
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
File: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json)
Hash identifier: 1b25ldrTsoCjWLSJsgJgf+wCy3kJrjNeJVNmFB8jhIA=
Subject key identifier: FE:23:C2:13:DA:38:2C:40:27:BC:19:56:71:00:C0:1B:72:76:DA:12
Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E
Certificate issuer: /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
Manifest number: 024F
Signing time: Sun 05 Apr 2026 01:52:48 +0000
Manifest this update: Sun 05 Apr 2026 01:52:48 +0000
Manifest next update: Sun 12 Apr 2026 01:52:48 +0000
Files and hashes: 1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: 14FiJ0yfZK5hCsd5Do/HqKOjtZmr88bpVCsrt9TDsKs=)
2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: ifLxbQEdtSwEDPztO7x9EMblPFgWaxhozSMbQ6cMQgs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl
rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142091, serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
Validity
Not Before: Apr 5 01:52:48 2026 GMT
Not After : Apr 12 01:52:48 2026 GMT
Subject: CN=69d1c070-3872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:e5:eb:d0:14:e2:65:72:08:2d:11:65:e6:
0f:42:51:eb:5c:0c:9a:ce:62:53:a8:c6:3d:57:c0:
4c:c3:b9:85:cc:fe:57:09:4e:e8:a4:91:44:b8:13:
72:f6:34:36:f0:74:b7:67:ee:44:0f:30:24:b7:61:
c9:29:7d:ce:f3:3c:c3:33:71:5d:7b:4f:6b:b6:13:
c0:6a:44:94:72:b6:04:c2:8a:3c:13:75:58:e6:a8:
98:f8:b8:11:18:a3:9f:05:f5:0f:c3:d6:2a:a5:d0:
08:80:f5:2a:1c:05:c9:6a:57:72:ac:b5:c6:10:29:
72:79:c4:f9:da:5f:65:69:aa:43:17:e1:f0:da:bb:
2b:13:69:99:fb:38:a7:6a:3e:8f:f8:95:60:00:2e:
1c:a2:88:ad:fe:70:38:d8:9b:e7:66:5f:35:f0:cc:
f8:c2:33:2b:c2:40:9d:9a:d3:03:bb:c5:52:e6:0d:
a5:be:5f:eb:fc:b0:b8:17:38:e8:a7:51:5b:82:e7:
49:48:0a:d5:5a:b2:09:50:7a:fd:f2:61:e7:e6:39:
5d:8b:36:6c:fe:ce:af:1d:4d:4e:be:f0:6a:4c:06:
d9:a3:0f:cb:30:86:b4:8b:54:30:2a:fb:db:5a:0b:
3c:b5:5d:bf:41:e2:49:94:9e:ae:9e:bb:4d:89:a0:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:C2:13:DA:38:2C:40:27:BC:19:56:71:00:C0:1B:72:76:DA:12
X509v3 Authority Key Identifier:
keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c7:fc:37:f7:dd:e4:3a:25:4c:b6:43:fc:39:6e:55:84:6f:
ea:21:17:b7:10:96:53:86:55:c8:b7:bf:78:52:21:6b:d4:c4:
8f:17:f6:bb:d3:2b:ed:58:0b:b1:0a:fb:eb:4c:cd:f1:21:f6:
11:e2:89:e7:c3:12:45:02:98:ed:59:33:fe:7f:e5:96:ab:d8:
6e:da:2c:8d:ab:b0:26:ff:bc:6a:8c:aa:72:52:11:71:7a:02:
77:a5:71:da:e9:06:e3:3d:01:95:63:f5:9d:f7:94:e4:f1:cf:
23:e5:96:f0:85:19:70:c0:2b:44:cf:6d:7a:c6:af:a8:73:93:
2d:f5:29:b2:31:68:f9:49:b4:c6:ac:4d:84:a0:85:16:fc:04:
f0:89:dd:bb:bf:cb:0a:e3:6f:75:03:b5:fd:f0:7d:f5:75:20:
87:05:2d:88:96:08:51:4c:60:a5:8a:86:e5:73:9e:b2:98:be:
59:3b:ea:bf:97:ec:34:30:16:6e:ed:13:9b:d2:2d:8e:bd:ed:
03:0c:df:3d:15:b3:c6:4c:88:4c:9a:56:2d:13:56:94:06:4f:
76:83:d9:b7:dc:d7:96:f1:87:68:99:22:c3:a4:46:a7:20:72:
49:87:07:44:43:58:d7:63:53:d4:73:6e:68:f1:4b:06:95:7c:
db:27:48:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:39:44 2026 by rpki-client