
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
File: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json)
Hash identifier: 7aNgrs+jcUWGXpDZBjPNohGuA0d0aBx0rG/raC2/xlM=
Subject key identifier: A4:85:99:68:C7:B4:90:E8:CF:0F:95:57:0E:62:1B:35:EE:2D:64:3D
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Certificate issuer: /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
Manifest number: FE
Signing time: Mon 11 May 2026 06:17:19 +0000
Manifest this update: Mon 11 May 2026 06:17:19 +0000
Manifest next update: Mon 18 May 2026 06:17:19 +0000
Files and hashes: 1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: xmo6m943+/HgbmPoEtiDtQOD0exhfh4wqktgyD1Ox04=)
2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: x4m5M8TdUipL7o6slEBASzNPQRc6mguoljJR97i4R5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
Validity
Not Before: May 11 06:17:19 2026 GMT
Not After : May 18 06:17:19 2026 GMT
Subject: CN=6a01746f-529d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:8f:e2:08:fe:99:15:eb:79:1a:d4:09:71:
46:1c:34:c0:8a:a4:83:95:3e:d3:c9:03:e6:34:b1:
20:94:df:6c:e6:92:a2:b5:35:8d:b8:b3:c6:f5:11:
58:c5:6c:e5:9e:8b:3b:6e:07:86:ce:49:9f:33:c0:
af:14:bf:74:ea:63:21:ae:f3:d2:36:6b:24:05:73:
b0:35:95:4b:dc:9a:23:88:07:1c:07:be:ef:f0:0d:
14:10:9c:3d:7a:2b:0e:f9:a9:2a:02:c4:77:ae:74:
fa:9d:ab:4c:15:b0:73:b8:a5:d6:cb:2f:26:76:c2:
5e:24:6a:cf:a6:ab:38:4f:a6:29:8a:ed:0a:a4:0b:
68:4b:56:86:db:e9:8c:1d:da:96:f8:8b:11:f8:80:
57:07:dc:08:77:d6:fc:61:b8:92:41:98:ea:27:f7:
e2:15:fa:12:bf:3a:5e:cb:b1:3a:39:08:9b:66:7a:
6a:97:51:1c:e2:b3:b8:fc:db:4e:a6:a9:6a:06:05:
9e:f7:50:a0:c2:56:2e:05:2d:fa:cd:08:36:d8:2b:
7e:73:c8:1b:aa:9d:f2:a1:db:7c:68:14:7f:36:b6:
5c:c6:b4:3e:4e:79:a3:26:fd:1e:7a:12:46:7a:92:
dd:10:5d:75:f3:97:2c:e3:93:24:3b:83:25:22:3b:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:99:68:C7:B4:90:E8:CF:0F:95:57:0E:62:1B:35:EE:2D:64:3D
X509v3 Authority Key Identifier:
keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0f:07:2d:32:90:00:b0:95:9b:eb:b3:72:fc:7a:a1:72:33:
0c:33:cc:01:f3:2e:bf:5d:7e:f2:1a:a5:6d:40:7b:b7:9c:f8:
b6:fd:69:76:61:d0:49:29:f5:98:61:7a:38:6e:c3:6c:af:ab:
5e:9f:c6:5c:e6:f9:1b:47:84:5c:3a:2a:87:bc:bd:d1:47:cd:
b5:d7:86:dd:57:90:f8:d8:7f:7b:56:80:de:d3:84:ae:d2:d3:
8a:87:b0:25:58:2b:5d:db:c3:34:e8:54:7f:3d:9d:a3:14:7b:
aa:9e:d2:bb:d1:00:64:8a:df:72:93:1d:a9:6e:02:02:ed:1c:
81:82:8c:21:ba:10:ed:a3:ad:79:52:bb:21:2d:27:bd:d4:59:
70:cb:15:41:36:4c:6a:f3:f1:f8:02:25:56:33:7e:ee:94:6f:
c2:e3:49:a5:3a:8d:98:12:28:72:75:31:71:75:c9:a4:90:49:
49:d2:49:44:7e:3b:7a:cb:3b:73:54:bc:4f:4b:67:e6:21:8e:
b6:ef:35:18:a4:2f:0b:4d:c6:9f:f9:83:7a:b0:a7:f8:cc:be:
ef:48:1b:7e:34:2f:49:f2:a6:16:29:91:50:99:67:29:c7:e7:
71:6e:32:09:f0:f9:97:5f:1f:bb:0a:a4:16:83:49:07:5f:10:
4d:85:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:41:27 2026 by rpki-client