
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File: 4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier: 1TjCf92GFsWSz+BV4gg3MaMVdXXMiFuAoDa71XlWiT0=
Subject key identifier: 8E:B4:87:C5:46:91:42:4D:C4:95:7D:99:AD:C9:2D:DB:27:72:39:03
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer: /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial: 07BE
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number: 0797
Signing time: Sat 14 Nov 2026 16:42:52 +0000
Manifest this update: Sat 14 Nov 2026 16:42:51 +0000
Manifest next update: Sat 21 Nov 2026 16:42:51 +0000
Files and hashes: 1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: LSW9wrEavIc8o79wcETvFSTqGVX4QoRsIE/uSNIvnfc=)
2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: cm+t/PLMMD/KFNJP5e1RTkGRkxC1xV6B78Ll218uDIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 16:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1982 (0x7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Validity
Not Before: Nov 14 16:42:51 2026 GMT
Not After : Nov 21 16:42:51 2026 GMT
Subject: CN=6af88f8c-58be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:d1:ff:c7:e7:4e:65:67:ad:22:2c:91:eb:
42:eb:83:6a:ce:6e:7b:eb:b0:eb:a6:10:44:73:95:
e6:1a:5d:7e:86:21:14:90:b5:25:1c:c0:41:0f:9a:
d3:2d:c0:f4:18:1d:de:1f:bd:62:0a:92:6e:b7:89:
7a:89:7e:36:d4:42:8d:7d:e1:12:61:d2:24:08:d0:
ce:f3:67:f5:f5:0d:11:5e:5e:9f:b9:f7:4a:8b:7a:
d0:a7:e5:69:93:bd:46:91:c2:e2:19:e2:9a:fd:4b:
06:93:20:ff:b4:89:6a:24:bb:98:78:af:e2:03:b2:
f5:59:92:9a:51:16:7d:34:ee:1c:eb:ff:21:cd:0c:
4a:5a:39:18:58:2b:de:41:76:49:66:96:8a:37:94:
9e:31:61:4b:d1:14:3e:38:38:a8:94:da:1d:ff:f1:
81:2f:ae:ec:c2:c1:4c:c3:6e:aa:ea:4e:e7:40:57:
37:85:2f:ff:9f:6c:df:f6:0f:e7:ea:b3:05:4d:cc:
f4:72:e4:66:28:13:f8:1b:5e:f7:ab:23:69:96:db:
fb:e2:a8:70:60:87:fe:36:b7:7c:3f:8d:68:83:b4:
0c:f6:b1:7f:02:c7:f3:5e:fc:19:e5:cc:db:b8:16:
56:79:2e:a0:2f:0a:ce:1c:60:f6:b0:af:d8:f6:b3:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B4:87:C5:46:91:42:4D:C4:95:7D:99:AD:C9:2D:DB:27:72:39:03
X509v3 Authority Key Identifier:
keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:38:f0:98:0c:bc:54:02:bf:f4:bb:54:a1:d0:29:5d:87:ff:
fb:97:80:48:13:b7:04:33:5a:8d:2b:4d:0c:33:34:5e:dd:05:
b1:d1:bb:61:8f:99:df:97:69:78:e8:c3:0c:74:3a:56:59:04:
7a:b1:df:35:83:69:9b:91:20:d5:3c:1b:93:f6:46:f4:dd:99:
a1:10:22:6c:56:3a:eb:da:8e:b8:98:94:3e:16:c0:51:b4:ae:
29:6d:f4:4d:be:34:09:6b:d8:77:8b:39:51:1f:db:1a:da:c8:
d9:49:30:45:d2:64:92:9d:02:3a:2d:1f:20:ef:5e:b5:47:ac:
eb:d5:d4:df:5d:5c:17:40:c6:87:e4:5e:ca:47:25:8c:e2:6e:
4b:e9:55:1b:41:20:e5:9b:f5:1a:33:e3:9a:5d:c7:24:dc:9a:
d4:9a:56:3d:5f:b4:55:13:32:be:b0:71:f6:43:ab:ff:e0:30:
f8:dd:27:94:59:dd:67:24:2e:71:b8:55:df:2f:85:ce:38:2c:
24:55:12:a6:0e:16:62:51:72:93:07:b2:aa:f9:99:3f:9d:e7:
a5:17:f9:f6:6d:cd:d2:64:86:35:bb:6b:f7:06:2a:1b:a1:6f:
b4:e0:bf:c8:1c:5f:9d:28:c7:f5:04:5a:5f:05:62:bd:f3:5a:
8f:e5:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:56:14 2026 by rpki-client