
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json)
Hash identifier: lY1m6/5+9ImF+2TeZpsDcUSyTQenCy9f9XVqk+zetVc=
Subject key identifier: D9:A5:0D:33:39:7C:64:A1:48:67:92:18:84:EC:CB:9E:49:0D:2E:35
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial: 0547
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
Manifest number: 0536
Signing time: Thu 16 Jul 2026 20:37:50 +0000
Manifest this update: Thu 16 Jul 2026 20:37:49 +0000
Manifest next update: Thu 23 Jul 2026 20:37:49 +0000
Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: hJQcRee0cWd3rL/+PxqGSlqucBOesVVuR1UVU40dm6g=)
2: 81EDAEEC6DE911F1BE416AB35CA30FBC.roa (hash: YA17LyHTfthDzdk1fJZ4Q1wQt3Gaa9uu+WHv2HF57n4=)
3: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: 4xgHsmFBzpOEDFWrTsnY/UVdPSnGuyQ3aHzpdWQKEDE=)
4: B38D932050EF11EC8583962BC4F9AE02.roa (hash: pjU8yoKCWn12BkoGzYOOIFYk2quDrJg/9dgAwTEFemk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 20:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1351 (0x547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Validity
Not Before: Jul 16 20:37:49 2026 GMT
Not After : Jul 23 20:37:49 2026 GMT
Subject: CN=6a59411e-2893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:6d:22:47:05:31:d6:bc:2c:fd:62:c3:dd:
31:ed:e6:61:e7:d7:d2:09:a0:e2:ae:45:86:99:be:
7d:dc:3e:e8:64:6d:24:a4:c9:86:e5:c2:3c:00:77:
e2:50:2d:0c:a8:91:74:2a:40:48:28:f9:90:d3:21:
80:36:e9:00:27:d9:c6:d8:fe:4a:aa:07:31:d3:a4:
b7:5a:09:c8:61:42:fc:9f:0c:19:5d:c0:68:9b:02:
e7:ba:d8:ec:8a:b9:58:50:09:5f:be:37:75:35:44:
37:40:25:da:05:6e:b7:45:7d:f0:7e:96:68:61:6f:
56:b9:44:ad:52:a1:cc:73:f8:4c:b1:c8:cf:eb:40:
34:a8:db:05:b8:78:0f:3a:92:82:08:f3:11:97:70:
dd:9e:56:c1:e3:f5:b3:85:c4:c8:37:92:a1:04:7f:
dd:c6:bc:1b:23:0f:33:33:2c:7f:21:11:d7:7a:aa:
5f:f9:7a:1f:b3:f3:26:74:00:a4:2a:3b:fe:8d:2a:
54:cc:d6:41:51:80:a8:9f:ac:a4:37:24:13:f9:55:
f3:89:9a:51:97:1d:94:43:3e:29:21:63:6a:e9:c2:
16:5a:b1:cd:1e:4d:5e:22:73:5e:b7:c6:ee:22:d9:
4b:16:75:c4:36:75:57:e5:23:bc:aa:e8:11:09:a0:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A5:0D:33:39:7C:64:A1:48:67:92:18:84:EC:CB:9E:49:0D:2E:35
X509v3 Authority Key Identifier:
keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a5:e7:37:60:e1:46:cd:81:dc:4d:f0:27:bd:a1:f4:3d:22:
db:f6:f7:53:85:04:46:e5:24:1a:d6:66:25:d2:89:bf:4d:db:
8b:c1:59:46:de:fc:03:46:ee:e9:f2:15:77:a2:0b:3d:33:9b:
e8:fc:c1:77:8b:d7:83:f8:ef:f7:e6:2f:f5:f1:53:72:22:68:
bc:d7:e0:96:dd:b0:c0:e9:d1:cd:06:9d:85:d7:79:1f:57:ab:
15:2e:68:8e:82:d8:9e:e8:81:67:1d:2d:c4:9c:76:e7:7f:9c:
2f:05:45:cf:b9:36:42:cd:2d:64:75:4e:30:1d:d7:ba:cc:01:
2b:01:6a:2b:23:99:4c:9a:77:fb:1a:bd:d7:cb:06:f1:74:05:
02:75:3b:3d:14:07:63:48:d6:00:01:3b:0e:d2:af:3c:93:87:
8c:0a:00:8d:3f:36:3a:8f:c0:bc:60:1c:13:22:b2:5b:ec:ae:
32:e9:11:96:03:d7:7e:bd:11:e9:04:0b:67:7c:9c:4f:0d:66:
2e:ae:f1:c6:1b:ba:a8:16:e8:0e:90:b3:50:f5:f0:e9:ee:d4:
71:77:9d:99:cd:48:a3:6b:f9:f5:19:34:8b:ba:b4:50:fe:f4:
87:6e:cd:1e:7b:e5:ec:01:41:7e:c8:6a:ce:a3:fa:d4:ca:2c:
28:68:6e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:23 2026 by rpki-client