
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
File: B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft (raw, json)
Hash identifier: zAqTw+W+xQpphMmcXmEOIN5LuXR6a2jvqU5vQgFAFdc=
Subject key identifier: EC:E5:88:49:6C:B2:BB:0E:55:0B:03:19:AA:9B:5E:50:B9:09:53:98
Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B
Certificate issuer: /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
Manifest number: 0194
Signing time: Fri 25 Sep 2026 04:27:32 +0000
Manifest this update: Fri 25 Sep 2026 04:27:32 +0000
Manifest next update: Fri 02 Oct 2026 04:27:32 +0000
Files and hashes: 1: B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl (hash: GNeHLgdTWxsjb1kC6TWZcAUrluLNwh4PnYNV6d9YMTg=)
2: 52AE08D4ABCF11F083B9610FC4F9AE02.roa (hash: KHjpOX86nJ+JvEal4Th9ElzR3Sk1i9bEDW0jA6Nf2qo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl
rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C5E0, serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
Validity
Not Before: Sep 25 04:27:32 2026 GMT
Not After : Oct 2 04:27:32 2026 GMT
Subject: CN=6ab5f834-de65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:39:90:ea:1f:5c:a0:68:4f:e7:e2:77:e9:
4f:b8:c0:28:16:e1:2b:5f:c7:14:f2:8c:46:0a:5b:
f3:d2:3d:02:40:d9:51:d3:37:8d:f9:c3:cb:c0:09:
73:49:55:18:29:3b:f7:f1:61:41:dc:2f:c1:ae:08:
81:4a:43:fb:78:3c:ab:00:1b:85:bc:b7:4f:a4:fb:
c4:c5:e4:9e:91:61:57:68:52:8c:85:82:ea:4a:fd:
8b:2c:57:ac:57:a6:91:24:64:45:1d:1a:3e:ea:aa:
e1:cc:fc:c3:f2:a1:00:97:64:ab:48:ea:e8:bf:e3:
9d:e9:62:ec:e6:a2:e9:df:e6:77:ad:71:33:d4:49:
2b:d2:52:75:0f:38:c7:19:40:38:61:ff:d7:2e:d3:
d8:b4:26:3a:f1:6f:94:56:7e:8f:48:02:1d:95:86:
9d:c3:b9:29:be:72:0b:eb:62:66:b4:ff:25:cd:59:
af:f7:5d:0c:86:d6:a2:18:e7:2b:a1:0a:eb:d7:50:
dc:a8:2b:13:60:16:df:d6:5e:32:df:56:54:66:2d:
d4:ae:da:c4:51:cf:cd:93:76:e0:38:52:6e:1f:67:
29:aa:ee:6f:14:f9:f3:79:ec:5b:0b:63:52:42:b8:
6d:db:bd:61:f4:65:54:76:57:19:a8:11:d6:af:dd:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E5:88:49:6C:B2:BB:0E:55:0B:03:19:AA:9B:5E:50:B9:09:53:98
X509v3 Authority Key Identifier:
keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:1e:cf:62:21:ed:35:06:97:ab:30:f0:e6:f6:34:e4:ab:19:
b3:65:f6:5e:2a:a3:4f:57:66:86:27:bb:53:04:97:1f:c6:10:
8d:01:fe:f6:17:d6:e2:47:b3:6f:7f:8d:6a:1f:e7:d4:02:0a:
de:31:2a:ff:8d:f1:7c:0e:d0:9d:05:5c:14:e0:66:62:6b:b6:
1c:74:05:c0:62:4a:2b:66:04:8b:c0:f2:06:be:bf:c9:86:73:
b7:b4:dd:70:6b:fa:74:2b:49:58:ce:32:52:b4:64:6f:1a:d4:
ff:9d:60:ee:25:b0:bb:a6:a5:23:50:f8:c8:e2:6b:64:18:5f:
4d:8c:65:19:2b:40:94:9e:3f:13:2f:b0:0d:b9:db:b3:a8:23:
ec:c4:71:dd:da:e2:b6:16:10:90:4a:ab:79:eb:92:b3:1b:26:
80:60:e6:db:a2:be:22:99:33:a1:14:05:3f:0c:0f:2f:a2:ed:
ea:8d:af:ee:8f:a3:69:fc:91:07:ec:24:c9:a1:63:d1:b4:6e:
4e:42:ad:86:2f:99:d3:0b:29:7e:11:b3:81:c0:22:7c:41:84:
6b:dd:52:80:90:f8:23:95:83:c0:84:13:19:ad:6e:2c:b5:36:
eb:af:4b:73:61:d6:1d:d5:97:38:c7:7c:a5:44:e6:ee:e8:53:
b4:89:32:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:07:19 2026 by rpki-client