
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json)
Hash identifier: JE3/VUTTmot+d6XiRJ7DwWUiU71YaZuGy4ERZ5GUfsI=
Subject key identifier: B7:15:73:7B:64:E9:59:1B:96:60:2E:A7:79:D6:1C:18:22:BF:8D:59
Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Certificate serial: 0267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
Manifest number: 025C
Signing time: Fri 09 Oct 2026 02:42:15 +0000
Manifest this update: Fri 09 Oct 2026 02:42:15 +0000
Manifest next update: Fri 16 Oct 2026 02:42:15 +0000
Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: lzsQxdrnC6OGNKHkUi6Ox9/tHjoQWSlsh2sx1TNRw08=)
2: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: 4+MCHLMN337B5RTZTokxnplPrkpGKjeWgwbYWmw0fsk=)
3: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: CnQdXrVdbfHUOklxI7z70j5KZwSvtEik5podERJ5fAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 02:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Validity
Not Before: Oct 9 02:42:15 2026 GMT
Not After : Oct 16 02:42:15 2026 GMT
Subject: CN=6ac85487-d2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:76:40:5f:1f:31:84:8d:6c:e3:69:00:98:
9d:3b:69:58:92:21:d8:7b:90:a7:de:ac:05:eb:c5:
ee:4f:4b:5e:0e:a3:84:59:3b:f7:b2:14:61:36:13:
ee:a9:03:a7:fa:b7:a7:2c:50:0c:11:cf:82:98:1a:
69:62:28:a9:d1:e4:32:07:32:a4:05:68:15:2a:0a:
84:c2:ad:b0:f5:8f:f4:0a:a3:cf:d4:cb:b0:81:e9:
cc:c8:b5:d9:a5:07:d6:72:40:16:7e:19:70:e0:f1:
0a:2a:38:7c:39:2a:f5:3b:50:f5:43:dc:9a:96:0a:
dd:99:b0:ad:e2:fc:53:2a:b6:a0:87:0f:c7:2c:97:
ab:09:e4:9a:a1:fa:e4:1d:a1:55:af:0f:52:27:ef:
74:fc:97:71:a9:3c:72:05:8d:75:9b:df:3b:6c:bc:
d3:df:d7:a6:7a:39:01:81:38:0c:70:90:9f:44:e2:
da:e9:bf:30:fe:48:cb:4d:9e:82:a8:f6:df:ba:cb:
b7:da:17:05:9c:57:2f:c7:2c:c0:85:fc:49:68:4a:
cb:45:e7:3a:2a:54:44:0d:96:e0:b0:4f:b5:b1:0d:
1b:e6:e1:7c:cd:5f:75:a6:b1:e3:ba:9e:4c:a5:89:
b6:a7:07:92:9b:3c:95:05:c3:70:47:8a:88:39:63:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:15:73:7B:64:E9:59:1B:96:60:2E:A7:79:D6:1C:18:22:BF:8D:59
X509v3 Authority Key Identifier:
keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:47:64:01:77:1f:4a:19:6b:0f:03:36:c5:57:f6:b3:3e:b7:
d8:fb:7b:71:03:61:34:d7:df:14:75:58:19:5b:ee:e5:06:64:
76:0e:b2:a6:54:f3:3e:21:f7:98:82:5e:12:b6:2d:93:d7:f5:
a6:f2:f2:2d:56:0b:f7:5e:a1:3e:80:53:4b:e3:f2:1c:e1:9a:
0a:ac:0a:52:28:c2:84:04:79:3b:a8:9a:23:0e:9e:a7:1d:3a:
09:9a:88:c7:09:40:66:4c:3a:7e:97:98:97:e6:ac:4e:43:2a:
69:0f:ec:8f:17:ef:58:b6:ba:53:b2:92:c2:21:a7:e7:2c:e7:
3d:af:c7:2b:d9:16:fd:42:9a:20:cd:ed:14:cd:c8:bb:01:4b:
b4:d7:c1:83:2c:6a:e6:5c:49:e0:5a:74:1e:19:c5:c0:d3:14:
e0:1b:9a:66:31:cd:70:0c:3c:cb:f6:eb:ff:56:e7:77:96:91:
cc:69:41:c0:e3:6a:7a:3f:dc:b8:84:7f:8c:db:87:cc:c9:bd:
57:7a:3d:12:41:3e:b4:81:99:9a:3c:19:d8:2f:51:e5:07:68:
e8:2a:c4:6f:81:59:99:0a:d9:1a:f2:95:11:46:e1:a0:64:c2:
61:35:1d:d6:08:68:f5:4e:f0:1a:15:1e:0c:e6:18:4d:d5:ee:
4c:48:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:40:47 2026 by rpki-client