
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json)
Hash identifier: epSeGnloYVpc7MV0H40EC+uZvpblYkEYod03PsOSEZM=
Subject key identifier: 34:69:CF:74:DD:E8:AA:C5:9C:96:57:46:24:FC:CA:13:45:04:16:B0
Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Certificate serial: 07F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
Manifest number: 07EA
Signing time: Sat 04 Apr 2026 21:02:36 +0000
Manifest this update: Sat 04 Apr 2026 21:02:36 +0000
Manifest next update: Sat 11 Apr 2026 21:02:36 +0000
Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: ACGgG9GVhMYmQJuNk+P0r8ipYmIYpIGBTpNZ8f/Sv+M=)
2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: E6etJLs09jxCInikK/I6oSWS8vZ+7fWKirFeSQZQozk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Validity
Not Before: Apr 4 21:02:36 2026 GMT
Not After : Apr 11 21:02:36 2026 GMT
Subject: CN=69d17c6c-bcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:05:ca:5f:6d:4a:09:e9:2e:1b:25:04:41:
5e:99:33:be:2d:27:16:30:1a:31:98:ed:60:71:8b:
0e:73:dd:15:63:6b:b7:c7:46:38:b8:9a:a6:1c:e4:
6d:14:45:c2:4b:e0:e2:0d:19:51:28:90:cb:54:a2:
b0:ab:f8:c9:3d:6c:cd:b6:09:2f:25:ee:51:e9:89:
4d:41:41:df:b4:6d:22:38:37:f2:8f:47:1d:0d:64:
95:b5:1c:84:b4:da:e4:dc:56:0b:05:9f:13:52:3c:
9d:4a:50:0b:9b:07:82:2b:c8:6e:f6:de:a5:83:ca:
d7:50:ec:b7:c5:fc:db:c5:d0:61:76:6e:db:02:4e:
ce:94:4a:bc:de:f8:54:e3:9c:c6:4b:09:58:4b:d3:
12:64:5d:16:db:20:bf:0d:9e:b4:58:f1:b1:db:9f:
34:87:98:f0:10:c8:99:81:f6:89:df:94:c6:31:64:
a8:36:a9:ba:bb:9d:36:2a:a8:eb:73:21:91:c4:d1:
27:be:df:f4:e9:f6:c8:ac:c9:a3:4e:33:fe:4a:46:
71:0e:a4:ec:3a:82:98:95:fc:9c:f3:99:c4:0f:dd:
5b:1b:88:46:e5:5b:71:07:2f:ed:26:1c:13:2d:1b:
76:ee:c8:99:3f:dd:90:ce:f6:ff:19:9b:ed:a0:1c:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:CF:74:DD:E8:AA:C5:9C:96:57:46:24:FC:CA:13:45:04:16:B0
X509v3 Authority Key Identifier:
keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:ba:9c:aa:05:c2:82:4d:0c:b9:08:73:33:c8:56:10:eb:79:
5c:c6:dc:41:fd:a8:02:e4:cf:26:48:4d:9e:f5:5f:92:ca:89:
85:da:b4:13:5e:91:5c:00:2e:0f:c8:44:75:8f:c4:3b:00:b3:
eb:05:c8:01:38:34:36:3c:c7:ce:3c:07:cf:11:53:7e:08:1a:
65:de:14:42:3d:bc:fd:62:43:4d:0c:cf:0a:b2:56:a5:1e:25:
9e:5e:5e:f8:b1:41:db:77:0b:40:61:2f:1a:8f:df:db:16:ec:
93:8f:6c:56:21:ed:bf:90:3c:c9:c5:34:aa:d5:d4:36:be:22:
f7:29:e3:40:29:cd:cd:ac:e4:a9:68:40:41:bc:a4:34:6a:38:
2e:60:dc:90:4f:18:68:d8:c0:47:5f:be:7b:0a:b5:82:d7:8c:
37:6c:c5:5a:56:32:c4:7a:b7:9e:90:8c:df:8c:2f:ee:4e:c6:
d5:3a:83:de:91:e0:ce:fe:cc:c7:6b:b5:08:20:dc:ce:f0:a3:
39:26:d5:a2:08:b1:c9:6f:4e:ba:3f:54:cc:ad:84:72:9c:c6:
64:4a:ba:c7:04:c3:9d:87:85:0a:9c:19:28:ab:6a:57:9e:bf:
a1:b4:7d:c5:4d:cf:55:5f:d6:d2:a6:41:5b:23:50:5c:09:2f:
d7:45:37:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC
RTU2OEY4QzEwHhcNMjYwNDA0MjEwMjM2WhcNMjYwNDExMjEwMjM2WjAYMRYwFAYD
VQQDEw02OWQxN2M2Yy1iY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoeYFyl9tSgnpLhslBEFemTO+LScWMBoxmO1gcYsOc90VY2u3x0Y4uJqmHORt
FEXCS+DiDRlRKJDLVKKwq/jJPWzNtgkvJe5R6YlNQUHftG0iODfyj0cdDWSVtRyE
tNrk3FYLBZ8TUjydSlALmweCK8hu9t6lg8rXUOy3xfzbxdBhdm7bAk7OlEq83vhU
45zGSwlYS9MSZF0W2yC/DZ60WPGx2580h5jwEMiZgfaJ35TGMWSoNqm6u502Kqjr
cyGRxNEnvt/06fbIrMmjTjP+SkZxDqTsOoKYlfyc85nED91bG4hG5VtxBy/tJhwT
LRt27siZP92Qzvb/GZvtoBz5QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRpz3Td
6KrFnJZXRiT8yhNFBBawMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4
QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR
cnY3LWNZbS1XdkstVm8tTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABbqcqgXCgk0MuQhzM8hWEOt5XMbcQf2oAuTPJkhNnvVfksqJhdq0E16RXAAu
D8hEdY/EOwCz6wXIATg0NjzHzjwHzxFTfggaZd4UQj28/WJDTQzPCrJWpR4lnl5e
+LFB23cLQGEvGo/f2xbsk49sViHtv5A8ycU0qtXUNr4i9ynjQCnNzazkqWhAQbyk
NGo4LmDckE8YaNjAR1++ewq1gteMN2zFWlYyxHq3npCM34wv7k7G1TqD3pHgzv7M
x2u1CCDczvCjOSbVogixyW9Ouj9UzK2EcpzGZEq6xwTDnYeFCpwZKKtqV56/obR9
xU3PVV/W0qZBWyNQXAkv10U3wA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:52 2026 by rpki-client