
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json)
Hash identifier: 9buIQbu+ifyKgR8ypC7RDWroIrSPoIVgimxk8r6pFmo=
Subject key identifier: 2C:C5:CF:A7:BF:B6:8B:96:E1:19:5A:C3:F7:BF:BD:08:79:3E:05:10
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial: 0375
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
Manifest number: 033C
Signing time: Fri 17 Jul 2026 01:44:15 +0000
Manifest this update: Fri 17 Jul 2026 01:44:15 +0000
Manifest next update: Fri 24 Jul 2026 01:44:15 +0000
Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: HLa3JURgZWgituvxfCbiC1hQHZvllELqVXObwWZt7ig=)
2: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: AInTRm364fWSsEgGDzFSbiLVDp6l9PBB3u+vGg6CfFw=)
3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: qxr1xAZVPVy5IH5flTFbZouBg69ZSR0F1Rre519E1ps=)
4: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: pXbpkuqiutX+PAfcE6/HkNxLhVyYjefCmA1YJyvlDKU=)
5: C3CAF2B45FA411F1BEAC166C6447A888.roa (hash: eWIo7kbVQkKc0K9IfxrOFYr5X4owiTYv5hYN6CSCNfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 01:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885 (0x375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Validity
Not Before: Jul 17 01:44:15 2026 GMT
Not After : Jul 24 01:44:15 2026 GMT
Subject: CN=6a5988ef-04e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:86:bb:c1:bd:3a:99:e9:da:d7:ea:4c:ee:45:
22:82:3a:69:ee:b2:5e:c3:b4:09:a4:22:10:55:9f:
05:3b:d6:92:8d:b6:e7:c3:5e:8d:c5:9d:04:6d:4a:
39:50:bf:82:7e:17:3a:16:19:84:71:25:01:43:76:
d9:8b:c7:fa:f7:3f:23:c4:1c:c9:7a:7f:01:7c:04:
9e:a6:d2:c6:56:f7:1a:fa:f5:11:20:aa:21:f2:e0:
de:86:5c:d8:5a:74:64:7d:e1:c4:20:16:ed:7a:cd:
49:d5:75:03:6e:e8:ec:f8:33:23:16:6a:3c:b0:c2:
dd:06:58:cd:81:19:ae:ea:08:5f:32:78:6b:37:e0:
e7:e9:19:f9:42:81:ff:91:82:82:d6:73:2f:37:db:
b6:b3:f5:06:ee:59:00:19:d5:b0:39:4a:ab:e5:d2:
6c:58:9d:62:32:10:6a:0a:87:f0:f3:be:85:68:c7:
e9:7f:b3:20:98:82:90:8f:1a:63:9c:b9:a0:8b:8a:
16:0e:aa:03:e2:a9:76:b8:91:18:40:7c:0f:dc:91:
9a:3e:5d:c3:1d:f6:26:fb:cd:f9:16:e3:21:53:54:
9c:b9:bb:19:4f:24:f0:25:17:1b:88:e5:0d:16:02:
3e:e2:04:b0:90:0e:dd:f2:dd:8e:8d:a1:cc:76:23:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:CF:A7:BF:B6:8B:96:E1:19:5A:C3:F7:BF:BD:08:79:3E:05:10
X509v3 Authority Key Identifier:
keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:20:5c:74:b8:bd:d3:2f:d7:23:d2:c3:be:76:c2:fc:d4:58:
f0:58:d0:53:9e:8e:96:3b:70:de:29:aa:6b:2c:5f:13:a2:57:
64:ad:2d:f2:16:53:72:c0:4f:cf:3b:49:39:6e:26:d2:05:9e:
86:88:c5:7b:dd:d1:16:5d:e5:a1:0f:c3:f7:f9:10:b5:78:ff:
c7:39:7b:60:bd:26:41:16:b5:ad:56:18:6a:30:48:50:73:90:
93:75:c4:05:32:67:a3:e2:1c:1b:51:ee:24:82:f6:39:c8:5d:
ad:15:fe:cf:58:83:54:77:a2:48:a8:b0:74:65:54:e7:91:c8:
53:28:6e:80:32:0e:4a:8c:cb:ce:ad:ef:5a:e2:93:66:b3:ea:
fb:39:6c:53:fb:2a:89:c8:4b:f2:35:9a:de:f4:8a:da:af:8b:
0b:d2:1f:1b:61:62:fb:03:57:6a:7d:34:b6:f9:81:62:62:8e:
7d:b6:25:b2:f5:82:79:78:8f:54:57:e1:ec:f8:86:7b:de:13:
7e:2e:4f:cb:e0:67:84:6c:9a:cb:0d:49:1c:2f:22:73:19:18:
75:45:98:4c:af:50:b6:f8:52:71:7e:14:6d:51:57:59:03:8d:
ed:85:7e:90:39:6f:ca:89:ca:8f:26:c9:74:c7:0b:d6:09:5e:
4f:65:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:52:40 2026 by rpki-client