
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier: o4qJzLtF/OoXur3FUnDx48YP70/lWrknBm8GntgGMKA=
Subject key identifier: F1:82:E6:84:C4:44:E1:18:41:FD:26:A4:9F:E0:8B:49:D3:14:1B:45
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial: 0866
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number: 084D
Signing time: Tue 12 May 2026 20:58:26 +0000
Manifest this update: Tue 12 May 2026 20:58:25 +0000
Manifest next update: Tue 19 May 2026 20:58:25 +0000
Files and hashes: 1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: Cq3C/4vvI2cc2vfqM5a0DXhUGcGvOqnCoIECw6aZHss=)
2: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: uB1ptL86TUYIpYIuNSpFFg8ZR5mh0LibkD3yr4cunXE=)
3: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: 1jBi7AFnVCtlT74K0SmC0UKxzEEwhVrbK9WIUjseLKs=)
4: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: WVnMtC67sqQYeTgYbTZ4xUIDg4NnFA5/AGE6r2DSlK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2150 (0x866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Validity
Not Before: May 12 20:58:25 2026 GMT
Not After : May 19 20:58:25 2026 GMT
Subject: CN=6a039472-57e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:25:da:2f:ee:00:51:2a:d9:2a:a4:da:64:
cd:9d:30:4b:05:fe:df:d2:d8:98:88:0e:87:bd:4c:
a7:51:54:c4:88:4f:45:a7:20:1a:f1:e3:8f:c7:81:
e2:78:e9:14:ca:a5:5f:fd:48:cd:a8:bc:fa:73:81:
96:69:6a:7b:11:1e:03:1c:ab:ff:84:1b:2b:1c:93:
74:de:39:f8:68:a4:2b:e0:0a:f0:92:8e:c5:ad:5f:
38:8f:14:1d:22:d9:f9:6c:e5:22:a4:ae:55:cd:3f:
16:19:2f:ca:10:9d:c2:e1:7c:4c:3b:11:5b:7b:ee:
6c:b3:4d:92:e9:39:90:40:45:7e:62:90:46:10:bc:
fd:d8:ed:5f:1d:d7:1f:42:6d:be:fe:7d:88:ed:95:
b2:98:c5:a4:c7:b1:3b:09:c5:21:16:4e:e4:14:38:
d7:dc:49:70:b0:77:fe:0b:56:e7:73:3c:4f:28:90:
8e:fb:f2:09:2d:70:53:a7:5f:f0:05:8e:ad:b5:d6:
70:6e:20:e7:5e:d7:e4:65:c3:61:7f:76:8f:db:4d:
46:5c:e4:0f:0e:3c:71:24:68:d9:99:30:8e:40:a7:
6a:53:22:90:82:c7:3a:24:b4:36:9f:6c:90:fb:93:
98:d0:2f:75:04:cf:13:e4:40:b7:0f:f4:53:76:e3:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:82:E6:84:C4:44:E1:18:41:FD:26:A4:9F:E0:8B:49:D3:14:1B:45
X509v3 Authority Key Identifier:
keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b3:00:5d:e3:85:c6:83:d4:0f:f5:94:45:b9:7d:70:33:9e:
b3:68:40:33:4e:eb:72:41:48:cc:76:99:b5:74:55:ce:9a:18:
d4:a4:75:c8:82:90:40:ed:f5:f0:e7:bc:2c:f8:e6:06:6b:bd:
30:2a:9a:13:bc:4b:b9:28:94:f3:06:0b:33:76:57:b0:85:b3:
de:88:e1:6c:39:0d:ed:6d:c6:a3:10:76:dd:dd:16:b2:83:88:
fb:4a:5c:1b:fb:97:85:f2:c8:13:be:dd:fe:4f:b7:78:18:66:
2c:8b:e7:02:cf:d7:bc:2b:7c:c9:fa:5d:52:ed:ef:2f:4c:07:
03:68:43:61:8e:64:52:b0:92:4c:7e:91:c0:1a:69:0e:7a:a3:
68:f3:67:8f:f1:22:77:27:3f:3d:14:49:f1:70:d0:08:05:d7:
c0:1c:a6:d5:0e:10:00:55:c2:47:53:45:c3:82:62:71:c2:92:
d9:83:f4:6c:d2:22:07:a3:0a:cf:e4:31:d8:fd:88:c4:dd:4a:
2b:81:3a:f5:21:48:fb:75:88:28:46:69:84:08:b2:75:48:86:
3e:24:34:a9:bd:e7:78:10:92:d5:5c:21:8a:60:35:48:ef:63:
bd:db:de:8f:3f:0c:2a:e3:ec:1b:f1:e8:05:a0:7b:1e:6d:99:
42:e8:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:16 2026 by rpki-client