
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json)
Hash identifier: lllfgHzr4Jc8PJ1QjlxXoDk7EPdDHf9XK+O0+HXMkYo=
Subject key identifier: D3:87:E3:72:1F:E9:C8:3A:E6:42:41:A0:4F:D9:F7:F3:A8:C2:E2:AE
Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
Manifest number: 024C
Signing time: Wed 25 Mar 2026 01:44:47 +0000
Manifest this update: Wed 25 Mar 2026 01:44:46 +0000
Manifest next update: Wed 01 Apr 2026 01:44:46 +0000
Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: 0e0zMVjgDup2guSYxzHqGYDwnJHBy8Ds8dPpHB+s2bY=)
2: A4D24AE4C8A811F0B2500664C4F9AE02.roa (hash: 5KyYdKKzKKNZJ5o3lIKnEvZm4/+01rm3shU8ePI1af8=)
3: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: 1d10xZbJawZOgiRoLspusD2wd9i5IKQYkPksSCGbosM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Validity
Not Before: Mar 25 01:44:46 2026 GMT
Not After : Apr 1 01:44:46 2026 GMT
Subject: CN=69c33e0f-23bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:49:80:70:62:ce:03:3d:e5:92:50:0c:ea:
7b:e3:68:91:85:6b:9a:19:0a:40:de:d9:1a:e1:eb:
e2:96:c9:87:40:e5:41:a9:63:ac:02:80:dc:71:47:
a9:69:cc:56:1d:3f:09:9f:96:56:46:c9:51:13:4c:
37:fe:7b:eb:b7:63:1f:69:4a:51:36:72:f6:c4:58:
f4:26:c5:27:29:94:b3:9d:40:2a:26:cc:b7:a9:72:
13:cc:4a:56:cf:70:c8:97:9b:8c:a8:82:21:d2:82:
0c:7c:4f:b0:3f:18:30:57:81:b6:f9:81:90:5e:e5:
dc:1f:d1:c3:7f:76:64:34:57:99:f6:40:cc:97:6a:
a1:14:d1:e7:61:af:06:03:c3:25:96:bf:85:0b:7a:
21:8c:9c:2c:12:c1:ca:55:61:05:36:47:3d:18:8d:
cd:fe:b9:2e:80:0b:dd:94:73:57:46:23:78:c6:b2:
54:47:ec:16:b7:6e:1d:21:38:c9:f9:01:91:b7:f6:
c1:0d:23:2c:05:6e:90:64:14:e5:ca:85:af:4e:5d:
13:a9:be:3f:4b:57:92:36:a6:e9:ba:35:22:6d:89:
2e:a0:02:dc:11:67:24:92:ce:a9:d1:6c:c2:4a:f8:
ee:8a:5f:8a:73:fb:fa:9a:7f:dc:f7:84:ae:62:06:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:87:E3:72:1F:E9:C8:3A:E6:42:41:A0:4F:D9:F7:F3:A8:C2:E2:AE
X509v3 Authority Key Identifier:
keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:10:68:e5:09:a1:ea:0c:5f:2e:2a:25:18:69:18:71:3d:83:
18:e9:51:09:e0:a9:72:e4:41:39:d8:fa:dc:df:0d:e6:2a:3b:
0c:85:2b:2c:2b:bf:57:62:e6:3b:36:92:3d:fb:5f:01:25:db:
79:eb:d6:81:07:4a:4b:4b:85:c8:d0:32:68:9a:99:1e:89:66:
8b:15:ac:4a:0e:38:62:25:ac:10:81:9d:3a:71:9b:3b:1f:4d:
1b:ff:03:20:55:d0:4c:d3:da:41:08:85:83:6f:aa:89:0f:08:
2b:1f:0f:b4:ac:04:ec:4d:bf:ec:d0:b2:79:1d:da:3e:b6:1d:
62:1e:83:8d:20:10:4e:69:2b:c5:e5:04:98:d1:16:46:b4:e8:
81:a5:91:06:6a:ac:30:1a:ec:e3:19:2d:e8:ae:80:40:b9:24:
99:06:b7:8a:3b:ed:8f:42:de:e4:b4:54:24:b3:2c:a1:df:82:
db:f0:a4:58:20:38:2f:73:4d:cb:d3:a2:23:25:5e:42:26:05:
a7:78:9d:da:c6:9d:6d:9e:6e:10:22:71:52:78:27:79:02:81:
98:3a:33:de:1e:5e:6a:db:f2:e1:f1:37:6f:ce:96:5b:bf:2b:
7d:3f:16:ee:53:a0:ac:3f:d6:47:7d:25:9c:61:bf:85:b7:13:
21:59:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:58:43 2026 by rpki-client