
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
File: 4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json)
Hash identifier: XR8jOI+HWy4ymEpAuKAEaChrpRH+b3n5dVjeHElHxp0=
Subject key identifier: 87:04:BF:0A:62:9A:23:1D:DF:7D:E3:16:C3:2A:66:4A:AF:D9:30:94
Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Certificate serial: 22DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
Manifest number: 22B6
Signing time: Thu 22 Oct 2026 15:51:29 +0000
Manifest this update: Thu 22 Oct 2026 15:51:28 +0000
Manifest next update: Thu 29 Oct 2026 15:51:28 +0000
Files and hashes: 1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: t8ILAl3W7B/4WGNBXjy3mu6umbJdlB9z7GJSUpVtkQA=)
2: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: IV9u+bL98dY9vhWPzSb2VF1m+KNoLGbMT7wCZc4XtUw=)
3: B72206B4554B11E791BA5861C4F9AE02.roa (hash: i8ynNvisFun6KLb9XReq+KAa11jwRPXK2t/Z0bHo3gM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8927 (0x22df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Validity
Not Before: Oct 22 15:51:28 2026 GMT
Not After : Oct 29 15:51:28 2026 GMT
Subject: CN=6ada3101-8857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:5e:fa:49:aa:61:53:f6:f6:1e:4f:e1:f8:
94:53:65:9a:33:20:7b:07:20:45:1c:34:c5:4e:3c:
51:c2:86:20:1d:30:f6:b1:d5:75:22:9f:11:3f:9d:
ab:32:84:d4:c5:44:61:00:cc:65:01:00:3e:0e:50:
43:3e:9f:63:5e:a6:3a:7a:6a:f9:f4:b5:aa:3d:f3:
b1:1c:24:c8:e4:bf:61:86:73:28:3e:10:9c:98:3b:
7c:d9:37:0a:ac:bf:3c:e6:74:13:a1:d1:60:47:98:
2e:83:26:45:fd:ba:49:29:bf:04:57:b4:78:d5:82:
4a:8a:f0:a7:57:04:50:be:a0:3b:14:d3:c0:ed:3f:
d2:f9:0c:aa:ee:71:73:6a:f6:7c:e3:1e:02:22:fc:
8d:1c:56:33:81:6e:27:f4:a9:56:21:f2:97:40:ce:
4d:d1:2d:92:f3:84:6c:7c:4e:e5:68:c5:09:b1:0f:
c7:ca:24:50:b8:47:a9:c8:dd:7a:32:19:94:ba:59:
64:2f:5a:57:bb:98:e8:13:4d:78:60:7b:4c:37:aa:
c9:29:02:8e:a0:8b:24:1e:6d:04:87:0c:b5:53:a0:
f6:bf:76:f3:2b:9e:d6:4c:54:93:b9:39:1b:17:14:
5c:10:a1:9a:35:87:18:78:a2:9e:ca:e7:41:a3:9d:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:04:BF:0A:62:9A:23:1D:DF:7D:E3:16:C3:2A:66:4A:AF:D9:30:94
X509v3 Authority Key Identifier:
keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:9d:c1:a9:64:cc:f3:95:f9:18:76:25:32:1e:e7:56:ec:84:
d5:42:05:88:b9:62:81:a5:27:88:2d:d9:f0:66:c0:61:43:83:
f5:d6:c1:22:f9:14:8c:bd:48:5f:f1:48:d7:37:bd:6e:cf:a7:
f5:23:b7:17:dc:7e:e8:fc:22:f1:3d:f2:49:31:2d:e2:10:94:
04:94:9a:ae:b0:b0:17:d3:b9:da:6f:6a:82:c8:1c:4e:57:47:
cb:cd:58:73:eb:8c:f2:27:09:b9:36:34:41:93:76:08:60:c5:
8f:47:1c:7b:aa:d5:3c:45:54:f9:4d:12:0c:1e:da:1b:ca:7e:
c1:32:56:13:a9:95:76:8f:05:37:30:4a:d6:b5:7a:89:8f:05:
38:4c:bb:1b:4c:ae:58:de:8f:d2:ad:33:9a:fe:68:90:46:b7:
c0:93:5c:d3:d7:64:b8:db:68:18:3c:e4:40:3f:9c:4a:27:64:
7b:da:65:e1:3a:61:85:5a:94:63:7a:15:e8:79:9e:66:42:04:
c5:4f:ea:04:9b:9a:98:59:75:0e:37:44:65:62:b6:e1:f5:7f:
c1:da:4f:0a:8d:b5:72:91:3d:cc:14:16:48:d8:ca:fe:88:aa:
6d:53:13:b9:0d:87:0c:3f:45:11:a1:ec:c3:09:5f:83:54:67:
10:80:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:03:11 2026 by rpki-client