
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier: QV76uP7WFRP20sIQkHab3Np0aIqOvA18RSegEli3SY4=
Subject key identifier: 91:D5:FB:17:00:46:9B:B1:FF:E7:07:76:FE:BB:94:C7:F4:8F:7E:43
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial: 017B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number: 0172
Signing time: Thu 03 Sep 2026 04:59:08 +0000
Manifest this update: Thu 03 Sep 2026 04:59:07 +0000
Manifest next update: Thu 10 Sep 2026 04:59:07 +0000
Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: RGUZ/zpLQA4xKP6dqNu173FO4/4fgjq0LPWTbedRE1o=)
2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: oemFiSu7xvtYlYRUpCkXZaggbkGyG52ArxoSenXNp0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 04:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Validity
Not Before: Sep 3 04:59:07 2026 GMT
Not After : Sep 10 04:59:07 2026 GMT
Subject: CN=6a98fe9c-d9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:4c:ea:ff:94:76:41:3d:aa:d6:1a:82:ae:
66:75:b0:e4:22:e8:f1:af:70:3f:86:21:94:a5:2a:
52:ee:94:44:50:a5:33:3d:bc:b5:2d:fe:e7:88:59:
77:7e:74:7f:f6:ee:57:65:17:83:af:fa:cf:90:13:
13:86:8e:ef:17:26:e6:9f:6a:73:2b:30:9a:84:d2:
48:c5:ce:9b:41:07:1d:f6:d6:fe:3a:07:e7:e0:a2:
0c:18:54:59:e9:ad:2e:5c:f5:e7:da:48:45:be:30:
c8:29:ef:72:97:a8:0a:5e:39:58:aa:a6:49:fe:3f:
06:35:18:e8:f6:04:c5:46:4d:52:c4:73:22:0f:03:
b3:0a:5d:10:4a:99:f6:bc:cb:65:b9:c6:91:38:a7:
00:14:bd:74:0c:3a:f6:6d:0a:94:39:eb:ea:4a:5a:
fd:f1:b5:6b:b7:66:57:c7:ad:a6:f9:98:83:57:cf:
48:41:a0:5f:eb:3a:5f:75:bc:95:9a:e5:2a:8b:c1:
8f:1d:49:b9:2f:4f:83:9a:90:ec:35:e4:b6:db:26:
3a:6b:6a:6f:47:f0:29:96:37:88:41:33:a1:cc:28:
d1:7c:cb:78:57:f5:52:90:64:79:2f:57:70:af:7a:
6a:21:76:ee:2d:09:af:ea:c5:18:ec:a9:9d:5a:70:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:FB:17:00:46:9B:B1:FF:E7:07:76:FE:BB:94:C7:F4:8F:7E:43
X509v3 Authority Key Identifier:
keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:51:9c:b1:82:fb:dd:63:88:b6:e9:44:d8:8e:b0:79:01:b8:
73:96:bf:63:83:03:0b:55:83:b3:37:83:64:1a:e8:83:20:52:
5e:3c:a7:9f:70:1c:60:e9:6f:f7:b5:eb:65:a0:5a:fc:13:38:
af:2f:4e:70:17:34:b5:04:2b:24:5a:f8:26:54:12:8d:2d:ae:
00:4d:12:d0:72:9f:c6:fb:91:57:09:98:1a:ba:bb:85:4c:9e:
89:43:41:7e:46:cf:44:81:27:24:e9:c5:71:75:d2:ea:08:c1:
df:3c:e8:32:57:4d:4c:37:0d:65:b9:d5:8f:81:1d:6c:3e:80:
e1:88:ab:58:0f:c7:c0:ef:28:b9:76:df:56:94:2e:13:9c:26:
37:22:73:b1:be:a9:e2:22:19:1f:dd:59:b7:19:61:3b:d5:5d:
08:26:1d:05:e1:9d:7f:20:1e:89:39:15:ed:b3:9a:ed:29:ba:
de:48:f6:b9:8f:02:04:ee:80:2c:79:62:9e:5d:1c:00:6e:a0:
6a:ab:21:32:34:7b:79:18:58:27:67:5c:3e:fa:8a:08:92:89:
2e:9b:9d:a0:e2:fe:39:63:2d:66:36:c2:a0:91:d7:fc:37:45:
d4:5c:8c:63:a0:b6:19:13:1c:18:c6:00:38:16:5d:2c:59:9c:
ed:68:6d:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU2MDAxMTAvBgNVBAUTKEUwQjk0NThGNjk4MjVGRjgyOTM4N0IxMzlFODhGRDNC
RDY3NDAwODcwHhcNMjYwOTAzMDQ1OTA3WhcNMjYwOTEwMDQ1OTA3WjAYMRYwFAYD
VQQDEw02YTk4ZmU5Yy1kOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmAVM6v+UdkE9qtYagq5mdbDkIujxr3A/hiGUpSpS7pREUKUzPby1Lf7niFl3
fnR/9u5XZReDr/rPkBMTho7vFybmn2pzKzCahNJIxc6bQQcd9tb+Ogfn4KIMGFRZ
6a0uXPXn2khFvjDIKe9yl6gKXjlYqqZJ/j8GNRjo9gTFRk1SxHMiDwOzCl0QSpn2
vMtlucaROKcAFL10DDr2bQqUOevqSlr98bVrt2ZXx62m+ZiDV89IQaBf6zpfdbyV
muUqi8GPHUm5L0+DmpDsNeS22yY6a2pvR/ApljeIQTOhzCjRfMt4V/VSkGR5L1dw
r3pqIXbuLQmv6sUY7KmdWnA0cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHV+xcA
Rpux/+cHdv67lMf0j35DMB8GA1UdIwQYMBaAFOC5RY9pgl/4KTh7E56I/TvWdACH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yMjFCQUVCRTc3
RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hfZ3BPSHNUbm9qOU85WjBB
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzRMbEZqMm1DWF9ncE9Ic1Rub2o5TzlaMEFJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTYwMC8yMjFCQUVCRTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hf
Z3BPSHNUbm9qOU85WjBBSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUFGcsYL73WOItulE2I6weQG4c5a/Y4MDC1WDszeDZBrogyBSXjynn3AcYOlv
97XrZaBa/BM4ry9OcBc0tQQrJFr4JlQSjS2uAE0S0HKfxvuRVwmYGrq7hUyeiUNB
fkbPRIEnJOnFcXXS6gjB3zzoMldNTDcNZbnVj4EdbD6A4YirWA/HwO8ouXbfVpQu
E5wmNyJzsb6p4iIZH91ZtxlhO9VdCCYdBeGdfyAeiTkV7bOa7Sm63kj2uY8CBO6A
LHlinl0cAG6gaqshMjR7eRhYJ2dcPvqKCJKJLpudoOL+OWMtZjbCoJHX/DdF1FyM
Y6C2GRMcGMYAOBZdLFmc7WhtaQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:25:48 2026 by rpki-client