
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json)
Hash identifier: XO5F6Cn8lR3+tNCyFfeywgTbm3Dtg2Du6F3yjWSRz0c=
Subject key identifier: 51:2D:28:3D:14:81:AC:6B:03:75:66:C8:81:77:0C:04:28:00:7C:D5
Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Certificate serial: 084A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
Manifest number: 0826
Signing time: Wed 20 May 2026 21:12:23 +0000
Manifest this update: Wed 20 May 2026 21:12:22 +0000
Manifest next update: Wed 27 May 2026 21:12:22 +0000
Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: M+5EDtuLXxtSCGwB0MbNsFvZPAQTC/XVUeIcklGwgW0=)
2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 9WkU0MG65lqjQrS/cbUMSYyvQ66+hlJyNvzSbxcBRt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122 (0x84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Validity
Not Before: May 20 21:12:22 2026 GMT
Not After : May 27 21:12:22 2026 GMT
Subject: CN=6a0e23b7-7adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:23:a3:58:3a:ef:16:3e:7e:51:f3:47:5c:86:
38:98:90:cd:40:6b:00:11:af:90:be:ef:77:e1:bc:
38:fc:1d:ee:4a:41:bc:52:72:c4:bb:3a:08:61:a8:
04:2e:f6:d4:3c:8c:aa:52:86:53:ed:76:ad:ee:74:
6c:bc:13:75:6e:bf:dd:60:80:66:11:2b:dd:93:83:
d6:d8:c8:59:3c:a7:ad:97:fd:29:66:99:58:7b:cf:
3b:22:7c:20:22:96:7b:60:c7:b6:5e:ad:d1:3e:53:
27:a1:04:e8:1c:b0:cc:eb:46:5e:7d:aa:f2:00:b2:
dd:2c:e8:d7:6e:54:c9:37:75:d6:32:1d:af:cc:0d:
4c:e1:04:63:64:44:8c:83:5d:39:77:d3:b9:3f:96:
74:c5:f4:89:ef:2a:3e:1a:bd:bc:50:02:9b:d9:f4:
4f:5c:93:d6:24:60:de:0e:3a:10:b6:69:b1:50:c3:
8c:cc:5b:bb:a4:e5:c9:45:78:0c:d3:b2:38:62:0e:
8d:c7:fe:84:23:62:2f:1b:96:a7:f6:49:da:cf:bf:
18:bc:23:0f:d9:c2:40:f0:f1:f6:ae:e4:cb:be:a7:
6a:9c:3c:f9:e7:4b:8f:64:7d:20:bc:63:d1:b3:6c:
3f:48:87:30:a1:ae:2c:7a:ee:bb:b1:f2:5a:07:fc:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2D:28:3D:14:81:AC:6B:03:75:66:C8:81:77:0C:04:28:00:7C:D5
X509v3 Authority Key Identifier:
keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ae:bc:c7:23:b4:cd:5e:3d:c3:8e:ac:14:22:5b:f5:c3:19:
5c:f0:c8:32:f9:6b:df:48:ba:72:e3:88:2c:64:be:07:09:c5:
83:4d:6a:66:7d:37:09:39:a2:b4:f2:8b:32:ef:ec:9f:25:cc:
d8:67:a2:77:b3:8e:7f:1b:64:4b:d5:f4:3e:a2:e2:06:c3:60:
36:82:e5:d6:fb:cc:54:f9:43:01:87:ce:57:41:f8:91:42:6e:
64:fd:53:75:74:11:06:80:55:93:69:38:1c:1d:1e:77:86:c7:
be:09:ac:b7:f8:e7:60:37:d3:67:56:53:1e:20:96:c4:67:d4:
7b:58:24:49:31:24:cb:0a:48:f2:00:25:06:20:0d:98:33:09:
cd:3e:3a:28:3c:a7:b6:e4:ec:7f:19:f0:20:f1:cc:71:2c:d2:
b1:3f:07:af:4f:5d:9e:f1:b0:d3:5e:b4:94:f0:00:04:7e:f3:
24:15:9f:12:f3:99:d3:7f:62:43:e5:62:4a:c1:c0:7d:0a:e4:
12:6d:5b:94:f0:33:26:35:0c:5e:5e:2a:68:cc:bb:96:a0:a5:
ad:42:12:0a:8a:e9:00:75:41:da:72:83:c1:b1:9c:ce:b0:20:
2a:a8:ee:54:e0:ba:bc:dc:15:2d:52:77:6a:0f:9f:01:43:82:
d9:2d:a3:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE
N0UzRjgxNzgwHhcNMjYwNTIwMjExMjIyWhcNMjYwNTI3MjExMjIyWjAYMRYwFAYD
VQQDEw02YTBlMjNiNy03YWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5COjWDrvFj5+UfNHXIY4mJDNQGsAEa+Qvu934bw4/B3uSkG8UnLEuzoIYagE
LvbUPIyqUoZT7Xat7nRsvBN1br/dYIBmESvdk4PW2MhZPKetl/0pZplYe887Inwg
IpZ7YMe2Xq3RPlMnoQToHLDM60ZefaryALLdLOjXblTJN3XWMh2vzA1M4QRjZESM
g105d9O5P5Z0xfSJ7yo+Gr28UAKb2fRPXJPWJGDeDjoQtmmxUMOMzFu7pOXJRXgM
07I4Yg6Nx/6EI2IvG5an9knaz78YvCMP2cJA8PH2ruTLvqdqnDz550uPZH0gvGPR
s2w/SIcwoa4seu67sfJaB/yT4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEtKD0U
gaxrA3VmyIF3DAQoAHzVMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1
NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu
YlBUcGpUZG10akRYNF9nWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARa68xyO0zV49w46sFCJb9cMZXPDIMvlr30i6cuOILGS+BwnFg01qZn03CTmi
tPKLMu/snyXM2Geid7OOfxtkS9X0PqLiBsNgNoLl1vvMVPlDAYfOV0H4kUJuZP1T
dXQRBoBVk2k4HB0ed4bHvgmst/jnYDfTZ1ZTHiCWxGfUe1gkSTEkywpI8gAlBiAN
mDMJzT46KDyntuTsfxnwIPHMcSzSsT8Hr09dnvGw0160lPAABH7zJBWfEvOZ039i
Q+ViSsHAfQrkEm1blPAzJjUMXl4qaMy7lqClrUISCorpAHVB2nKDwbGczrAgKqju
VOC6vNwVLVJ3ag+fAUOC2S2jog==
-----END CERTIFICATE-----
Generated at Thu May 21 10:13:43 2026 by rpki-client