
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
File: P4oQ_sbERHjWPTOyV_BEXQKopIw.mft (raw, json)
Hash identifier: jwkcOpPl1NLIoCnfQ7N9B3biEb9q7I5aDSHbklansho=
Subject key identifier: 62:77:79:5B:B7:3D:97:DB:CB:C0:35:08:39:FF:98:37:C2:37:D5:E8
Authority key identifier: 3F:8A:10:FE:C6:C4:44:78:D6:3D:33:B2:57:F0:44:5D:02:A8:A4:8C
Certificate issuer: /CN=A9176701/serialNumber=3F8A10FEC6C44478D63D33B257F0445D02A8A48C
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
Manifest number: 04
Signing time: Sun 05 Apr 2026 08:32:53 +0000
Manifest this update: Sun 05 Apr 2026 08:32:53 +0000
Manifest next update: Sun 12 Apr 2026 08:32:53 +0000
Files and hashes: 1: P4oQ_sbERHjWPTOyV_BEXQKopIw.crl (hash: jvb97ofYaR3I1kfkXnTSPvHmcqOR8/iVDL7c5OECL6U=)
2: 59228E922D7F11F1BBAF3E2694833773.roa (hash: uSHd53/3aRU1C2bIH1LczkW59jj5OhcnzsaYucDQstY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.crl
rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176701, serialNumber=3F8A10FEC6C44478D63D33B257F0445D02A8A48C
Validity
Not Before: Apr 5 08:32:53 2026 GMT
Not After : Apr 12 08:32:53 2026 GMT
Subject: CN=69d21e35-94d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:1c:4a:4f:19:39:73:45:ce:a3:91:86:e2:
56:8e:64:45:26:16:c3:49:e6:c6:91:26:2f:98:a9:
64:71:c8:81:1b:13:06:c6:52:bc:f1:ee:ff:93:a1:
fb:5e:f0:9f:9b:b0:9a:d2:a2:50:05:e5:ce:d2:20:
5c:45:22:8a:67:df:17:15:7b:cc:84:9f:06:f8:ed:
8a:af:c5:09:1e:46:96:d6:23:e5:d9:00:8a:6b:25:
92:b4:86:50:1d:6e:ed:29:bd:14:95:19:31:81:2a:
be:c4:ed:73:db:23:4b:bd:db:47:33:da:76:3e:94:
62:a6:4d:84:88:95:0f:94:11:c7:45:8f:91:97:8d:
13:65:cf:72:14:59:92:c8:ca:b9:42:07:b2:75:74:
e8:52:c7:7f:06:4b:3a:8b:e4:83:2a:9c:2f:9f:e7:
90:de:0d:00:27:f0:b6:b9:16:8e:ab:ce:57:94:48:
10:32:0e:41:95:d0:0d:06:dd:41:20:57:cf:0a:60:
34:12:cf:30:c5:19:9b:e3:4d:fc:a3:31:5a:3e:b6:
ea:ea:2a:b1:df:c3:a8:1b:05:b6:58:68:1f:c5:52:
cf:a0:a7:db:5d:07:dc:f5:93:e5:19:7e:ae:ce:21:
e4:f4:da:a8:08:a9:87:8e:77:51:47:d2:3b:ef:4c:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:77:79:5B:B7:3D:97:DB:CB:C0:35:08:39:FF:98:37:C2:37:D5:E8
X509v3 Authority Key Identifier:
keyid:3F:8A:10:FE:C6:C4:44:78:D6:3D:33:B2:57:F0:44:5D:02:A8:A4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:5a:06:af:23:25:58:65:a9:e1:64:4c:85:9a:8e:14:a6:21:
1e:81:25:30:f8:9e:8d:57:54:a4:9e:23:7d:c3:23:fa:a7:0a:
34:6b:7c:4e:9b:8d:0d:d9:76:42:86:d0:a4:9e:ac:df:7a:4c:
46:4f:e9:70:3f:52:a3:d3:29:50:2f:b2:79:ed:45:6d:95:77:
b8:27:d9:81:30:f0:2d:16:99:fd:ab:e8:c5:26:64:81:6c:11:
9d:c9:e4:5d:e3:c5:3c:2c:62:e9:19:bb:a6:f1:33:71:32:07:
32:39:71:13:5c:fd:c7:e3:f3:c9:d9:33:fc:98:05:6e:ba:29:
48:6b:70:6d:63:08:64:e9:1d:35:67:15:04:a9:bf:22:4c:f4:
b6:73:a3:65:41:9c:b9:12:d4:be:65:ce:0f:39:02:84:a2:7f:
85:fb:8a:cc:5c:c0:4f:90:10:ad:ae:55:1d:85:75:05:ff:86:
83:87:74:f7:b4:f5:60:f1:80:6d:99:dd:7f:c0:7f:71:a9:4b:
b4:3a:39:a8:63:7c:22:b1:05:65:d5:45:65:79:1a:c8:f8:26:
61:78:6f:a7:ef:38:87:59:2b:27:22:f4:7b:13:5f:21:25:6b:
84:4a:11:61:6f:69:56:ca:fb:ee:c7:a8:e5:c6:32:6e:5b:09:
72:58:b0:f9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NjcwMTExMC8GA1UEBRMoM0Y4QTEwRkVDNkM0NDQ3OEQ2M0QzM0IyNTdGMDQ0NUQw
MkE4QTQ4QzAeFw0yNjA0MDUwODMyNTNaFw0yNjA0MTIwODMyNTNaMBgxFjAUBgNV
BAMTDTY5ZDIxZTM1LTk0ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSBRxKTxk5c0XOo5GG4laOZEUmFsNJ5saRJi+YqWRxyIEbEwbGUrzx7v+Tofte
8J+bsJrSolAF5c7SIFxFIopn3xcVe8yEnwb47YqvxQkeRpbWI+XZAIprJZK0hlAd
bu0pvRSVGTGBKr7E7XPbI0u920cz2nY+lGKmTYSIlQ+UEcdFj5GXjRNlz3IUWZLI
yrlCB7J1dOhSx38GSzqL5IMqnC+f55DeDQAn8La5Fo6rzleUSBAyDkGV0A0G3UEg
V88KYDQSzzDFGZvjTfyjMVo+turqKrHfw6gbBbZYaB/FUs+gp9tdB9z1k+UZfq7O
IeT02qgIqYeOd1FH0jvvTJodAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYnd5W7c9
l9vLwDUIOf+YN8I31egwHwYDVR0jBBgwFoAUP4oQ/sbERHjWPTOyV/BEXQKopIww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2NzAxL0I4ODU1MDc4MkQ3
RTExRjFCNjgwOEQxQTk0ODMzNzczL1A0b1Ffc2JFUkhqV1BUT3lWX0JFWFFLb3BJ
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUDRvUV9zYkVSSGpXUFRPeVZfQkVYUUtvcEl3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2
NzAxL0I4ODU1MDc4MkQ3RTExRjFCNjgwOEQxQTk0ODMzNzczL1A0b1Ffc2JFUkhq
V1BUT3lWX0JFWFFLb3BJdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBkWgavIyVYZanhZEyFmo4UpiEegSUw+J6NV1SkniN9wyP6pwo0a3xOm40N2XZC
htCknqzfekxGT+lwP1Kj0ylQL7J57UVtlXe4J9mBMPAtFpn9q+jFJmSBbBGdyeRd
48U8LGLpGbum8TNxMgcyOXETXP3H4/PJ2TP8mAVuuilIa3BtYwhk6R01ZxUEqb8i
TPS2c6NlQZy5EtS+Zc4POQKEon+F+4rMXMBPkBCtrlUdhXUF/4aDh3T3tPVg8YBt
md1/wH9xqUu0OjmoY3wisQVl1UVleRrI+CZheG+n7ziHWSsnIvR7E18hJWuEShFh
b2lWyvvux6jlxjJuWwlyWLD5
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:13 2026 by rpki-client