
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
File: 4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json)
Hash identifier: tiqTAXmzmqwz3Bc7A/QqqhPlKe6CzScpYGAEk0Wqw88=
Subject key identifier: FB:D1:A6:F8:28:31:1B:F5:02:49:AD:B5:C3:8D:81:09:63:2C:94:A0
Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Certificate serial: 2279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
Manifest number: 2250
Signing time: Sat 04 Apr 2026 15:48:14 +0000
Manifest this update: Sat 04 Apr 2026 15:48:13 +0000
Manifest next update: Sat 11 Apr 2026 15:48:13 +0000
Files and hashes: 1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: 6a0tYzBNUB72CJ6aJNrtzhkuoG9jVspXi4nc8/uEkEo=)
2: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: IV9u+bL98dY9vhWPzSb2VF1m+KNoLGbMT7wCZc4XtUw=)
3: B72206B4554B11E791BA5861C4F9AE02.roa (hash: i8ynNvisFun6KLb9XReq+KAa11jwRPXK2t/Z0bHo3gM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8825 (0x2279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Validity
Not Before: Apr 4 15:48:13 2026 GMT
Not After : Apr 11 15:48:13 2026 GMT
Subject: CN=69d132be-1fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:73:ee:22:a5:76:50:9f:28:51:61:c6:04:
5f:f9:f2:af:52:ac:90:9a:5c:06:47:a9:83:91:67:
59:7e:55:8e:fe:7f:8d:6a:07:53:3a:f4:7a:df:ee:
7d:21:40:69:e0:40:4f:5d:27:0e:71:0a:77:62:8f:
a4:54:99:8a:5a:23:5f:d0:97:06:e0:e7:97:d3:70:
93:9c:20:49:90:1f:25:c3:8f:77:24:df:cf:66:34:
35:0a:4e:41:ee:7a:cd:2c:19:f5:2c:ab:f8:c0:a5:
79:4e:2e:d2:27:75:7f:fe:3f:de:7e:9e:dd:1f:ae:
14:de:32:c3:61:8a:a8:e2:03:4f:45:c7:df:96:3d:
76:44:01:23:53:6c:69:da:8e:26:6d:de:11:ad:25:
13:bc:4c:20:36:43:79:a3:ad:f7:ec:7e:8e:e4:07:
14:9c:ef:2a:62:7e:db:06:16:ef:63:48:9c:79:92:
55:d3:6b:04:4c:e1:16:77:6f:5d:5e:e0:e4:fe:1d:
a2:ee:20:b8:e7:56:6e:d5:24:9b:b9:37:07:16:c9:
61:f5:5d:4c:5a:a4:57:9d:3a:7c:1b:19:58:b3:ac:
8b:f4:24:c8:14:8c:95:0e:27:46:94:1f:26:45:47:
16:bb:f1:be:82:03:ba:ad:b7:c9:dd:09:e8:86:b3:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:A6:F8:28:31:1B:F5:02:49:AD:B5:C3:8D:81:09:63:2C:94:A0
X509v3 Authority Key Identifier:
keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:36:a1:54:73:44:ed:0e:d3:8c:2f:20:bd:0c:10:d0:69:dd:
c8:2f:4e:f1:fb:12:46:31:37:77:47:e2:ba:f9:cf:56:e0:02:
da:cc:f4:27:5e:dc:cb:55:75:1a:08:24:29:c3:f2:01:b4:fc:
3b:5b:10:30:97:bb:ec:09:60:6c:88:b5:fc:54:e5:29:10:32:
f7:3b:6c:70:58:42:1d:a8:62:12:a0:df:6b:76:e9:d8:be:13:
89:3a:14:bc:82:d1:ad:41:3e:9d:d2:da:0e:6d:f5:37:0d:dc:
39:60:a2:e6:1d:5e:30:0b:6a:27:a1:6d:68:c1:e6:34:d0:fd:
90:3f:22:84:a7:53:43:c7:cf:a5:c8:dc:59:87:d1:d5:6e:00:
c3:73:ba:ce:1f:85:6d:de:b0:05:e8:b7:4d:6a:9d:7a:8e:9c:
fd:a0:c1:cc:ca:98:0e:1a:1e:28:17:bd:6a:c9:e0:95:35:8d:
8c:b3:8c:48:40:05:fb:47:b1:14:c8:f1:49:e4:a7:31:cf:13:
21:b4:a5:01:65:c6:69:39:47:ce:c3:a7:2a:07:9e:62:33:b1:
f8:d8:f4:6b:5d:13:59:cd:16:d9:a3:0e:0a:60:7d:a7:71:3c:
58:89:3c:92:6f:8a:87:da:d0:79:31:34:cd:3e:2b:6d:28:f6:
ea:ce:1d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:54 2026 by rpki-client