
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
File: 4goGuYVhP9oaaujHZ7pLjX9yQFs.mft (raw, json)
Hash identifier: DAFn5KVNpdsx3wH5fMypRbDEo6D4UXvsTvJlqvHFBaI=
Subject key identifier: A6:D5:3E:FD:9D:79:84:11:2F:75:39:C2:7C:AC:F3:5B:97:4E:C6:48
Authority key identifier: E2:0A:06:B9:85:61:3F:DA:1A:6A:E8:C7:67:BA:4B:8D:7F:72:40:5B
Certificate issuer: /CN=A918B2BC/serialNumber=E20A06B985613FDA1A6AE8C767BA4B8D7F72405B
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
Manifest number: 2A
Signing time: Fri 25 Sep 2026 08:53:42 +0000
Manifest this update: Fri 25 Sep 2026 08:53:42 +0000
Manifest next update: Fri 02 Oct 2026 08:53:42 +0000
Files and hashes: 1: 4goGuYVhP9oaaujHZ7pLjX9yQFs.crl (hash: L+SQHOpjlOPBszlZ9SdpdrnfFoebLGZBuAn6ub4gLLQ=)
2: F407EC687A8711F18A4B7A2898A30FBC.roa (hash: dbJOtySmHlCrVLnA91Fl15rpXoiwAXBjnY/J/x5tB+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.crl
rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B2BC, serialNumber=E20A06B985613FDA1A6AE8C767BA4B8D7F72405B
Validity
Not Before: Sep 25 08:53:42 2026 GMT
Not After : Oct 2 08:53:42 2026 GMT
Subject: CN=6ab63696-30f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:a6:8a:a7:9d:6c:19:0c:be:42:d7:8e:8d:
bf:cc:75:a1:31:a4:38:e2:a2:41:f2:16:89:71:d8:
aa:13:29:37:7a:b5:94:39:b7:2e:c1:42:55:75:0b:
85:d5:57:3e:74:37:bf:3e:c8:aa:74:92:a7:6f:4f:
74:3a:de:44:44:04:47:3e:ec:1b:78:0d:e7:d7:c3:
f1:00:36:04:ee:b7:f5:e9:fa:5c:27:c6:21:d7:5b:
d6:fd:28:ff:53:95:e5:05:32:89:c4:63:dd:f1:83:
ea:5c:33:45:8d:e8:ab:68:7e:cd:3e:e9:a1:a3:a1:
e7:46:f5:54:31:d3:39:a3:db:f9:7d:4f:3c:e9:80:
26:96:42:0d:83:08:21:4e:fe:e0:c5:61:c0:dc:18:
80:a2:b6:f7:fb:da:31:89:86:42:b5:a6:91:11:37:
c1:e2:3e:27:a1:21:e7:7d:96:f4:5a:34:e5:1e:0e:
e9:ca:43:41:f3:27:74:db:d0:e0:b4:48:da:7c:63:
12:2c:24:28:e2:5a:1b:c3:7b:2a:72:0e:37:2c:77:
fd:cc:58:dc:61:a9:fc:2d:d0:74:ab:c7:72:83:7e:
57:6e:3d:b4:a5:50:1c:f3:e3:7c:50:1d:67:88:44:
64:07:09:97:68:3b:0f:e1:e7:74:13:6d:c9:26:f8:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D5:3E:FD:9D:79:84:11:2F:75:39:C2:7C:AC:F3:5B:97:4E:C6:48
X509v3 Authority Key Identifier:
keyid:E2:0A:06:B9:85:61:3F:DA:1A:6A:E8:C7:67:BA:4B:8D:7F:72:40:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:26:f0:74:9e:bc:6e:75:b0:d0:b2:c8:91:16:d6:11:31:73:
22:61:7e:5d:52:47:f2:46:6b:d8:6b:db:bf:3b:84:05:fe:02:
1a:4b:55:71:5d:fc:90:22:b0:cf:a8:30:a5:fe:f0:d7:3c:34:
11:95:c8:b2:16:96:ce:d8:c8:09:02:c6:09:b3:a1:c0:dd:fb:
aa:a1:7d:46:df:51:62:20:23:d3:3d:a4:de:ed:af:61:96:95:
52:f2:d0:c4:23:71:a2:2d:de:41:3b:56:12:9d:4d:60:78:e9:
ca:d1:14:a8:ac:bd:3e:34:f1:eb:56:51:fa:a4:d0:e0:7c:04:
fe:9f:26:bc:4e:62:1e:8e:0f:3a:4d:cf:23:3a:42:cc:9b:97:
5a:28:2a:a4:46:41:85:97:ba:7d:47:94:7a:a5:0e:f5:a6:17:
6e:7c:8b:a0:72:be:20:80:0d:6b:ca:df:25:5f:57:7a:49:07:
6c:b7:bc:69:95:6f:58:1c:78:4a:d6:29:c1:4d:21:0e:67:d0:
1c:59:32:7e:84:ab:d6:d3:e1:49:2e:c7:d5:b1:08:96:d4:97:
97:d5:0d:1f:42:de:f6:e0:c3:8c:85:fd:93:3d:10:6c:29:86:
1f:d8:1b:33:bb:fa:8e:40:ee:55:65:67:e7:a4:f4:74:4e:6e:
8a:0d:85:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:06:48 2026 by rpki-client