
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json)
Hash identifier: iZ5vuTzyOrEhfLizIGVXuyOVSBHiTzTh6+3KPi4bYqU=
Subject key identifier: CA:6F:FD:9B:AA:D3:4E:A4:78:EE:47:12:A8:5B:EC:F1:B1:5D:DB:E6
Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
Manifest number: 0213
Signing time: Thu 21 May 2026 02:56:39 +0000
Manifest this update: Thu 21 May 2026 02:56:38 +0000
Manifest next update: Thu 28 May 2026 02:56:38 +0000
Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: U74HWpi0Hd6kM+jWuzaeHrbBcXjdejds0klO2Bhhvmo=)
2: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: moXXvJLFKkIqyJw20Q1OuyiRN76hq8AL96LMv4bv4WY=)
3: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: W6ueRJhH8jQdhiEkMLdiQl56SAAwLpTfKRe8+DuwqEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Validity
Not Before: May 21 02:56:38 2026 GMT
Not After : May 28 02:56:38 2026 GMT
Subject: CN=6a0e7467-2c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:81:3f:bf:db:0f:f9:4f:26:fe:4d:77:40:
e3:a8:46:d8:14:c8:5e:5e:d0:a8:aa:fc:00:ca:40:
4b:aa:86:f6:42:0a:d3:a1:e1:32:93:5d:a6:67:5b:
0a:60:91:8c:03:36:76:67:de:20:55:48:b8:42:6f:
50:fb:a8:4a:ac:3e:88:a4:6b:50:b4:a7:7e:6c:df:
c9:38:15:12:15:e8:02:aa:69:0b:f8:26:b0:41:b3:
c2:91:aa:5b:6a:72:e7:c8:93:9b:da:63:78:81:f9:
ef:e1:c3:bc:62:12:b2:4d:ad:86:f8:86:a3:0a:79:
a2:e2:87:66:bf:18:0c:6b:29:7a:71:26:98:ce:fe:
aa:1d:5d:07:0c:aa:62:2d:87:c9:a4:39:d5:53:66:
ab:f4:bf:ab:03:4e:c7:d8:07:e7:6c:fe:d0:f5:fa:
cd:15:89:78:ec:c1:c5:04:5a:46:63:d3:b1:68:46:
2f:26:e6:a9:2d:05:7a:2e:f3:29:2f:1d:fe:c0:81:
cf:b7:cb:c0:86:5b:bb:96:f1:cf:b7:73:86:fd:15:
fb:c3:87:c0:88:93:ab:7f:25:a3:36:5f:53:2a:65:
99:16:48:cd:87:9f:90:ab:16:13:5e:d2:1f:8c:39:
97:ce:8e:f0:7c:1f:60:bd:b2:c1:35:53:4e:8d:77:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6F:FD:9B:AA:D3:4E:A4:78:EE:47:12:A8:5B:EC:F1:B1:5D:DB:E6
X509v3 Authority Key Identifier:
keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:39:fd:39:64:2a:64:7c:12:8f:59:05:0c:94:9e:7b:b8:1f:
66:6b:a6:f5:3d:3d:df:93:2c:00:c6:58:c2:f0:be:ec:c8:63:
0a:a5:13:7b:ca:03:1e:77:1f:be:40:93:6f:60:e7:f6:cf:6a:
19:c3:b7:09:78:0d:8c:bb:47:30:8b:3e:17:98:18:f9:be:71:
45:7e:7e:7e:fa:92:7b:fd:48:c4:85:87:ea:6c:75:74:09:8c:
05:82:37:29:8f:b9:c9:6a:2c:4f:58:db:85:13:41:f4:23:07:
04:73:0f:f3:81:80:37:82:ed:fc:69:78:52:8f:65:bc:39:e5:
8f:f8:b8:7b:35:f6:fa:75:c8:f8:cb:25:84:f3:7b:93:e9:d5:
ae:fc:89:cd:98:3b:1c:2b:21:80:c6:d3:d9:07:30:bb:fb:5f:
43:4a:b7:48:5b:c9:a0:20:6e:3c:ab:b5:6b:8c:d9:82:a8:dd:
c8:81:05:ea:18:40:6f:f1:23:cb:a7:bf:9f:e4:de:9b:dc:32:
ce:bf:44:fb:ad:b4:9d:34:c0:1a:4b:db:88:70:87:01:7a:29:
2e:ed:b7:12:ae:04:84:4e:ef:12:44:09:92:b8:09:60:70:43:
b4:13:21:8a:56:9c:04:5f:e1:81:01:67:0e:db:d8:0f:3b:65:
b1:8c:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:57 2026 by rpki-client