
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
File: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json)
Hash identifier: rrhrke4hVI80PwbOCUbirISp1rpbRbRIfJc6IZeIAI4=
Subject key identifier: CB:A1:C0:56:2A:A1:D4:EC:4D:DE:09:A0:24:D1:3B:5C:12:75:40:B6
Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
Certificate issuer: /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Certificate serial: 0710
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
Manifest number: 070A
Signing time: Tue 12 May 2026 14:48:33 +0000
Manifest this update: Tue 12 May 2026 14:48:33 +0000
Manifest next update: Tue 19 May 2026 14:48:33 +0000
Files and hashes: 1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: mq37u+kmKA+855aeZOYoSSRHmMXyHjprWZnn5/lCcUg=)
2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: nifz0lZY0B16BBA+MbGH96xeil4xf4rsxF/RU1Jcvug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl
rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Validity
Not Before: May 12 14:48:33 2026 GMT
Not After : May 19 14:48:33 2026 GMT
Subject: CN=6a033dc1-35b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:e8:2b:25:98:ee:1a:ff:3c:17:da:ce:e3:
b3:a8:03:c5:64:2c:52:a1:c9:bd:e6:2d:ba:ac:41:
55:80:eb:e6:2d:05:c6:19:89:65:c4:bc:95:a9:5a:
d3:f8:ce:14:a2:28:af:1f:5c:3d:a5:73:14:1a:ee:
c7:47:d8:5d:a6:d5:59:48:0a:94:57:ba:5d:b5:20:
3c:b1:0a:c1:d4:60:20:88:0e:71:96:4a:c9:5e:e5:
55:ca:cd:a3:10:09:99:f6:c2:e8:95:f6:0e:f7:6a:
a3:85:f2:57:85:eb:7d:69:c2:9b:79:43:12:c9:0c:
08:ad:d2:c7:86:67:ab:1c:8e:67:70:50:a6:a8:7b:
b1:1e:41:52:4f:6e:94:9a:7f:09:fe:4d:1e:ae:af:
51:11:f2:de:a6:09:8a:64:b0:88:c8:90:e8:e9:ce:
19:a1:2b:bf:57:09:9c:7f:34:cb:5b:09:45:be:31:
d2:94:95:4b:36:d4:bd:1a:2f:4f:cb:fe:26:c3:6f:
c3:06:5f:75:b7:8a:af:0a:9d:14:6b:ab:cc:f2:39:
32:8f:44:de:6a:df:ae:f8:13:74:5d:4b:ca:30:d1:
1d:c8:a7:23:a4:38:13:a1:14:fc:45:fb:03:8c:10:
7f:a6:17:ef:03:a0:54:f9:f4:fc:15:33:00:a8:78:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:C0:56:2A:A1:D4:EC:4D:DE:09:A0:24:D1:3B:5C:12:75:40:B6
X509v3 Authority Key Identifier:
keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:4e:15:c6:1d:5c:1c:18:a5:45:c4:57:52:d9:1e:b2:e8:6a:
97:75:5d:c9:e5:b8:59:47:d5:16:67:f7:a9:d3:63:0e:b1:f0:
fc:7b:29:b0:9e:d1:88:a9:14:36:a4:17:40:86:e7:81:ba:2a:
4e:87:b3:9e:13:0e:a7:59:7f:d0:da:b7:cc:1b:bb:c3:72:3b:
90:89:c1:50:9b:8e:7f:f8:d6:f7:0c:5a:99:64:eb:10:57:0b:
cf:60:1e:29:21:d4:37:7d:65:6d:61:cf:da:b6:fb:95:74:d2:
3f:dd:8d:b7:33:eb:53:57:ea:54:a3:aa:44:2b:70:7f:9f:cd:
d6:c0:c5:24:34:86:38:22:23:18:ed:ce:e6:a3:7c:e0:59:aa:
ad:76:b7:ab:fd:7a:73:ab:e8:14:14:0d:91:ce:5a:58:07:0b:
e3:a7:a9:8c:bc:6a:3b:0e:67:7f:fe:c8:fe:aa:33:c9:a7:32:
75:79:02:c5:3f:4f:3e:91:d8:61:60:dc:53:68:66:c3:35:1d:
73:90:5b:35:bb:13:f7:4e:97:85:9a:dd:25:e2:ff:5a:ce:f2:
61:9a:de:ab:83:4c:fd:c6:e4:f6:e7:c7:f0:3e:8e:51:50:90:
ce:50:81:99:6f:b5:3e:e6:8b:89:6d:d4:fd:f5:02:9d:6f:4d:
29:e7:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:17 2026 by rpki-client