d:c1:e3:c1:08:4e:b5:c5:d7:b4:
f2:87:92:95:ad:81:a8:ba:1c:af:6d:b7:5c:9d:4a:5b:95:15:
e7:10:fc:68:9a:fe:b5:eb:6a:d8:00:53:5c:c9:1a:95:a9:9d:
c6:05:93:60:f6:d0:7e:aa:be:dc:6c:23:83:37:50:41:f8:d5:
92:b8:48:00:78:9f:ba:b8:2e:31:4f:97:11:09:0b:a1:0e:bf:
23:e2:cf:e3:54:b7:86:fa:90:0d:71:f5:75:55:31:f5:03:7f:
33:7b:c8:d3:67:a3:eb:0c:2e:b7:e4:99:67:0c:2b:d5:5f:9b:
53:a6:34:13:30:c3:f8:a0:8a:a5:ae:e8:e3:ee:e3:f5:f6:32:
6a:f6:25:74:47:ef:a3:1f:14:cc:2d:f8:16:f1:18:10:bf:80:
23:cf:a9:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG
NTczOEY5MEEwHhcNMjYwNTEzMDAyNzE5WhcNMjYwNTIwMDAyNzE5WjAYMRYwFAYD
VQQDEw02YTAzYzU2Ny02NGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzn9r0dqBYMJzwbQjiu4wxV90e0fA65dtnOlWJys3bWBhfrPqfpfUVR8k1zVk
4gh15MVKknl2hd4pIi73vOuYOGXCR/2nVB0/6oYioYDtHV8Y6jZa1F6Zdgs9Ibtk
hqg0BVJ2kU6vxmCHGr/YU6vhFarS9BfdKtWNeez+6i15uTgBjqcBlPg/hED4VcvJ
2wNQHaH6QM8dHDAKRMPvInc+3Tgg3hTRH78lJCTTVVhD6ATHM7f/givWAh9BiZQZ
EZhNTnOZ728E9QaM7Ihd5PdDbR49Zxv4Zo5PWgQyV8Wl2zrMttpS/FwxMs6XMmI4
WQzI30SxuoS4mDlQpWNX8LahKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHjugeZj
9uSCocIkitGqPrhtjgkOMB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC
MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO
VmwwejhDclRodWIxYzQtUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIBmglYED2p+BRFLgTUH18sro+sMYEcBjaOSDVYVU/t/V9d40H7U8H+f7wlvJ
Ij04D/sVFfC9ZdrveEaHvOgHeHPEp0sdCegkMag+sj4PhzuY83ampDBPoA8RKWfS
/imMWjEtwePBCE61xde08oeSla2BqLocr223XJ1KW5UV5xD8aJr+tetq2ABTXMka
lamdxgWTYPbQfqq+3GwjgzdQQfjVkrhIAHifurguMU+XEQkLoQ6/I+LP41S3hvqQ
DXH1dVUx9QN/M3vI02ej6wwut+SZZwwr1V+bU6Y0EzDD+KCKpa7o4+7j9fYyavYl
dEfvox8UzC34FvEYEL+AI8+pVg==
-----END CERTIFICATE-----
Generated at Wed May 13 09:19:52 2026 by rpki-client