
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
File: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json)
Hash identifier: NL3VP2QEMVzrxEHYgEJUHgmEWp+QS+m0Ls0UC8FJd6g=
Subject key identifier: 71:0E:80:35:43:75:2A:11:5C:51:81:7D:7F:AF:24:7B:08:05:29:BB
Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
Certificate issuer: /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Certificate serial: 0755
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
Manifest number: 074F
Signing time: Thu 24 Sep 2026 14:46:46 +0000
Manifest this update: Thu 24 Sep 2026 14:46:45 +0000
Manifest next update: Thu 01 Oct 2026 14:46:45 +0000
Files and hashes: 1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: gfvTLFzQk8RWBfOFbfNTOrkgg8NGpZ8y4FkY5374QMI=)
2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: nifz0lZY0B16BBA+MbGH96xeil4xf4rsxF/RU1Jcvug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl
rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877 (0x755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Validity
Not Before: Sep 24 14:46:45 2026 GMT
Not After : Oct 1 14:46:45 2026 GMT
Subject: CN=6ab537d5-a877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:bb:5e:0b:e1:e7:e3:ae:b4:f5:7a:a7:09:
7c:41:0b:ec:47:45:77:cf:4d:94:99:5d:8f:c2:fa:
81:0f:41:95:dc:4b:78:11:04:96:7c:86:20:dd:31:
95:32:fc:7d:35:7c:56:f5:da:37:53:d3:05:38:50:
ba:24:d6:7e:84:44:3a:e8:dc:93:5d:32:f1:f2:00:
2d:67:d6:6c:bd:a6:21:d3:5d:f8:68:89:9e:be:da:
ed:14:9e:77:d8:61:ec:a1:7e:88:5f:29:e4:55:66:
f8:68:ef:11:f1:d5:05:ac:05:85:35:66:ce:b4:3a:
f6:06:02:dd:fe:64:f5:98:f1:6e:25:64:2b:ec:4b:
1d:76:8b:56:9e:da:86:32:05:65:1f:fe:13:42:de:
3d:cd:fc:4f:8b:81:83:95:10:54:5f:23:1c:c7:07:
d7:87:fd:80:ba:b5:d6:71:b6:9e:18:9f:e0:2a:7c:
11:61:f5:15:5a:fc:5d:70:70:05:74:ba:3a:53:2d:
75:e3:d9:4d:71:72:f1:0a:2c:d7:80:2c:d4:dc:5a:
c5:13:eb:f5:0d:66:13:c0:d2:e4:80:7c:fc:26:22:
db:9a:c5:ae:76:e1:2a:94:81:25:34:25:07:71:9c:
5a:d5:56:96:a6:ed:f8:13:c7:0f:98:06:42:bd:a3:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0E:80:35:43:75:2A:11:5C:51:81:7D:7F:AF:24:7B:08:05:29:BB
X509v3 Authority Key Identifier:
keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:98:3a:de:4f:65:74:26:8f:d6:64:61:ee:61:93:b3:75:77:
e6:12:a5:b9:fa:98:15:bd:15:15:53:e1:1b:2e:02:bd:60:60:
f2:fc:32:88:05:58:65:13:7c:39:6c:07:6e:d1:7e:f4:38:7b:
d7:df:cf:66:38:71:37:a8:80:db:e1:c4:dc:7e:b6:b2:7e:2b:
21:72:88:0b:bf:bc:82:fe:fc:7c:96:0d:be:a3:72:0e:80:7f:
25:bf:15:df:26:f5:74:ca:d3:f3:78:ae:86:1a:c4:bb:a3:f6:
0c:79:1d:d8:81:11:42:e7:86:36:bd:40:21:82:54:2e:cf:8c:
b7:e8:3e:15:2f:e0:53:d4:d3:a0:ee:b3:e7:af:d3:a3:a6:35:
bc:0f:cc:d9:6f:ff:87:d4:20:dd:b3:ff:d3:82:9f:0c:07:1c:
24:bd:32:89:0f:13:3f:d4:c6:49:9a:a3:fd:52:bd:94:94:0f:
d4:bf:49:22:36:7b:75:24:78:2f:2b:66:b9:ae:b6:10:d7:64:
75:79:6e:c9:c7:73:bc:69:52:f0:4a:d7:6b:81:dc:d3:26:b5:
c8:41:02:4f:da:81:f3:83:d5:ff:a1:b3:64:6d:52:f5:87:c8:
34:84:38:e0:62:39:1d:70:e7:5e:cb:5f:33:78:e2:25:23:03:
d2:4a:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:15:13 2026 by rpki-client