
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
File: 4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json)
Hash identifier: UlDPPYgnHrZrPXfyKozcbfwVbT3U7PmeMVfyPsZlSOg=
Subject key identifier: 6C:CE:EE:CF:90:7E:7A:45:32:7B:A7:B6:08:BA:B2:BF:18:AB:20:14
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial: 063C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
Manifest number: 0616
Signing time: Tue 02 Jun 2026 22:56:46 +0000
Manifest this update: Tue 02 Jun 2026 22:56:46 +0000
Manifest next update: Tue 09 Jun 2026 22:56:46 +0000
Files and hashes: 1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: J/lWTkO2xlFGlliSm+SAjYzwjQBByHVbEHkj04j7lgQ=)
2: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: TBXfHIsLBP1r3Og38/Zn+SGz/Jmiive4bvBF8Q5gW6Q=)
3: 6D655B7CAF4F11F0A741B236C4F9AE02.roa (hash: 2NIJ+RBIKW5iZiN3H8lcUO6ml0C3TxyzXOWCEv8U7M8=)
4: F650791EF01411ED9210D060C4F9AE02.roa (hash: AWc+boEStiOUVPv+8IUahYFAvtg7A+MrQdgGzHZN4Yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 22:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1596 (0x63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Validity
Not Before: Jun 2 22:56:46 2026 GMT
Not After : Jun 9 22:56:46 2026 GMT
Subject: CN=6a1f5fae-437b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c2:9e:74:da:dc:3f:33:87:6f:3a:39:37:a7:
50:65:9c:ed:60:9b:39:46:c1:c0:1d:41:7d:98:71:
ee:0b:55:88:3a:18:76:0d:38:fb:05:56:d5:4d:86:
3a:84:17:bb:00:4c:89:e0:0d:f9:07:61:e9:fc:73:
51:4a:05:7b:a6:61:da:8b:e3:2d:07:4b:8c:58:b4:
15:da:25:d0:a3:b2:1f:fd:dd:c9:02:39:a3:4f:cf:
76:93:7a:1d:4b:8e:7b:4c:f7:d6:44:da:d3:96:fc:
4d:a6:23:5f:3b:8c:b6:d2:e1:58:4b:5a:c9:40:f1:
f4:e0:e3:f1:0a:28:b2:2d:99:9c:81:c7:42:e9:d1:
8a:88:c3:fa:12:a2:87:5d:34:c5:3a:59:da:e1:da:
af:a4:9e:52:59:fa:c1:48:f4:8f:e8:1a:06:3e:ef:
be:02:60:c9:3f:77:02:44:d2:94:05:9f:5d:03:17:
ac:2e:3c:4f:5a:93:5c:6f:7e:e5:31:60:50:3b:06:
00:81:13:2b:af:ba:b0:14:2b:04:a5:60:67:f6:1d:
dd:60:58:6e:57:d6:39:75:93:c3:34:1f:ff:05:90:
4e:5f:6f:2a:97:b9:18:cd:05:af:13:21:e8:6b:9b:
ab:59:00:94:36:c0:24:9f:b5:32:e1:a4:58:74:52:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CE:EE:CF:90:7E:7A:45:32:7B:A7:B6:08:BA:B2:BF:18:AB:20:14
X509v3 Authority Key Identifier:
keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d4:13:72:ac:9e:c8:e2:e2:25:19:29:f6:f6:20:5f:56:e5:
24:a3:6c:62:77:c6:1c:9e:0a:df:eb:21:f0:fc:8f:b4:4b:3b:
bf:cb:d1:9e:87:42:0f:3e:99:ed:a6:ce:00:42:30:1f:17:9b:
59:b4:ad:b9:40:65:74:6b:ba:7e:55:34:ee:a0:37:3e:f8:bc:
78:5e:25:02:7c:6f:59:5a:bf:b7:e9:f3:62:9b:69:0e:51:e8:
aa:f2:55:c2:d0:fb:39:b2:1a:e2:57:05:24:52:b3:65:42:bd:
71:96:93:d1:f2:53:f3:eb:a5:0d:c6:d8:6f:41:c3:df:97:81:
f9:58:61:c0:bc:25:72:16:a2:84:a9:62:00:12:bb:5c:1a:74:
63:3b:b5:88:35:da:75:79:7f:09:c2:13:bb:75:a6:58:29:3a:
68:67:65:8d:f4:11:eb:0b:43:a5:07:f3:a1:88:d7:62:35:19:
ba:73:be:83:3a:a0:90:70:d7:c9:9a:17:51:b6:9c:67:bc:31:
0b:d5:70:81:32:61:95:e6:7e:05:93:15:c8:da:1c:0d:79:b7:
f6:91:19:bb:3c:ff:f0:ac:4e:bd:dd:af:41:40:86:d9:9a:06:
a1:d3:3b:5d:32:9a:02:09:ee:0c:81:dc:2d:32:d2:2e:9c:56:
a8:ff:5a:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNDRTkxMTAvBgNVBAUTKEUwOTk2MTE1NTA4QTNBRDU5OTE1REJBQkNDQjY5NkRC
QTBCNENDNzIwHhcNMjYwNjAyMjI1NjQ2WhcNMjYwNjA5MjI1NjQ2WjAYMRYwFAYD
VQQDEw02YTFmNWZhZS00MzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3sKedNrcPzOHbzo5N6dQZZztYJs5RsHAHUF9mHHuC1WIOhh2DTj7BVbVTYY6
hBe7AEyJ4A35B2Hp/HNRSgV7pmHai+MtB0uMWLQV2iXQo7If/d3JAjmjT892k3od
S457TPfWRNrTlvxNpiNfO4y20uFYS1rJQPH04OPxCiiyLZmcgcdC6dGKiMP6EqKH
XTTFOlna4dqvpJ5SWfrBSPSP6BoGPu++AmDJP3cCRNKUBZ9dAxesLjxPWpNcb37l
MWBQOwYAgRMrr7qwFCsEpWBn9h3dYFhuV9Y5dZPDNB//BZBOX28ql7kYzQWvEyHo
a5urWQCUNsAkn7Uy4aRYdFI0zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzO7s+Q
fnpFMnuntgi6sr8YqyAUMB8GA1UdIwQYMBaAFOCZYRVQijrVmRXbq8y2ltugtMxy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0NFOS8wQUIxRDM5NkY1
MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090V1pGZHVyekxhVzI2QzB6
SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRKbGhGVkNLT3RXWkZkdXJ6TGFXMjZDMHpISS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0NFOS8wQUIxRDM5NkY1MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090
V1pGZHVyekxhVzI2QzB6SEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj9QTcqyeyOLiJRkp9vYgX1blJKNsYnfGHJ4K3+sh8PyPtEs7v8vRnodCDz6Z
7abOAEIwHxebWbStuUBldGu6flU07qA3Pvi8eF4lAnxvWVq/t+nzYptpDlHoqvJV
wtD7ObIa4lcFJFKzZUK9cZaT0fJT8+ulDcbYb0HD35eB+VhhwLwlchaihKliABK7
XBp0Yzu1iDXadXl/CcITu3WmWCk6aGdljfQR6wtDpQfzoYjXYjUZunO+gzqgkHDX
yZoXUbacZ7wxC9VwgTJhleZ+BZMVyNocDXm39pEZuzz/8KxOvd2vQUCG2ZoGodM7
XTKaAgnuDIHcLTLSLpxWqP9agg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 05:20:26 2026 by rpki-client