
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json)
Hash identifier: gFXMj6GqadK3KdkTpwZXYpNaUtZRusf/shyXHdxFUgE=
Subject key identifier: 9B:C5:28:79:0D:E7:EC:35:54:B8:53:A7:A0:51:DC:99:63:B9:C2:B0
Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Certificate serial: 0E25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
Manifest number: 0E14
Signing time: Sat 04 Apr 2026 17:41:42 +0000
Manifest this update: Sat 04 Apr 2026 17:41:41 +0000
Manifest next update: Sat 11 Apr 2026 17:41:41 +0000
Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: pRd7uAwwXi0M0CKJljmsemykPZt3ZGtOudCciANs/TY=)
2: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: hREq3dfebI3lmN/AdMfL+hkUkOZoLrGY9aPcGr6VVN4=)
3: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: 2pN9nTFxj6nclr0WTJ25vKxxUHXAvjKZjFUhskFnTRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3621 (0xe25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Validity
Not Before: Apr 4 17:41:41 2026 GMT
Not After : Apr 11 17:41:41 2026 GMT
Subject: CN=69d14d56-706d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:9e:0f:5d:cf:51:e4:08:d1:08:ef:88:a6:
d7:6e:2e:48:ad:9d:3a:37:e2:f6:64:fd:6f:c6:d5:
38:8a:46:5a:15:5a:36:06:ab:95:f3:ef:8c:c8:0d:
32:77:d5:27:89:23:0e:fd:72:e1:76:32:eb:2f:6a:
74:35:b4:0c:ec:e2:e6:ba:1a:97:db:ac:bc:ed:e1:
09:dd:2d:cb:6f:35:b3:28:bc:17:67:83:5c:77:01:
e1:4a:72:eb:8b:a5:1f:6f:6a:04:7f:c5:c6:79:2c:
19:b6:44:69:03:16:f4:c9:59:01:7f:02:fb:57:84:
08:a6:49:0b:4e:3a:18:49:75:19:3d:83:51:5a:38:
4c:cc:b9:d1:0e:9f:76:6d:fe:02:75:04:06:6e:58:
56:a1:53:b7:58:88:18:10:2d:38:29:a1:c0:41:83:
52:84:25:99:bf:d0:05:39:29:12:70:ac:c5:9f:48:
ae:ad:aa:b0:9a:bd:4a:86:ae:70:da:3d:fd:60:d6:
80:3a:44:06:1d:98:77:e5:f8:6f:bd:60:1f:aa:8f:
9a:2d:63:a8:b4:bd:71:9c:f5:a1:87:c0:a8:71:df:
b0:08:da:21:27:7d:8d:02:0f:ad:ff:45:7f:e0:ba:
f2:89:44:0d:10:9e:b8:f7:ba:b3:81:f1:46:6f:d1:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C5:28:79:0D:E7:EC:35:54:B8:53:A7:A0:51:DC:99:63:B9:C2:B0
X509v3 Authority Key Identifier:
keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e9:cf:d4:27:d7:72:a2:1c:54:45:91:a0:d4:c6:c9:17:ad:
14:9e:2c:87:b2:db:28:05:9d:e3:65:ce:9d:3d:67:48:bc:92:
ec:64:87:44:b6:5f:52:22:f8:39:dc:2d:c9:eb:1a:bc:e9:b1:
3a:1f:8d:30:0b:ea:e4:f9:c8:80:b8:87:77:16:00:56:cd:89:
49:e0:5f:d3:78:21:0b:f9:4d:92:59:84:b7:08:1b:b4:2d:37:
30:9f:4d:81:88:64:78:ba:00:39:85:ce:5d:9f:76:18:cb:06:
5d:2b:2b:a8:1e:26:75:a5:62:b6:20:64:53:73:3c:96:05:65:
b9:89:88:b7:d2:9b:52:3e:e1:fd:b6:a5:ab:7f:c5:f2:b4:ce:
aa:39:28:10:7e:44:3c:a9:1d:c3:5b:6c:be:52:ad:bf:3d:8e:
0a:0c:b1:b2:d8:99:96:ce:77:96:e9:b0:c4:5c:a4:a0:a1:79:
30:89:ee:06:29:08:3a:6b:6a:64:24:82:e4:ca:c9:0e:fb:30:
8b:ca:d9:5b:72:de:9f:d2:28:23:23:f1:55:48:29:77:ce:68:
ea:5b:c8:80:24:11:85:fd:61:15:64:c9:60:f2:57:38:5b:e2:
b0:dc:87:32:3d:35:bd:bd:fd:6c:7c:b4:b8:ef:5d:e5:82:34:
fe:1b:81:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4
RDI0NUQzMUYwHhcNMjYwNDA0MTc0MTQxWhcNMjYwNDExMTc0MTQxWjAYMRYwFAYD
VQQDEw02OWQxNGQ1Ni03MDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtzOeD13PUeQI0QjviKbXbi5IrZ06N+L2ZP1vxtU4ikZaFVo2BquV8++MyA0y
d9UniSMO/XLhdjLrL2p0NbQM7OLmuhqX26y87eEJ3S3LbzWzKLwXZ4NcdwHhSnLr
i6Ufb2oEf8XGeSwZtkRpAxb0yVkBfwL7V4QIpkkLTjoYSXUZPYNRWjhMzLnRDp92
bf4CdQQGblhWoVO3WIgYEC04KaHAQYNShCWZv9AFOSkScKzFn0iuraqwmr1Khq5w
2j39YNaAOkQGHZh35fhvvWAfqo+aLWOotL1xnPWhh8Cocd+wCNohJ32NAg+t/0V/
4LryiUQNEJ6497qzgfFGb9EJCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvFKHkN
5+w1VLhTp6BR3JljucKwMB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB
MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ
OFl2bUlYWEpYWGFOSkYweDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPunP1CfXcqIcVEWRoNTGyRetFJ4sh7LbKAWd42XOnT1nSLyS7GSHRLZfUiL4
OdwtyesavOmxOh+NMAvq5PnIgLiHdxYAVs2JSeBf03ghC/lNklmEtwgbtC03MJ9N
gYhkeLoAOYXOXZ92GMsGXSsrqB4mdaVitiBkU3M8lgVluYmIt9KbUj7h/balq3/F
8rTOqjkoEH5EPKkdw1tsvlKtvz2OCgyxstiZls53lumwxFykoKF5MInuBikIOmtq
ZCSC5MrJDvswi8rZW3Len9IoIyPxVUgpd85o6lvIgCQRhf1hFWTJYPJXOFvisNyH
Mj01vb39bHy0uO9d5YI0/huB3A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:28:39 2026 by rpki-client