
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier: XtLhoBsAhcJWkEVZ+GnrcXtYwIWt5Szz4WPt4mintt4=
Subject key identifier: 32:59:A8:64:0F:3A:A1:B7:A1:3A:24:CE:5F:E8:C9:18:A8:83:C3:27
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number: 0113
Signing time: Tue 03 Mar 2026 05:29:31 +0000
Manifest this update: Tue 03 Mar 2026 05:29:30 +0000
Manifest next update: Tue 10 Mar 2026 05:29:30 +0000
Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: l5jrjIPOl8M5DmUAToyotp1B7pdNa+koiC3wUvWr/CI=)
2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: y1LKkgDaRj1ISWViw1cpYZqZzU1kENkFG+OyOnuW6h8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Validity
Not Before: Mar 3 05:29:30 2026 GMT
Not After : Mar 10 05:29:30 2026 GMT
Subject: CN=69a671bb-302b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:de:39:c6:0c:9f:f4:5b:fc:ad:5a:f1:eb:
8a:19:1b:cd:29:e8:51:0a:34:af:42:75:5f:94:45:
00:64:de:80:e9:9a:22:f4:38:5a:00:8c:dc:d1:79:
e3:2c:d2:11:1e:18:aa:5b:b1:91:7b:ec:8c:ab:f0:
b6:32:61:ff:b8:ca:0c:be:19:fe:1a:54:82:9e:37:
1d:80:e0:fa:4f:75:df:c1:87:a3:9f:6b:d7:3f:ca:
50:a1:0f:d9:50:89:94:9c:8b:d3:a6:f0:78:b1:7e:
ab:67:22:24:c4:24:98:f1:0d:77:01:34:f6:ab:02:
06:77:89:a6:71:b8:e1:da:34:4a:34:1c:36:eb:f3:
55:75:d2:f0:7d:5f:a8:fe:72:ed:53:2e:cd:21:08:
f8:ed:5a:62:c3:3d:cd:55:57:66:06:fd:16:b5:df:
87:58:85:9c:c1:31:36:39:40:e6:b2:b1:91:9a:47:
bf:58:1f:79:fe:af:4d:75:96:7f:3b:fc:22:15:bc:
c7:15:0b:1d:24:59:6f:8d:c0:a6:21:2f:5d:59:1a:
75:80:4b:4b:5d:cf:a0:6a:dc:ef:30:ba:47:17:16:
5a:a5:7c:d8:cc:fb:aa:91:f1:be:99:d7:ea:1d:20:
3c:c7:f6:d2:90:e9:7d:75:41:38:5c:3f:1d:ba:62:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:59:A8:64:0F:3A:A1:B7:A1:3A:24:CE:5F:E8:C9:18:A8:83:C3:27
X509v3 Authority Key Identifier:
keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:30:83:4f:d6:26:86:ba:7a:93:7d:72:11:08:8d:33:01:16:
41:fc:56:ec:a7:5c:71:d0:9f:23:7c:d8:a8:5f:74:6a:83:11:
de:fe:0a:94:4c:c4:67:c1:7f:58:49:b9:6d:3f:68:11:fb:10:
95:54:a3:e4:5e:34:f4:12:b2:53:e9:2c:97:46:7a:88:6e:15:
f8:86:f6:fa:68:7d:3f:c4:df:f4:39:6a:84:4d:7b:18:44:99:
f1:a0:e2:3d:4d:06:aa:45:46:4a:f2:9a:3a:9c:dc:99:bf:3f:
56:46:a1:7b:b6:e6:0c:03:03:52:70:53:5a:53:54:63:5e:2b:
57:45:d4:61:da:3a:c5:1a:84:3c:db:77:d2:cc:53:94:97:d5:
aa:15:53:cb:3e:82:a5:7a:29:fe:e2:4e:f9:73:3e:39:f3:1d:
10:9e:25:d1:05:90:2d:f6:00:6d:44:5c:86:96:fe:e7:ad:86:
89:d6:b8:ab:53:1e:2f:e5:61:b0:1e:79:95:b0:bd:71:4e:4f:
18:9f:31:43:cc:b7:07:db:93:f8:fd:b8:bb:b3:69:62:48:74:
46:6b:ae:3e:e1:8e:ab:82:56:b4:5c:fa:c4:4a:73:a2:98:d6:
06:20:1f:39:f7:2d:15:ea:b1:35:25:76:e4:25:f5:74:39:b7:
3a:1e:3c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:58 2026 by rpki-client