
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json)
Hash identifier: +b68w2fU+fM0G4FgjXTiZOfLTB9XYushZRMlKXLAa/Y=
Subject key identifier: 2B:81:66:23:B6:D9:33:A5:0F:ED:C5:80:B1:86:19:FF:15:AB:52:B3
Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Certificate serial: 0D4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
Manifest number: 0D2A
Signing time: Thu 12 Mar 2026 17:54:10 +0000
Manifest this update: Thu 12 Mar 2026 17:54:10 +0000
Manifest next update: Thu 19 Mar 2026 17:54:10 +0000
Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: wmzV6OachUqoiNG+6X3NxeI62RqBNufGAZizsPY/GPM=)
2: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: HpflIZHPJw/jzbgP6VSoBVTn6YCT3C7WFMC80MZUPak=)
3: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: Un5EoRL9PQC9xIW5CX3zoZdwpivD2GxDkHynm1gEUVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 17:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3403 (0xd4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Validity
Not Before: Mar 12 17:54:10 2026 GMT
Not After : Mar 19 17:54:10 2026 GMT
Subject: CN=69b2fdc2-878e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:82:50:7e:69:45:72:37:b0:f1:b2:8f:38:
39:1f:58:bc:70:bd:2c:30:e6:57:2a:b4:62:7e:69:
58:2d:8b:45:bf:fd:b5:83:2b:9b:40:ea:43:ef:78:
62:dd:3f:a7:91:ae:00:0d:d2:1e:87:1e:b2:fb:9a:
17:4b:fc:1a:b6:20:50:4d:9e:a0:6c:1c:c4:ac:e2:
64:cd:24:3e:42:4d:22:0a:49:66:a5:b5:b7:43:8a:
84:b0:8f:0e:59:53:b0:2d:33:3d:60:4a:52:43:47:
3e:8b:e5:ff:57:ce:86:74:7f:2d:72:e8:f0:35:f1:
4e:36:4c:d6:cf:60:ff:ab:48:da:35:30:ac:d2:bc:
b1:e7:d1:23:fd:be:4c:4d:5d:83:26:b4:1d:3d:8f:
a1:e5:99:d5:1b:52:b9:51:f3:78:1b:42:e8:ee:bf:
4d:50:db:5b:dc:7a:9f:f3:5e:98:66:8f:cd:75:26:
4d:00:0d:8e:c0:86:31:26:b1:a5:06:1e:19:fc:e6:
bf:ca:5a:5b:f9:d6:71:66:1d:04:10:f7:33:20:ee:
51:65:4f:67:84:e4:25:a6:20:3b:dd:39:a1:84:af:
bd:64:0b:d6:a0:7a:e4:8e:78:9e:76:e9:7c:e9:92:
50:e2:07:13:5e:5a:5e:b7:e5:96:14:ce:81:8c:66:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:81:66:23:B6:D9:33:A5:0F:ED:C5:80:B1:86:19:FF:15:AB:52:B3
X509v3 Authority Key Identifier:
keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:9b:f1:84:3a:b7:96:f7:06:8e:18:43:d9:e4:08:a1:aa:a8:
c4:4e:51:e2:45:87:19:fc:7f:e9:cb:ee:22:2f:3d:7f:9a:97:
d2:d5:b6:ce:51:ba:b4:c6:ca:65:f7:bd:ae:59:81:c8:b2:38:
ff:55:87:b4:1e:82:de:ba:94:fa:98:8c:0b:03:b4:fe:df:90:
eb:ae:b5:49:8d:ca:4c:ff:16:ea:34:59:2f:d5:90:f7:54:ac:
78:64:70:a8:4c:3e:94:7f:b5:63:a8:26:f1:f0:fa:97:8f:f7:
9e:a3:50:a2:be:4b:75:b6:0c:d7:3f:17:34:de:72:91:e9:91:
18:85:11:f7:43:78:20:f2:0c:af:83:28:df:af:55:e0:4f:09:
f3:f8:ef:eb:03:c1:e4:80:46:d0:22:c8:cd:f5:23:3e:37:f5:
49:18:2a:a2:b6:25:aa:62:fc:67:36:b7:ca:0b:5e:34:79:69:
18:b4:3f:fd:a6:8f:c5:1a:d3:2b:66:80:89:1a:62:ae:32:c4:
d8:1a:be:b8:de:fe:c3:ff:02:72:54:21:98:46:e9:99:e6:de:
26:8d:d0:fb:2a:14:17:a7:61:82:32:50:11:ed:38:a4:8c:d4:
39:fb:1e:df:f6:fa:89:16:f6:fd:b5:fa:42:66:4f:3d:b6:b0:
1f:19:fe:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC
MjFDNERCMDkwHhcNMjYwMzEyMTc1NDEwWhcNMjYwMzE5MTc1NDEwWjAYMRYwFAYD
VQQDEw02OWIyZmRjMi04NzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2eCUH5pRXI3sPGyjzg5H1i8cL0sMOZXKrRifmlYLYtFv/21gyubQOpD73hi
3T+nka4ADdIehx6y+5oXS/watiBQTZ6gbBzErOJkzSQ+Qk0iCklmpbW3Q4qEsI8O
WVOwLTM9YEpSQ0c+i+X/V86GdH8tcujwNfFONkzWz2D/q0jaNTCs0ryx59Ej/b5M
TV2DJrQdPY+h5ZnVG1K5UfN4G0Lo7r9NUNtb3Hqf816YZo/NdSZNAA2OwIYxJrGl
Bh4Z/Oa/ylpb+dZxZh0EEPczIO5RZU9nhOQlpiA73TmhhK+9ZAvWoHrkjniedul8
6ZJQ4gcTXlpet+WWFM6BjGZO3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuBZiO2
2TOlD+3FgLGGGf8Vq1KzMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB
MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn
NDFrUjZjbkpSUFN5SEUyd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMJvxhDq3lvcGjhhD2eQIoaqoxE5R4kWHGfx/6cvuIi89f5qX0tW2zlG6tMbK
Zfe9rlmByLI4/1WHtB6C3rqU+piMCwO0/t+Q6661SY3KTP8W6jRZL9WQ91SseGRw
qEw+lH+1Y6gm8fD6l4/3nqNQor5LdbYM1z8XNN5ykemRGIUR90N4IPIMr4Mo369V
4E8J8/jv6wPB5IBG0CLIzfUjPjf1SRgqorYlqmL8Zza3ygteNHlpGLQ//aaPxRrT
K2aAiRpirjLE2Bq+uN7+w/8CclQhmEbpmebeJo3Q+yoUF6dhgjJQEe04pIzUOfse
3/b6iRb2/bX6QmZPPbawHxn+xg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 20:08:30 2026 by rpki-client