
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File: 4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier: lgMdoLqVZikTeDNrxCvG1EGO9/lUx+XLCxAo09TPTSk=
Subject key identifier: DA:D7:46:47:C6:CE:7A:71:98:CC:6B:84:3B:D4:A0:3F:75:68:D6:E1
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer: /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number: 81
Signing time: Fri 17 Jul 2026 08:51:01 +0000
Manifest this update: Fri 17 Jul 2026 08:51:01 +0000
Manifest next update: Fri 24 Jul 2026 08:51:01 +0000
Files and hashes: 1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: mNHPA7jOuop8ujVeVDE436BOo6rOwjo46IYo2D1gwQE=)
2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Validity
Not Before: Jul 17 08:51:01 2026 GMT
Not After : Jul 24 08:51:01 2026 GMT
Subject: CN=6a59ecf5-f71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:32:bf:17:01:63:0e:d6:c8:eb:92:48:c8:
3f:a0:e1:11:a7:e4:1f:a5:f4:22:f5:bc:19:80:7a:
09:2d:c7:ce:b4:74:c4:16:a2:bd:20:12:54:e5:bf:
27:06:fb:18:c8:30:8b:7b:f4:63:de:e7:95:3c:46:
04:87:41:2a:e2:b7:ed:ee:a8:99:51:07:ee:33:b1:
13:ea:5c:20:39:dc:e2:ac:5d:c9:c9:f2:5a:26:b3:
1d:f2:3b:78:01:0f:8b:c8:ae:9f:8f:fa:13:30:cb:
0b:37:d1:ce:5f:d1:f3:19:31:bd:a3:e5:5d:ee:05:
f7:64:b6:6f:cb:82:53:9e:82:d6:5c:a1:b0:67:fe:
85:c3:a6:d5:e2:8e:2c:bc:4c:f2:88:49:0b:cf:f5:
e7:84:67:b1:46:b1:92:46:ca:26:5a:f1:32:ee:14:
3d:9a:b9:a8:0f:d6:5d:b1:aa:7c:77:26:ac:73:d4:
17:b5:f3:a8:cf:08:fd:f2:51:e2:d1:76:cc:07:dd:
9a:6b:83:66:d9:2c:f6:b1:e4:f6:29:b9:22:57:96:
84:64:15:19:3a:57:5e:39:09:98:5d:a3:33:ab:96:
15:e6:2c:e8:90:30:96:4e:f8:77:fe:82:f2:ec:ec:
94:e7:be:8d:c5:22:9f:9a:00:f1:ca:60:3a:24:21:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:46:47:C6:CE:7A:71:98:CC:6B:84:3B:D4:A0:3F:75:68:D6:E1
X509v3 Authority Key Identifier:
keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:05:e5:fb:88:b7:74:09:6b:cc:b6:83:4b:13:80:c7:9c:16:
10:18:a4:df:3e:ba:42:ed:a0:c8:2b:ae:68:c1:dd:db:5e:03:
2c:dd:28:ce:31:89:32:39:db:c9:f0:b6:28:95:40:5f:08:4f:
84:5a:31:05:b9:a4:7d:91:40:ac:fa:e9:ac:a4:16:b4:68:3a:
6a:86:90:d6:df:9e:0c:1c:a6:18:de:e6:e7:d0:7a:fa:48:c4:
54:b3:3e:87:8b:53:84:4a:18:2c:95:66:c3:59:8b:b8:f7:86:
98:05:d9:8c:16:43:a2:1c:0e:b4:52:1d:af:0e:40:89:6a:80:
c8:97:d1:7f:7f:70:4e:29:03:e5:dc:74:0c:d2:e5:5e:52:87:
33:aa:c6:71:32:32:07:bd:61:7c:03:bf:80:92:22:a7:f3:3f:
b2:9e:85:aa:19:04:1f:54:74:dc:36:ff:54:43:2a:87:c0:03:
da:9c:a3:d8:27:8f:e1:39:be:73:13:12:d0:79:31:db:93:60:
3c:6c:ae:75:11:b1:a0:07:59:6d:70:87:f8:5f:74:18:4e:1a:
b6:a3:a0:26:9b:0e:a1:aa:2d:df:f7:5e:73:be:c1:51:c8:aa:
3a:88:fc:5c:cb:3d:63:26:ba:a0:d1:3e:96:d5:cd:0d:e1:02:
fa:99:8b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:09:23 2026 by rpki-client