
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
File: 4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json)
Hash identifier: WMZO7iW9V5+s+Hgi+QRW6pH8ZB4oDM8ROFw4NCjQYoY=
Subject key identifier: 5F:72:92:1F:99:C6:9C:37:D0:F7:A2:F6:B7:E1:77:1B:70:43:51:02
Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Certificate serial: 2273
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
Manifest number: 224A
Signing time: Tue 24 Mar 2026 15:48:21 +0000
Manifest this update: Tue 24 Mar 2026 15:48:20 +0000
Manifest next update: Tue 31 Mar 2026 15:48:20 +0000
Files and hashes: 1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: C2sMXrBdsy/wvQqZCZsX24V/koIRS7BdSvS6kKf+iiU=)
2: B72206B4554B11E791BA5861C4F9AE02.roa (hash: i8ynNvisFun6KLb9XReq+KAa11jwRPXK2t/Z0bHo3gM=)
3: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: IV9u+bL98dY9vhWPzSb2VF1m+KNoLGbMT7wCZc4XtUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8819 (0x2273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Validity
Not Before: Mar 24 15:48:20 2026 GMT
Not After : Mar 31 15:48:20 2026 GMT
Subject: CN=69c2b244-eed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:4c:bb:60:99:fe:91:31:8a:a1:93:9b:6a:
e0:38:11:64:98:03:3b:cb:d4:12:ea:37:11:79:35:
74:12:d0:b4:0c:bd:3f:27:e5:09:39:fe:94:af:c4:
9d:a0:3e:8f:44:e6:89:33:c5:8c:21:a0:4a:60:8a:
57:d3:50:42:c6:34:bb:76:41:7e:23:6d:05:95:bc:
30:de:d7:df:e3:31:76:36:79:66:f9:c6:55:e2:01:
cf:c5:cc:01:42:4e:12:fe:b2:72:88:7c:fb:fa:10:
47:8b:6b:f3:d6:b8:43:20:e8:b0:9b:a6:93:45:cc:
35:1a:98:b8:7c:bb:19:f1:ca:c2:b9:38:e3:04:a2:
5e:4c:4d:a3:4d:ad:6b:76:11:87:9e:86:63:ee:b4:
f9:ac:4a:32:52:b1:69:e8:2e:cb:c6:1a:74:b9:5f:
68:24:21:b6:ac:f6:36:f3:0f:4b:7d:02:d6:21:14:
7f:24:a7:bd:4e:16:68:b3:e3:7d:4d:1d:ec:4f:d3:
15:93:96:eb:d9:31:70:11:dd:13:8b:e2:cf:1e:44:
8b:2f:c6:57:11:04:f5:cb:05:5d:73:f6:99:b2:3a:
98:15:ab:2f:6a:6e:90:73:a1:e9:60:e1:53:76:cb:
c1:a2:40:ce:15:fa:c9:ed:7c:3f:33:79:ad:41:a6:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:72:92:1F:99:C6:9C:37:D0:F7:A2:F6:B7:E1:77:1B:70:43:51:02
X509v3 Authority Key Identifier:
keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:dc:b6:91:60:07:dc:55:b4:71:a3:c5:af:a7:ac:12:70:68:
84:87:4c:38:50:5a:70:bc:23:fe:a6:35:0f:26:24:93:34:5a:
9d:6a:90:57:4e:4b:15:33:6e:dd:67:3f:9a:9d:7b:03:7e:02:
30:d1:25:4e:b1:bd:6c:fc:03:50:c1:b3:b0:2b:f1:12:e0:02:
57:94:72:73:1d:3c:78:87:be:26:7e:4a:07:58:0b:a6:53:c8:
a8:db:9b:5c:07:f0:80:08:13:2b:ce:0f:99:ce:87:4b:48:06:
24:97:05:8b:b0:b7:73:8e:c5:ce:da:fc:ef:fe:11:e8:49:5e:
0d:35:7a:05:25:14:46:48:d5:2b:ef:76:7e:5c:b8:66:2b:35:
68:c6:b7:c5:6b:ff:03:d5:c0:b3:aa:28:1d:90:78:9b:65:6a:
82:3b:fb:20:fc:c4:61:c0:a7:5f:3d:2f:2e:d9:0e:c1:bb:ca:
52:f8:79:68:c2:51:5a:b7:e6:0a:4d:92:b2:e2:d3:9f:8f:dc:
28:9b:42:5c:e0:d6:26:21:6f:a2:18:5f:b1:87:b8:00:25:69:
b3:84:67:ec:00:74:d9:63:e7:fc:4f:77:b2:f9:91:c2:4c:92:
42:4a:06:cf:6f:09:6e:db:f3:96:2a:a5:91:8b:6b:d1:a3:7a:
31:84:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:35:59 2026 by rpki-client