
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
File: 4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json)
Hash identifier: 0bG9/DHDC+RcYE8SniUbC+6ViHlOysIWKxyKcIriOGc=
Subject key identifier: CC:15:77:58:CC:36:EC:C3:76:CB:15:84:DA:DE:0D:12:9B:16:BA:D9
Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
Certificate issuer: /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Certificate serial: 3587
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
Manifest number: 3586
Signing time: Sun 04 Oct 2026 14:27:41 +0000
Manifest this update: Sun 04 Oct 2026 14:27:40 +0000
Manifest next update: Sun 11 Oct 2026 14:27:40 +0000
Files and hashes: 1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: vWaiNb/Cs2HnYdqGlaDWDQDVxEGEcl0UNCsFYLfTTag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13703 (0x3587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Validity
Not Before: Oct 4 14:27:40 2026 GMT
Not After : Oct 11 14:27:40 2026 GMT
Subject: CN=6ac2625d-1195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:d9:6b:87:b5:3f:9c:a7:34:e6:35:9e:6a:
2c:cd:c6:b2:97:53:7d:e2:f2:df:3a:91:4b:ee:05:
e8:26:ec:d5:8c:cc:1f:9d:ec:e1:35:10:c3:b9:fd:
55:71:d2:38:f5:2a:45:70:1b:6c:0c:1f:30:f5:22:
4d:0e:1c:c7:81:c7:22:51:f1:b1:ec:5f:22:2c:11:
a2:74:42:3d:2b:93:5c:32:c8:8f:d3:44:73:fd:9e:
e4:29:21:bc:00:6a:14:ba:12:a3:fc:5f:31:c6:9d:
72:bd:79:b0:d4:e9:ba:a0:bf:5f:d6:3f:c3:3d:d2:
bf:61:d6:e9:8e:44:02:94:a0:21:34:b5:8f:75:1a:
ec:ec:2e:0a:1d:74:d1:ff:10:ce:0b:86:5b:cf:b3:
f2:f8:1e:aa:b2:95:f4:12:77:5c:e2:7b:9d:26:71:
60:9b:f2:b1:c6:0e:ff:44:03:7d:77:55:c4:af:2d:
c6:70:1a:6c:03:6d:5d:15:cd:c2:93:50:10:c0:2d:
50:5e:57:91:fd:57:9c:8d:e0:15:c9:13:0f:59:f2:
1a:8b:d1:d3:86:27:3f:aa:13:ae:06:d1:d3:20:17:
0d:82:26:69:ff:26:bc:b9:b2:10:70:1b:75:7b:26:
3f:d5:61:94:0a:8f:e5:b0:4e:d0:7b:4e:da:80:38:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:15:77:58:CC:36:EC:C3:76:CB:15:84:DA:DE:0D:12:9B:16:BA:D9
X509v3 Authority Key Identifier:
keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:96:03:d7:78:b8:b8:50:f8:51:49:7b:5e:ba:34:e8:c1:8b:
c1:e8:aa:4b:f5:d3:e3:b2:37:00:46:a1:3b:1e:a4:c1:1a:be:
f5:32:6e:46:13:20:16:fb:b6:14:2e:99:9e:c5:d5:52:b2:9b:
1e:2b:f5:47:a0:6a:32:68:e7:44:23:40:a8:cc:be:f4:97:02:
bb:4e:52:38:0f:bb:ea:db:d0:1b:82:ba:d8:90:9d:98:d5:58:
f6:6c:9f:e9:b5:12:5b:24:b8:48:41:96:9d:97:4f:ad:f0:d3:
ea:cc:fd:28:a7:94:03:18:ed:bd:01:3c:0f:83:5b:f1:77:17:
49:c5:86:65:5e:22:37:81:d3:09:bc:95:f3:f0:b4:25:bc:dd:
48:fd:ce:26:1d:da:69:46:03:94:9a:01:cb:b6:8f:99:ca:1e:
05:40:02:30:ee:e2:7e:50:50:4e:ad:4d:70:a7:d4:39:6e:c3:
ad:89:56:c6:c4:27:ca:9e:9b:47:f8:48:5b:9f:44:fd:30:7d:
21:55:17:9b:a4:69:4c:21:60:47:3e:82:37:94:28:2c:cb:93:
6b:91:0f:23:36:0d:67:6a:d8:53:e8:76:d0:f4:d2:64:d6:8c:
18:28:96:87:45:1d:ef:f5:d2:f7:17:85:a7:7a:b2:5a:bc:ac:
4b:51:4d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:24:51 2026 by rpki-client