
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json)
Hash identifier: GtfEwhhb5ppkD4LrET3KcpoyNY0HPdDdx5bThEBGC/U=
Subject key identifier: C9:38:02:2E:93:A7:15:9E:6C:E8:CD:86:5F:B3:C1:34:69:A4:7A:0B
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
Manifest number: 028B
Signing time: Thu 21 May 2026 01:53:10 +0000
Manifest this update: Thu 21 May 2026 01:53:10 +0000
Manifest next update: Thu 28 May 2026 01:53:10 +0000
Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: a7GC1CHwJ2xvUsKFfFFBQCXpJlQMYElhZfGOHpSuvNM=)
2: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: bytZ59Ia8ZFaLY4XNox1TiPwLTz6zD1b+H+2egXVeZ0=)
3: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: poF5iER85gmZG51MJJTxxsmqAYXARy0knubqmMXJg/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
Validity
Not Before: May 21 01:53:10 2026 GMT
Not After : May 28 01:53:10 2026 GMT
Subject: CN=6a0e6586-acf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:45:f8:cb:16:75:58:fd:fa:09:24:b1:73:
b0:d5:3a:8d:98:cb:20:64:8c:d0:17:c0:78:61:fb:
49:00:11:72:30:2e:bd:31:10:25:ce:85:1a:7c:73:
59:44:82:c3:4e:b5:91:9c:79:46:a7:7e:3d:81:67:
e8:bf:20:d1:91:3f:e1:5c:e4:cb:1b:c4:08:04:84:
1a:75:17:51:3a:10:52:bf:88:8c:3a:f6:9a:f9:e8:
ac:01:60:31:60:a3:73:dd:ef:90:77:5b:9a:71:8f:
61:52:1f:3a:15:df:f8:cf:10:7f:00:0e:1c:85:7c:
5b:c6:2b:96:20:b8:a8:15:a0:72:57:13:9e:30:7a:
e9:25:f1:49:49:27:4f:54:63:96:22:9a:2f:1d:12:
8d:95:af:df:67:8f:46:c1:cb:f4:54:05:1b:34:42:
a9:88:cf:b4:b0:0c:21:b1:d9:73:c7:cb:51:83:3b:
90:f2:4b:70:28:5e:80:f2:ec:92:f4:c6:bc:c0:39:
29:75:f4:f1:53:84:bd:61:c0:de:1b:2c:f4:b8:b2:
1a:50:86:2d:ad:4e:bc:06:bd:c7:48:40:46:0c:c7:
bf:22:5c:5a:06:20:5e:c5:f4:51:08:0e:ea:ed:cd:
f9:7b:d2:20:90:5b:a3:b1:4a:d9:5f:78:00:af:34:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:02:2E:93:A7:15:9E:6C:E8:CD:86:5F:B3:C1:34:69:A4:7A:0B
X509v3 Authority Key Identifier:
keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:4b:6d:66:79:0c:41:68:b9:a0:fd:e9:23:b7:db:7b:c0:32:
01:35:b0:35:f6:c8:be:36:0b:be:fc:d3:8e:59:79:92:85:08:
8f:16:c4:a1:92:40:23:fc:91:9f:f4:25:03:7b:45:8e:82:8b:
09:bf:d5:53:b5:a3:2c:ab:19:7c:2e:19:6a:88:0a:63:26:58:
6a:af:c6:14:77:4e:bc:bc:35:23:ba:fe:35:3d:58:15:9c:56:
e0:80:3f:70:49:56:a0:97:b2:5f:f0:33:f3:07:55:db:1a:f0:
d6:b2:d1:ee:82:17:f0:54:01:91:7d:5b:e9:b0:4e:51:3d:45:
eb:80:50:17:1c:dd:ff:be:eb:67:cb:fc:8c:73:46:ff:55:6e:
65:49:be:09:91:e3:76:57:26:d0:98:22:74:62:66:57:f2:21:
b3:07:35:66:96:3c:be:a1:54:c7:9d:27:7b:38:11:56:db:cf:
dd:fa:80:7d:97:0e:82:25:af:03:5b:af:4e:44:1d:1d:91:9e:
a8:61:f8:93:cc:fd:a8:d0:f2:7d:7d:a8:5d:45:a8:c4:27:3e:
75:ae:62:c2:4a:3e:04:62:62:a1:d8:9c:69:d6:10:51:06:b0:
86:61:e1:de:28:df:a8:1e:f8:4e:b2:21:3d:2c:06:a3:96:3b:
3c:a8:8c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:23 2026 by rpki-client