
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
File: 4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json)
Hash identifier: jvA50QbS+69kvoQa6mNFvIZloFiuHaX6Ewa6MQ3VPu8=
Subject key identifier: 6B:2A:F0:9E:EF:C7:07:54:77:85:60:A3:2F:74:52:23:9C:87:0F:0F
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial: 0654
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
Manifest number: 062E
Signing time: Mon 20 Jul 2026 23:33:27 +0000
Manifest this update: Mon 20 Jul 2026 23:33:27 +0000
Manifest next update: Mon 27 Jul 2026 23:33:27 +0000
Files and hashes: 1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: 81JtjpYpwednmvJrU7+q9Da88UxdneEda5R2udQfYrY=)
2: F650791EF01411ED9210D060C4F9AE02.roa (hash: AWc+boEStiOUVPv+8IUahYFAvtg7A+MrQdgGzHZN4Yg=)
3: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: TBXfHIsLBP1r3Og38/Zn+SGz/Jmiive4bvBF8Q5gW6Q=)
4: 6D655B7CAF4F11F0A741B236C4F9AE02.roa (hash: 2NIJ+RBIKW5iZiN3H8lcUO6ml0C3TxyzXOWCEv8U7M8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620 (0x654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Validity
Not Before: Jul 20 23:33:27 2026 GMT
Not After : Jul 27 23:33:27 2026 GMT
Subject: CN=6a5eb047-93f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:5c:e5:cd:94:33:29:d6:ff:ac:97:d7:7b:
ed:08:cb:72:3f:43:ab:8f:57:2a:df:f6:9b:70:9b:
b0:5b:2c:81:d8:84:56:35:7f:90:f4:d5:1c:0d:be:
93:8e:17:8e:d2:b7:5a:58:2f:04:7a:e6:07:91:09:
8c:53:60:c9:20:66:6d:e7:a1:73:57:9c:6d:f6:a0:
46:41:8f:73:ba:67:e6:e7:d2:1a:9c:b8:c1:43:70:
ac:2e:be:51:d0:62:0e:84:0f:33:b8:6b:bf:1d:b5:
cc:8d:a1:d4:9c:81:e8:60:ff:41:e6:ad:1e:9b:21:
f5:69:a9:42:af:c1:1f:ba:28:b3:f0:51:54:99:da:
b2:f2:d5:0e:72:78:1f:34:15:19:c9:ca:73:8e:fb:
f0:94:cc:cd:41:b3:95:7e:2a:bc:ad:92:f2:99:cf:
25:95:30:d2:5c:db:6d:e8:c0:8b:49:7f:a3:8c:75:
79:13:47:32:21:9f:e6:28:66:b4:cf:73:dd:44:2d:
9f:0a:03:18:c1:55:78:ac:5a:28:89:31:4e:1e:dc:
9b:3c:07:b3:03:7d:85:b2:c7:93:c9:41:95:09:b1:
68:c5:b5:8c:1e:f9:e4:4d:f2:c6:2c:93:ec:2a:92:
6d:82:a4:0f:84:0e:7d:3b:66:00:4f:a3:c1:24:a8:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2A:F0:9E:EF:C7:07:54:77:85:60:A3:2F:74:52:23:9C:87:0F:0F
X509v3 Authority Key Identifier:
keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:1a:c7:6a:26:ce:3b:b1:9b:fa:e6:72:e9:de:9d:d1:3d:0f:
aa:25:04:19:47:e7:d2:d2:c3:0d:46:c5:b1:f8:93:39:d8:1f:
72:d5:a3:41:26:87:41:6c:ba:0f:9e:13:c1:05:3a:01:ed:dc:
d8:cb:a8:ff:b0:5a:b4:9b:54:99:54:e7:0e:05:ae:2c:b6:dd:
38:31:98:fb:9e:68:fe:02:dc:32:4f:a0:49:cb:6b:12:b9:db:
ec:6c:b6:f7:85:6a:93:a9:fa:65:4b:00:c4:e2:f1:b5:37:94:
f6:b5:1d:f9:a6:6c:0b:cb:d5:86:07:e6:6c:06:cd:b5:c8:32:
f9:18:c5:33:dd:d9:e8:7b:e0:f0:d4:9f:0e:54:71:91:f4:69:
29:97:86:22:69:af:dd:72:b8:27:ce:3b:79:67:26:cc:87:cc:
dd:31:07:09:be:8e:55:6b:0f:b6:b1:0e:61:fd:58:71:5c:d4:
23:e1:aa:35:80:1b:6a:0c:29:37:ca:3a:39:fb:0c:8b:88:36:
50:94:e6:7c:a2:f5:af:0b:71:ca:72:94:b9:16:bf:4c:72:e3:
66:ab:2a:02:e6:8b:6a:95:64:d3:a2:0c:72:8d:5a:25:a4:54:
b6:3e:19:80:ff:99:dc:8e:92:6b:62:08:af:4e:5e:6f:29:c9:
8c:c4:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:10:32 2026 by rpki-client