
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json)
Hash identifier: Y8TwG0M76F9XZv3BCGOoA/A8wASXKV/EO3VZZ71Y10k=
Subject key identifier: 24:8B:C7:99:00:4D:AB:F3:E9:EA:B2:36:E9:54:05:BB:00:98:B7:31
Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
Manifest number: 0288
Signing time: Thu 23 Jul 2026 02:54:47 +0000
Manifest this update: Thu 23 Jul 2026 02:54:47 +0000
Manifest next update: Thu 30 Jul 2026 02:54:47 +0000
Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: SNGbkUbX41H0KP+95gzoXQqF4TlhND8trIKEua3PY60=)
2: A4D24AE4C8A811F0B2500664C4F9AE02.roa (hash: 5KyYdKKzKKNZJ5o3lIKnEvZm4/+01rm3shU8ePI1af8=)
3: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: 1d10xZbJawZOgiRoLspusD2wd9i5IKQYkPksSCGbosM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Validity
Not Before: Jul 23 02:54:47 2026 GMT
Not After : Jul 30 02:54:47 2026 GMT
Subject: CN=6a618277-1ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:37:86:1d:54:0f:e9:41:6f:58:56:6c:f5:
4b:20:ec:22:07:1f:59:51:22:86:e1:1c:f9:be:7e:
38:fd:ef:55:f4:7b:cd:a4:9c:b5:b3:30:b4:01:cc:
a7:83:d4:1c:dd:07:18:9c:5d:6c:9c:9b:cc:b0:8e:
c8:44:35:25:38:cb:ff:cd:88:b7:2c:00:26:59:0e:
a2:a9:77:26:6f:e9:24:a1:e5:57:d7:5d:dc:c5:84:
f7:63:a7:44:c4:ac:ff:4f:84:1d:8a:d1:17:03:25:
4d:9d:27:7b:8d:ea:9a:0f:69:10:16:a1:be:27:4a:
c7:d1:2a:3a:45:78:a8:05:7a:8a:01:2e:96:67:34:
b7:25:ae:8e:9d:74:d8:b9:73:5d:25:f1:9c:e1:bf:
ff:82:5d:34:48:a4:30:6e:e9:d7:41:48:32:94:0d:
2d:70:2b:3a:9c:c7:ce:b3:f9:30:f8:f2:81:86:8c:
7b:aa:c9:3f:a3:5f:46:91:46:39:16:94:9e:9e:aa:
a9:0f:73:3f:ae:3b:fa:80:69:47:5c:d1:b2:be:a3:
97:e1:9b:a0:14:bc:bf:63:14:e2:57:c1:79:57:33:
b4:c8:12:ec:58:96:e8:8b:f6:eb:cf:3a:cc:4a:d8:
99:14:bb:34:80:b4:e1:5a:a2:a4:d5:a8:7c:a3:90:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8B:C7:99:00:4D:AB:F3:E9:EA:B2:36:E9:54:05:BB:00:98:B7:31
X509v3 Authority Key Identifier:
keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:5d:26:f9:5c:59:87:4b:ce:e2:e1:fd:b6:24:52:4b:1d:a8:
89:62:c6:e5:c4:d3:68:fe:fb:53:4b:17:56:f7:5b:c3:80:7e:
6f:63:0b:1f:52:eb:8a:b9:cf:df:af:9d:63:bb:5f:1e:3a:1e:
14:02:fd:1d:66:01:6f:bf:c1:db:d0:c6:bb:96:91:25:b7:ce:
f9:94:60:d8:8a:30:ed:92:85:25:04:8c:e4:b5:dc:98:22:b2:
25:65:14:65:27:2e:f8:ba:99:7c:0c:41:d1:de:34:a2:a3:1b:
6f:6c:b0:6f:8a:b0:7a:02:f5:11:e0:2e:4c:cb:0a:1f:be:f5:
3b:31:62:2b:cb:18:84:a8:75:8c:18:b1:b4:ee:e9:5b:87:b4:
9d:5c:e1:94:d1:3d:68:19:c0:cd:0f:f5:a7:89:8c:fa:c7:24:
f5:ce:9d:7a:80:f9:ba:a4:d6:f9:91:3e:4d:2b:65:ad:35:d9:
b0:be:72:67:34:d1:29:57:b0:73:fc:2c:2f:77:75:d2:e6:2e:
85:0e:71:a0:81:43:eb:0a:9e:b9:44:c4:d5:73:77:09:c1:c4:
ab:66:6b:6d:04:b6:6f:0a:8a:c1:d1:32:c4:20:a9:69:6e:9b:
f4:7e:de:9f:10:b7:ea:17:27:1c:b9:ea:4a:08:70:a1:64:5a:
a0:e5:db:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:58 2026 by rpki-client