
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
File: 4u3kp-qXJminlbJ7qdyH9LkNqJc.mft (raw, json)
Hash identifier: vuCAlwVi9gn5oOtUHtQYhbUoz1iIoCjpsIZwnX6/j6I=
Subject key identifier: 55:10:07:3F:2D:98:28:78:CE:E7:F2:9D:56:1D:7B:76:06:90:7C:EA
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial: 1750
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
Manifest number: 1705
Signing time: Mon 22 Jun 2026 16:38:56 +0000
Manifest this update: Mon 22 Jun 2026 16:38:56 +0000
Manifest next update: Mon 29 Jun 2026 16:38:56 +0000
Files and hashes: 1: 4u3kp-qXJminlbJ7qdyH9LkNqJc.crl (hash: hdA+ukFLupUILTBp6Dv9TNR0xt6WfgDwuExVr9MKae0=)
2: 56C8FCACE38011EFBF195482C4F9AE02.roa (hash: oSFgPCqeP9MX4SXg+dflVuexvyuqHsHFM2t2SZop3Uk=)
3: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (hash: lQxeErZo8KSMidBaLZU2uZhEmg+ZApCYBav6XaOd1/4=)
4: 9C79DBD23E7911EBBFFAC96BC4F9AE02.roa (hash: P+dA4oJXyC6Aq01svto2ZaMLc0OEI7bajKZbfS54AB4=)
5: 2357FC145F8D11EF94E7303FC4F9AE02.roa (hash: gVapXsxz8qTnLdO52OE1oddtuxrXU7Y55OD5E65Sa4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5968 (0x1750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Validity
Not Before: Jun 22 16:38:56 2026 GMT
Not After : Jun 29 16:38:56 2026 GMT
Subject: CN=6a396520-9ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:dd:40:93:af:fa:94:2b:c1:77:c6:eb:41:
5f:67:19:ea:5f:42:09:43:a7:2d:d6:b0:24:99:0a:
5c:bb:05:4a:94:9c:81:22:be:1b:64:6d:13:80:1d:
32:a1:5a:f9:0a:8b:9c:34:65:4b:ab:d9:3b:e9:5e:
3d:e9:4c:18:cf:bc:d0:31:09:47:9c:59:5d:98:77:
74:79:78:2c:1c:44:36:0e:74:36:df:4a:51:b1:62:
6a:f4:8c:3b:17:cb:c7:06:da:90:de:0d:3a:df:26:
70:e4:b7:52:ef:b4:03:5e:e3:b7:95:f2:a0:a0:6e:
1e:69:5a:ff:60:ad:60:91:ea:88:16:d3:65:32:9e:
0d:a6:cd:e9:61:46:86:fc:62:92:80:73:bc:e0:06:
46:87:a7:cd:d0:83:f0:0c:e8:e8:e5:3f:15:61:93:
ca:62:3d:a7:c9:dc:b0:1a:02:b3:5f:25:31:0f:b5:
f4:71:0f:4f:37:b4:9b:44:8d:cf:fd:b4:2b:c0:d9:
f0:55:45:73:1c:13:06:95:78:bf:c7:45:cf:8b:4d:
0e:e7:6c:e8:d7:ad:0d:c3:d4:3d:68:8e:b3:4d:80:
f9:c9:89:78:e6:d6:c3:7e:f8:2a:5e:85:2c:31:47:
9a:e7:dc:0d:ce:7a:a2:4d:a1:99:8c:d0:31:06:43:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:10:07:3F:2D:98:28:78:CE:E7:F2:9D:56:1D:7B:76:06:90:7C:EA
X509v3 Authority Key Identifier:
keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:4d:a1:53:dd:5e:84:89:f6:2c:ba:46:bc:84:33:7d:0f:21:
70:84:b6:7c:b3:63:0b:f6:b6:c6:d5:b8:c0:7d:63:48:3e:9c:
f1:c2:61:8a:d0:e1:34:ec:2e:a7:ea:89:e1:49:ed:19:49:db:
38:10:f1:b6:00:07:ef:c4:4e:44:db:9c:26:e7:42:95:b1:d3:
4b:2e:b0:f4:da:a6:34:16:dd:92:4a:10:f0:65:e9:cf:7d:d3:
45:cf:c2:97:4b:ac:69:0c:c5:24:28:17:27:fe:2c:2f:ab:81:
cb:64:50:77:aa:56:a0:65:88:6c:2b:04:ea:d5:d1:8e:3f:eb:
a9:f0:d8:07:e1:06:ab:4b:d5:2e:67:49:23:ca:2e:d2:ee:08:
fb:92:2d:cc:7a:61:f1:f4:9a:18:f3:18:39:b5:77:d8:5a:4f:
e5:22:d7:c4:51:9c:22:a2:f0:68:cd:c2:08:83:36:3a:90:3f:
9d:ba:7a:47:26:d4:77:bd:5a:a8:e1:1f:eb:3f:f1:74:0c:02:
fd:74:64:b2:82:7a:94:d0:b3:60:2e:c5:72:fd:2a:71:38:fc:
c3:9c:15:45:26:5d:a6:d8:e9:68:93:9d:dd:7a:08:58:2b:a5:
35:fa:c3:13:dc:85:d0:42:12:d2:d9:5a:76:96:de:56:3a:c3:
52:1c:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:49 2026 by rpki-client