
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File: 4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier: NHchkgQwQOEZj9PcbyLgJE/3eam+eOnhpzpyKmJS7rQ=
Subject key identifier: 99:61:03:C1:D8:38:7F:85:AF:95:92:07:32:9F:FA:F6:6C:56:E5:D3
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer: /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number: 3D
Signing time: Tue 03 Mar 2026 08:05:31 +0000
Manifest this update: Tue 03 Mar 2026 08:05:30 +0000
Manifest next update: Tue 10 Mar 2026 08:05:30 +0000
Files and hashes: 1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: irB0CLmO3IVSl6OC/Ad7Mg2v4eLG6ZMZuAMMUc/cMmQ=)
2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Validity
Not Before: Mar 3 08:05:30 2026 GMT
Not After : Mar 10 08:05:30 2026 GMT
Subject: CN=69a6964b-141f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:38:12:34:a0:9c:8d:86:aa:7c:e8:cb:04:
2c:9e:81:0d:c3:16:05:d7:7a:22:a1:52:dd:f9:c3:
fc:00:97:18:e6:a0:b6:69:c2:ca:e1:0f:26:81:4c:
8f:d9:33:2d:cc:4c:48:4e:42:27:d5:ce:08:3e:f7:
f4:ea:50:12:7b:a4:98:ad:9e:52:45:b3:b7:61:2d:
09:0f:b8:8d:23:e4:8e:79:28:3e:18:d1:db:18:53:
b2:e3:6c:03:bd:9e:16:91:6f:62:17:23:88:3d:6f:
2b:72:96:c6:04:fb:64:b1:a9:d7:c1:71:92:e6:ce:
34:b2:6e:37:52:57:cb:01:6a:8e:6e:4d:a0:ba:30:
0e:8d:43:12:65:92:10:3c:67:e4:a5:43:3f:ad:ec:
53:91:da:50:85:e4:32:c8:8c:98:e1:4a:b2:6d:b0:
8c:0c:cc:e2:71:f3:52:3f:8b:4a:48:38:c0:ca:11:
d5:41:a3:21:49:1f:a9:c2:71:c3:a8:f7:5f:a8:ba:
2d:32:98:3b:85:f1:d1:84:16:40:1d:c0:0d:be:58:
55:a0:cb:8f:44:bc:1c:6e:bd:0a:d3:c2:dc:e1:3a:
03:86:92:7c:58:80:7d:49:62:bd:16:63:96:1b:96:
55:dd:41:c0:6c:12:b3:88:77:20:4a:fb:5c:c2:9f:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:61:03:C1:D8:38:7F:85:AF:95:92:07:32:9F:FA:F6:6C:56:E5:D3
X509v3 Authority Key Identifier:
keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:42:0e:9e:b9:47:78:2a:66:ef:a9:55:de:91:61:a4:4d:48:
24:b4:4d:68:b0:ff:e5:99:d0:1f:cb:2b:eb:1f:f8:c5:bf:9d:
13:dc:ec:a9:a4:a6:46:69:b8:cd:19:18:bb:8a:81:f7:1a:df:
81:ec:6e:05:94:58:5b:21:7d:d6:ef:44:96:52:ec:6a:e5:fe:
7a:14:fb:0e:41:32:fd:c7:7f:aa:99:19:c1:53:81:75:1a:15:
79:40:3a:dc:51:6b:75:4c:96:d4:72:05:5e:83:f6:a4:1d:07:
36:30:ca:64:b3:b1:1e:44:74:75:22:ba:fd:f9:2c:c5:c6:5f:
1b:98:fc:33:8c:a7:a7:61:c9:60:9d:17:6c:4e:67:48:6b:1e:
48:68:87:15:fc:d3:f3:59:d2:04:4b:75:3b:61:51:da:68:54:
d4:f8:da:16:1e:bb:72:18:50:de:2d:1a:4d:82:22:5a:ab:c1:
5b:1a:70:ed:4e:bb:dd:53:ee:f9:ab:80:62:95:8e:29:54:d4:
38:90:32:eb:44:22:5c:7b:d2:77:3a:dc:ff:9d:32:d0:53:ce:
41:15:39:2d:4b:c6:8b:c4:56:57:a4:64:f1:e3:20:0f:f8:2d:
54:5b:f3:ce:ec:f8:28:d3:e9:96:5a:c9:31:b1:90:2c:37:56:
3c:e8:41:8d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
M0I4NzExMC8GA1UEBRMoRTAxRTlEMzZFQTI0OERDMUY2NzdDMzE0QkY2QzkxODI5
MEU2M0ZGMjAeFw0yNjAzMDMwODA1MzBaFw0yNjAzMTAwODA1MzBaMBgxFjAUBgNV
BAMTDTY5YTY5NjRiLTE0MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVvjgSNKCcjYaqfOjLBCyegQ3DFgXXeiKhUt35w/wAlxjmoLZpwsrhDyaBTI/Z
My3MTEhOQifVzgg+9/TqUBJ7pJitnlJFs7dhLQkPuI0j5I55KD4Y0dsYU7LjbAO9
nhaRb2IXI4g9bytylsYE+2SxqdfBcZLmzjSybjdSV8sBao5uTaC6MA6NQxJlkhA8
Z+SlQz+t7FOR2lCF5DLIjJjhSrJtsIwMzOJx81I/i0pIOMDKEdVBoyFJH6nCccOo
91+oui0ymDuF8dGEFkAdwA2+WFWgy49EvBxuvQrTwtzhOgOGknxYgH1JYr0WY5Yb
llXdQcBsErOIdyBK+1zCn66HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmWEDwdg4
f4WvlZIHMp/69mxW5dMwHwYDVR0jBBgwFoAU4B6dNuokjcH2d8MUv2yRgpDmP/Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzQjg3LzJFMjZCNDgyQkNF
MzExRjA5ODcxNzA0OEM0RjlBRTAyLzRCNmROdW9ramNIMmQ4TVV2MnlSZ3BEbVBf
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNEI2ZE51b2tqY0gyZDhNVXYyeVJncERtUF9JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz
Qjg3LzJFMjZCNDgyQkNFMzExRjA5ODcxNzA0OEM0RjlBRTAyLzRCNmROdW9ramNI
MmQ4TVV2MnlSZ3BEbVBfSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBbQg6euUd4KmbvqVXekWGkTUgktE1osP/lmdAfyyvrH/jFv50T3OyppKZGabjN
GRi7ioH3Gt+B7G4FlFhbIX3W70SWUuxq5f56FPsOQTL9x3+qmRnBU4F1GhV5QDrc
UWt1TJbUcgVeg/akHQc2MMpks7EeRHR1Irr9+SzFxl8bmPwzjKenYclgnRdsTmdI
ax5IaIcV/NPzWdIES3U7YVHaaFTU+NoWHrtyGFDeLRpNgiJaq8FbGnDtTrvdU+75
q4BilY4pVNQ4kDLrRCJce9J3Otz/nTLQU85BFTktS8aLxFZXpGTx4yAP+C1UW/PO
7Pgo0+mWWskxsZAsN1Y86EGN
-----END CERTIFICATE-----
Generated at Wed Mar 4 14:01:40 2026 by rpki-client