
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File: 4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier: QSU5R5BfMow+Ajy/9VA75yfyDZqtDF9bd3l/UULYL1o=
Subject key identifier: 19:59:45:1D:ED:75:26:50:81:A9:75:7A:17:8E:B2:41:EA:FE:B3:AD
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer: /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number: 9A
Signing time: Thu 03 Sep 2026 07:31:52 +0000
Manifest this update: Thu 03 Sep 2026 07:31:51 +0000
Manifest next update: Thu 10 Sep 2026 07:31:51 +0000
Files and hashes: 1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: bduB4Pvg139P+pOF8BTLO4I4h+ukwhamI6EOhzHtLbs=)
2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 07:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Validity
Not Before: Sep 3 07:31:51 2026 GMT
Not After : Sep 10 07:31:51 2026 GMT
Subject: CN=6a992268-35fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:37:ff:9e:ea:8c:f7:97:a7:4d:a6:d8:79:
d9:18:2e:00:15:4d:59:6f:1a:53:71:62:51:08:35:
4e:e0:f4:c0:da:b9:ed:60:aa:18:94:f7:8b:46:60:
86:6f:85:95:9e:55:93:62:0a:c7:1f:66:3f:8e:8e:
7a:c1:b7:c9:f6:77:6e:25:f6:30:e5:a0:0d:b3:34:
31:95:2d:b7:e4:e7:bb:b3:03:dc:de:7d:12:38:81:
c1:6a:a9:58:ee:eb:92:72:f9:53:dc:3f:1d:47:d1:
50:d3:a7:36:a6:a1:f8:66:6d:9d:2a:3a:49:5f:31:
14:77:ba:8d:4d:ba:56:27:4b:50:8a:19:eb:44:ae:
57:97:f4:06:41:a8:86:5b:bd:49:14:74:c1:6e:81:
2a:25:98:d8:3a:c1:bd:ed:a0:b3:a1:a0:4a:1b:70:
23:69:9d:bc:59:d0:ab:5f:42:9a:0e:d1:b4:fb:c1:
1c:45:45:93:3d:eb:e2:52:c8:12:5d:9a:ce:07:ae:
37:d5:b4:ad:3f:75:b5:11:99:4b:5c:4a:ef:4b:24:
1d:d9:86:ae:da:f6:45:5a:1e:60:b7:bd:f1:1b:8e:
9f:b7:05:34:14:00:21:71:fa:a4:18:b3:b5:d8:8d:
3a:03:ba:04:0b:f5:d3:b1:d5:15:56:be:05:85:f6:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:59:45:1D:ED:75:26:50:81:A9:75:7A:17:8E:B2:41:EA:FE:B3:AD
X509v3 Authority Key Identifier:
keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:64:39:be:2b:87:13:2c:98:04:ec:2f:09:5b:34:67:99:d9:
86:b2:bd:fb:b9:3c:de:56:ec:0c:48:05:19:aa:ad:24:94:63:
ad:76:0e:03:d2:97:38:1c:a5:88:ac:8a:a5:21:55:7c:53:4e:
0b:e5:55:d3:13:a2:42:d1:49:53:8c:e9:9c:ff:83:af:df:43:
e2:c4:01:91:1d:da:43:1f:05:3f:41:50:73:70:2e:7a:59:20:
e6:71:8c:64:bc:df:bf:bc:12:92:3c:44:48:8d:27:77:f0:ff:
05:1d:89:9d:09:ca:54:05:3c:13:ea:65:cb:27:93:49:08:29:
cb:d1:88:f9:c7:ba:b6:ee:e4:55:b3:37:70:03:2b:8d:08:e5:
4c:47:ca:89:1e:f2:9d:9b:0c:3d:21:92:9c:8b:be:c4:3a:f9:
5a:87:b8:0a:e7:8f:4c:49:5a:6d:56:d2:a3:3b:0b:a5:7b:4d:
a3:fd:96:27:2c:14:0d:72:51:45:16:ed:a9:43:0a:17:80:b3:
66:8b:af:0d:71:52:f7:4c:3a:4a:f7:1c:f9:ba:69:25:6e:49:
f0:1e:e3:69:c1:34:ff:db:67:86:d9:2d:15:0f:ad:a8:7e:39:
7e:af:e8:0b:13:a7:cc:d6:b8:8b:96:ba:bc:b6:6e:cc:13:9e:
5b:c7:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 13:22:29 2026 by rpki-client