
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
File: 4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json)
Hash identifier: fnhyGldAoWIJkxlF267qXEnHbMFunRpxyovmXxdWuF0=
Subject key identifier: B4:70:56:BE:3B:E3:63:6C:BA:65:00:13:80:EB:B7:87:3F:30:4B:A3
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial: 066C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
Manifest number: 0646
Signing time: Fri 04 Sep 2026 22:32:23 +0000
Manifest this update: Fri 04 Sep 2026 22:32:23 +0000
Manifest next update: Fri 11 Sep 2026 22:32:23 +0000
Files and hashes: 1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: cXLStmjDFmdduLUPSNkmqbEf+oLL2TWjYFjdiAxYT8c=)
2: F650791EF01411ED9210D060C4F9AE02.roa (hash: AWc+boEStiOUVPv+8IUahYFAvtg7A+MrQdgGzHZN4Yg=)
3: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: TBXfHIsLBP1r3Og38/Zn+SGz/Jmiive4bvBF8Q5gW6Q=)
4: 6D655B7CAF4F11F0A741B236C4F9AE02.roa (hash: 2NIJ+RBIKW5iZiN3H8lcUO6ml0C3TxyzXOWCEv8U7M8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1644 (0x66c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Validity
Not Before: Sep 4 22:32:23 2026 GMT
Not After : Sep 11 22:32:23 2026 GMT
Subject: CN=6a9b46f7-85c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:a4:47:34:7b:1c:e0:e7:17:87:08:f2:fc:
a9:f2:55:36:28:25:8f:a3:4f:1b:e1:5f:cb:ac:b4:
3f:a5:30:eb:1c:61:e6:74:0f:ca:12:37:63:7a:20:
d9:fb:bc:3e:ab:40:c0:4a:83:e6:aa:ce:16:35:5e:
78:f5:e6:53:86:0e:62:fd:2e:a3:12:ea:39:92:0d:
80:c2:8e:96:59:1b:91:32:8a:0b:22:6d:72:3b:f8:
7d:be:50:a7:90:79:93:53:58:3c:f8:40:18:8e:54:
7b:87:0e:d3:ee:99:e0:f2:a8:ed:1c:9a:20:6b:c3:
77:05:13:91:46:51:08:06:cb:4c:25:16:07:7d:30:
14:33:bc:af:0e:57:e6:b0:fa:c8:b1:da:0d:83:9f:
be:86:e0:8f:83:16:02:73:26:1f:15:4a:70:26:06:
60:7c:f1:72:72:fb:da:03:71:30:16:23:32:d5:b4:
12:fe:fc:8a:e5:10:0c:19:99:75:62:0b:b0:6c:b5:
15:28:06:58:5f:1f:eb:e1:44:68:4b:ee:45:cf:36:
15:2b:4d:e7:5a:55:76:5f:47:ca:62:e2:38:a9:6a:
71:db:ba:ae:96:77:93:84:f6:2a:89:58:5d:db:2c:
5b:18:d8:2d:60:f1:3b:d2:c4:6a:e1:1b:ec:a4:f4:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:70:56:BE:3B:E3:63:6C:BA:65:00:13:80:EB:B7:87:3F:30:4B:A3
X509v3 Authority Key Identifier:
keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:4a:5b:06:d0:10:62:05:25:43:e9:b4:54:25:88:c6:d8:5d:
d9:4f:b9:02:a1:c0:1a:26:7b:46:97:1b:e3:c3:a7:eb:47:58:
34:f0:53:8a:29:c9:c1:76:41:12:78:7f:7a:c7:14:a0:00:6a:
99:c2:ae:0b:b2:08:fa:b1:8a:fe:4b:03:f9:a1:0b:8f:27:dd:
a2:43:17:66:7d:da:7f:05:2a:2f:75:5e:46:84:cc:24:8d:1b:
5e:90:f2:9f:dd:d7:24:85:4a:1c:84:80:dd:ac:91:84:8d:f1:
f4:ee:93:ea:b8:69:09:29:76:1a:19:33:f3:b6:1d:1c:30:ac:
c0:ba:bd:85:b9:02:20:f2:73:d2:f7:04:27:9d:4d:1f:00:fb:
41:79:d8:34:c8:ab:7c:b3:d6:2a:31:db:8b:98:39:12:3b:a6:
10:c7:5c:62:2d:05:e3:28:27:e4:28:47:45:f6:d3:49:24:cf:
f8:7f:c6:7e:fe:ee:0a:ce:94:67:13:42:9e:3d:87:91:6b:97:
2c:6d:09:f6:f2:48:18:00:08:7e:3b:4a:bb:a7:1b:fd:d0:8e:
72:03:c5:23:f2:78:18:75:2d:ee:40:75:bf:95:83:8e:3f:05:
c7:75:cb:84:a5:a2:69:3e:bf:a3:1d:9f:96:c1:4a:2a:6f:c7:
70:8e:61:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:22:24 2026 by rpki-client