
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier: 2MyO14LsRKgxFMjjSY1d1YjhOElbsIBW1Y+oHzr2w1A=
Subject key identifier: F3:B0:1A:02:4B:66:EB:3B:E0:11:4D:E9:9B:B4:15:0E:CF:4F:EC:97
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number: 0185
Signing time: Fri 25 Sep 2026 04:45:22 +0000
Manifest this update: Fri 25 Sep 2026 04:45:21 +0000
Manifest next update: Fri 02 Oct 2026 04:45:21 +0000
Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: o3LoxEZz4DT6Ij1XEQNYQMNZ+soWFIHC0qADSoTi69I=)
2: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: zR70IjBkFq8imIW3hGFMMhMRDbM40qlqunUzoF9Z2S8=)
3: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: 1lIzFQEALQy8v+QadRa7FoXrMcnKcVBzKsOnfc22ih8=)
4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: qYPMtqaT2dl4M1S1nYlOq36a/DlHhwOSpr/FUWfOeEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Validity
Not Before: Sep 25 04:45:21 2026 GMT
Not After : Oct 2 04:45:21 2026 GMT
Subject: CN=6ab5fc61-ddcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:e6:ca:32:57:13:ba:00:6f:90:ee:ac:f7:
aa:ee:03:8f:b6:5a:51:5b:5e:f1:17:54:94:f3:c1:
cd:25:73:0e:c4:82:a7:55:bd:14:3e:f8:9b:5e:4d:
17:3d:83:56:e9:2c:32:7b:96:3e:46:4d:5f:d3:92:
3c:02:bf:c9:35:4d:bb:8d:e9:a4:ad:a6:5e:90:8c:
41:14:51:9e:47:08:7d:a8:de:28:cc:3d:86:57:2b:
c6:8a:33:2f:9d:32:61:17:57:44:19:2f:e4:90:6c:
70:07:76:cd:b2:36:b8:ae:56:05:12:92:8f:31:da:
6b:d3:01:78:73:f2:34:28:97:9a:16:fb:d6:0d:98:
cb:72:79:69:6c:72:34:80:dc:ac:84:50:1e:f4:2d:
b9:88:87:1b:c3:3b:81:ee:fa:2b:e4:9e:a1:5b:c8:
e4:37:42:47:09:6d:cd:69:75:71:4b:de:8d:0e:e6:
da:dc:18:5a:6c:c2:2d:94:97:19:85:16:df:93:ac:
1b:10:69:32:74:df:38:c1:c9:d8:1a:3d:9b:9f:28:
f9:61:68:ec:d1:56:1a:b7:f3:47:a9:01:9a:3b:2f:
89:3c:36:a7:f2:3f:4d:76:fd:c6:e8:f6:46:e5:a3:
14:20:08:0c:68:8c:eb:fd:38:81:31:49:df:9b:ca:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:1A:02:4B:66:EB:3B:E0:11:4D:E9:9B:B4:15:0E:CF:4F:EC:97
X509v3 Authority Key Identifier:
keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ca:6e:aa:3f:a4:50:ac:49:1d:79:36:e2:42:56:94:8e:92:
15:1e:b5:92:28:59:22:96:f7:9c:01:cc:a0:9b:83:72:1e:56:
74:4e:79:01:0e:2b:08:57:2b:bd:80:8f:da:67:ba:92:b3:58:
64:aa:72:28:66:33:08:43:8b:18:a8:c0:51:77:4d:32:6e:94:
cd:b4:e5:f2:c4:fe:9b:d1:7b:8e:15:44:8b:10:0b:5e:6d:e4:
47:bb:4c:ea:e7:37:a2:1c:65:f5:08:07:cc:27:c2:33:cc:ab:
bc:e3:a1:5b:8a:da:3b:03:b9:3f:09:33:c8:3e:ff:36:71:ee:
88:c9:76:4c:de:e1:bc:e0:fe:53:16:e7:2f:ce:34:40:8f:56:
7f:7c:9a:ff:0b:a9:4d:64:d9:de:81:84:48:86:c7:13:21:bd:
17:e6:fa:61:d9:92:22:a7:26:85:55:bb:71:05:a7:bc:13:3e:
38:37:a7:15:88:5f:db:1e:d9:90:dd:81:22:33:03:c3:92:8f:
5a:41:99:6d:a3:28:59:e0:23:8b:02:68:7d:bb:13:a1:58:b7:
16:d9:22:9b:06:08:b9:ee:49:ab:dc:ac:15:ad:1f:9a:c0:ac:
69:ff:a5:a4:e7:3e:18:18:ae:77:56:63:d1:ae:8a:13:0f:b4:
22:11:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:46:57 2026 by rpki-client