
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft
File: i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft (raw, json)
Hash identifier: 3sWbG91WnL0w7laQqYq46R5xhbzbmeQzC0DO1xqWr84=
Subject key identifier: 42:D3:C2:CE:10:67:7B:D4:8C:9D:35:BF:55:AA:9E:5C:AE:D2:C5:5E
Authority key identifier: 8B:87:F9:10:DE:28:C3:ED:43:B7:0A:C8:C8:55:43:7E:94:A5:14:DF
Certificate issuer: /CN=A9148434/serialNumber=8B87F910DE28C3ED43B70AC8C855437E94A514DF
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4f5EN4ow-1DtwrIyFVDfpSlFN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft
Manifest number: 44
Signing time: Mon 19 Oct 2026 09:11:21 +0000
Manifest this update: Mon 19 Oct 2026 09:11:20 +0000
Manifest next update: Mon 26 Oct 2026 09:11:20 +0000
Files and hashes: 1: i4f5EN4ow-1DtwrIyFVDfpSlFN8.crl (hash: QKERYktlzaAV4K7bEEQN/T/mo+nQa9h0ykSWD7s1LAM=)
2: C94BF19E662911F1B3091723A147A888.roa (hash: HtOAVYCqkE3fGkuw5gCvQcRd0jozLG+SV+vxhR2Bdhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.crl
rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4f5EN4ow-1DtwrIyFVDfpSlFN8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 09:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148434, serialNumber=8B87F910DE28C3ED43B70AC8C855437E94A514DF
Validity
Not Before: Oct 19 09:11:20 2026 GMT
Not After : Oct 26 09:11:20 2026 GMT
Subject: CN=6ad5deb9-139f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:af:f5:b6:b5:70:a5:f2:a1:79:ee:a4:86:
c8:14:28:3d:8f:8c:29:08:64:92:7c:21:d5:3b:85:
88:47:9e:d3:81:a2:83:b5:48:ac:f5:15:2f:a3:88:
ea:86:73:ba:73:65:9a:9e:46:fe:42:03:b4:95:73:
f4:c7:44:37:57:9f:75:27:44:f3:de:2f:8a:54:51:
02:98:d2:b6:a1:b3:b7:f2:ee:bc:dc:0f:99:e4:72:
12:df:7b:d6:8d:4b:41:32:72:35:ab:e7:bf:5b:c2:
ef:e9:dc:bf:81:92:05:84:58:a7:1d:3b:c2:e4:a6:
22:37:f9:4d:9d:ac:41:e2:20:82:04:43:fc:3f:97:
f7:6c:91:60:be:fb:91:e1:cf:44:b1:d5:7a:9a:bc:
f2:4c:77:ab:79:95:d4:78:0c:4d:0b:cd:0d:97:49:
72:fe:f0:39:f7:fd:4f:bc:56:24:fe:43:0a:e6:4b:
db:9f:36:e2:de:91:e1:70:37:b9:54:76:15:bf:07:
f2:8e:84:ce:99:99:d2:ec:65:91:d1:4e:c3:f0:9c:
a5:97:bb:ce:94:0d:bc:d0:fe:e0:1d:c1:5f:1b:2b:
fd:6c:fa:34:4b:af:cf:bd:7c:21:ab:ff:45:b7:3e:
d1:27:29:ab:03:4d:25:51:81:ae:99:c7:5f:9a:4b:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D3:C2:CE:10:67:7B:D4:8C:9D:35:BF:55:AA:9E:5C:AE:D2:C5:5E
X509v3 Authority Key Identifier:
keyid:8B:87:F9:10:DE:28:C3:ED:43:B7:0A:C8:C8:55:43:7E:94:A5:14:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4f5EN4ow-1DtwrIyFVDfpSlFN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:5a:18:8f:49:ce:fe:d7:d3:7a:2f:11:a2:cc:82:1b:20:17:
69:f9:48:dd:c3:8c:70:6d:0a:6b:ec:ec:61:09:77:02:cb:d9:
c1:9f:eb:d1:91:e8:a8:7f:dd:41:99:3e:cc:05:10:ee:3e:ac:
71:fa:80:4a:67:c6:11:64:71:45:a2:78:4c:fc:50:df:fa:43:
db:5e:9b:92:35:af:58:05:18:e6:bc:a6:0b:7f:54:80:9b:32:
3c:32:6d:25:55:37:50:27:3e:12:24:d7:31:98:d6:38:39:e6:
e4:ff:5e:2e:50:a5:5b:1c:40:bd:3d:dd:23:8a:7b:fe:0a:d4:
d6:27:93:22:5e:3c:53:d0:e3:22:cd:8b:66:e9:4b:6f:49:15:
58:e7:9a:b6:c8:10:40:5d:07:7c:1d:f3:b1:3d:02:6b:7e:2f:
24:12:cd:e3:d9:e7:1f:27:1c:39:08:4b:10:01:86:0a:9a:0a:
38:0e:7d:90:f9:be:d3:80:93:ad:b7:e8:4a:c8:84:82:8f:a4:
8b:b6:fe:95:12:03:3b:03:f1:fe:92:6a:ab:64:8b:40:12:68:
76:06:c6:48:1d:96:d4:8e:fb:b3:86:ed:39:40:4a:4d:78:29:
51:db:75:af:62:76:36:ff:3c:2c:96:d1:80:cc:79:29:7c:6b:
8c:9c:ad:8e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
ODQzNDExMC8GA1UEBRMoOEI4N0Y5MTBERTI4QzNFRDQzQjcwQUM4Qzg1NTQzN0U5
NEE1MTRERjAeFw0yNjEwMTkwOTExMjBaFw0yNjEwMjYwOTExMjBaMBgxFjAUBgNV
BAMTDTZhZDVkZWI5LTEzOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvTK/1trVwpfKhee6khsgUKD2PjCkIZJJ8IdU7hYhHntOBooO1SKz1FS+jiOqG
c7pzZZqeRv5CA7SVc/THRDdXn3UnRPPeL4pUUQKY0rahs7fy7rzcD5nkchLfe9aN
S0EycjWr579bwu/p3L+BkgWEWKcdO8LkpiI3+U2drEHiIIIEQ/w/l/dskWC++5Hh
z0Sx1XqavPJMd6t5ldR4DE0LzQ2XSXL+8Dn3/U+8ViT+QwrmS9ufNuLekeFwN7lU
dhW/B/KOhM6ZmdLsZZHRTsPwnKWXu86UDbzQ/uAdwV8bK/1s+jRLr8+9fCGr/0W3
PtEnKasDTSVRga6Zx1+aS+O1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQtPCzhBn
e9SMnTW/VaqeXK7SxV4wHwYDVR0jBBgwFoAUi4f5EN4ow+1DtwrIyFVDfpSlFN8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4NDM0L0Q0QTI5NkUyNjYy
NDExRjE4MzkyMkEyRDlFNDdBODg4L2k0ZjVFTjRvdy0xRHR3ckl5RlZEZnBTbEZO
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvaTRmNUVONG93LTFEdHdySXlGVkRmcFNsRk44LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4
NDM0L0Q0QTI5NkUyNjYyNDExRjE4MzkyMkEyRDlFNDdBODg4L2k0ZjVFTjRvdy0x
RHR3ckl5RlZEZnBTbEZOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBXWhiPSc7+19N6LxGizIIbIBdp+Ujdw4xwbQpr7OxhCXcCy9nBn+vRkeiof91B
mT7MBRDuPqxx+oBKZ8YRZHFFonhM/FDf+kPbXpuSNa9YBRjmvKYLf1SAmzI8Mm0l
VTdQJz4SJNcxmNY4Oebk/14uUKVbHEC9Pd0jinv+CtTWJ5MiXjxT0OMizYtm6Utv
SRVY55q2yBBAXQd8HfOxPQJrfi8kEs3j2ecfJxw5CEsQAYYKmgo4Dn2Q+b7TgJOt
t+hKyISCj6SLtv6VEgM7A/H+kmqrZItAEmh2BsZIHZbUjvuzhu05QEpNeClR23Wv
YnY2/zwsltGAzHkpfGuMnK2O
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:04:17 2026 by rpki-client