
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json)
Hash identifier: TQf8hvCH+6ECAz23C4RWYdRA8h7EG7obkBZBYAc1En8=
Subject key identifier: A8:24:24:35:A4:91:70:6A:9D:62:EF:02:4D:70:FA:8A:0C:42:9B:6D
Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD
Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD
Certificate serial: 0340
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
Manifest number: 0339
Signing time: Mon 01 Jun 2026 01:47:36 +0000
Manifest this update: Mon 01 Jun 2026 01:47:35 +0000
Manifest next update: Mon 08 Jun 2026 01:47:35 +0000
Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: QyZ0It902dMVlwLPJjL2ytdfsTNk1WxRcPezBk7Rrjo=)
2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: r5uKcofx90HTHUTbqd06vEskUT1MLjmemfMajVokYGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl
rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 01:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD
Validity
Not Before: Jun 1 01:47:35 2026 GMT
Not After : Jun 8 01:47:35 2026 GMT
Subject: CN=6a1ce4b7-f45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:b4:82:d7:5c:33:ec:8b:bb:19:42:e6:94:
27:bf:d3:d4:79:b4:9d:b6:a7:bb:7b:ce:18:5e:2d:
be:2b:51:5e:70:30:20:d4:79:35:c6:9d:48:4a:0f:
cb:93:e1:77:94:08:00:e2:b2:0e:f4:b8:69:2f:66:
24:82:68:8f:e7:43:ca:a5:c7:11:9d:30:ba:27:54:
f0:4e:17:b9:af:b6:a8:85:53:2a:40:2c:77:d0:89:
3d:97:08:37:e8:6c:4f:23:79:6c:dc:31:63:90:eb:
9e:2d:c8:33:9c:cc:f0:31:da:57:b2:36:77:63:fb:
74:ab:34:b5:ce:44:c8:13:a9:45:dd:9b:d4:ad:68:
b8:f1:f2:21:59:e9:66:9d:96:f8:b4:e1:c4:19:c9:
51:1c:d9:4d:0d:61:91:6e:64:55:08:43:6f:ba:b2:
7c:06:7a:de:62:a6:66:a9:b2:79:d7:c3:c7:6d:53:
52:c2:69:d1:40:d3:f5:cc:f2:8a:c0:36:87:f9:5b:
e9:5e:77:53:90:95:ff:1a:3d:f8:7c:8d:cf:05:bd:
24:e3:54:ed:4a:8e:5e:f1:6d:c7:f1:9c:15:73:86:
9e:b4:4b:6f:cb:d7:41:0c:f3:af:60:75:bd:54:54:
a7:8a:36:de:5c:00:95:5f:07:c1:4c:18:ae:57:a6:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:24:24:35:A4:91:70:6A:9D:62:EF:02:4D:70:FA:8A:0C:42:9B:6D
X509v3 Authority Key Identifier:
keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2f:e5:18:7e:a0:66:b6:81:2e:c2:66:d1:4e:c1:76:cb:22:
88:c7:da:47:f1:cb:af:be:cc:1c:33:2c:c6:f2:2d:02:c1:02:
8b:8c:7d:d7:e1:d4:22:53:c7:f1:20:d2:67:41:51:e9:69:34:
59:1b:49:7b:47:c7:27:6c:fb:52:1c:49:1d:42:e6:1b:c5:e5:
0f:e8:ce:a1:44:ce:a9:e3:62:95:0f:9f:4e:48:0f:f2:98:ed:
51:65:68:a2:f5:2d:fe:41:75:14:9a:5a:49:16:39:75:c9:f2:
32:c2:bc:e5:98:0c:b5:00:ba:8d:e2:ad:01:9d:4a:18:b1:93:
44:8d:e1:5e:d8:2c:6c:bc:29:f2:80:06:ef:ae:01:27:95:44:
f1:e5:a5:eb:31:8d:31:f2:7a:02:99:d7:8d:9b:70:4e:10:c5:
2c:b2:b5:0e:91:d5:dc:69:04:db:e7:c3:81:d2:84:fd:eb:c4:
a1:d6:0a:46:fa:e7:0f:9f:aa:c3:17:37:d8:b7:1c:22:5b:ff:
0e:b9:b1:25:ed:cf:2e:96:22:74:49:38:74:b5:0e:1b:6f:09:
1c:76:9e:2c:71:28:90:07:0e:c8:e5:a4:eb:f4:6c:ea:d5:7d:
88:99:1b:e5:57:81:7a:ad:72:45:e8:95:a2:38:db:7e:a6:a1:
e8:4d:f5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:55 2026 by rpki-client