
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json)
Hash identifier: jGL3ZpXB2AHBTE1T0+Hs/T5jL5W8epv2UjbpVp0WC14=
Subject key identifier: 15:A9:1E:06:A1:8B:95:56:8F:64:78:1A:F2:57:78:AA:5F:AB:C9:8B
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial: 0299
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
Manifest number: 0287
Signing time: Wed 13 May 2026 01:56:43 +0000
Manifest this update: Wed 13 May 2026 01:56:42 +0000
Manifest next update: Wed 20 May 2026 01:56:42 +0000
Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: o2yT5cyy2NugJ5DDp0urXlcGo7qZaP3OrLUX4q7lw+8=)
2: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: bytZ59Ia8ZFaLY4XNox1TiPwLTz6zD1b+H+2egXVeZ0=)
3: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: poF5iER85gmZG51MJJTxxsmqAYXARy0knubqmMXJg/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
Validity
Not Before: May 13 01:56:42 2026 GMT
Not After : May 20 01:56:42 2026 GMT
Subject: CN=6a03da5b-c152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:28:8e:cd:20:69:de:5c:11:86:e4:b8:6d:
a7:0b:ff:e3:39:ce:d1:04:47:14:5f:91:fe:d2:8b:
d7:9e:e6:2e:e1:7b:27:ff:33:65:77:b7:9a:8e:02:
e9:20:a5:9f:f6:24:17:b2:66:df:1a:14:3f:e3:0a:
36:ed:32:d6:fa:fe:5a:57:5a:e8:be:2c:5a:df:de:
ce:9c:76:10:ac:93:95:ad:66:54:76:dc:3a:70:a6:
d5:d6:ea:65:70:d6:69:fb:18:cf:c3:62:9e:52:99:
63:8b:52:bc:d2:8d:4a:4e:de:66:c2:09:c0:99:a0:
5c:23:cd:9d:8d:4e:8e:df:2a:7d:38:3b:b7:1e:d8:
e8:21:6a:7e:7c:6b:04:5e:a4:a9:d3:33:9d:dc:ef:
dc:a6:fd:bd:45:4a:f6:ec:58:a2:51:87:7c:49:1a:
94:3c:d1:8c:6f:ea:15:5a:61:76:20:41:36:dd:dc:
f8:40:95:85:69:d6:a7:3e:39:f2:59:a9:96:ec:90:
bc:c2:25:27:6b:00:02:66:d7:d8:29:4d:02:33:ff:
bd:82:1e:03:0d:f6:f1:d0:1d:28:fc:a9:e0:5a:12:
be:44:d0:87:fe:4a:8c:9f:21:2c:66:4e:7e:48:10:
22:42:d4:23:5c:da:a7:4d:cc:55:3b:f4:2c:7a:ef:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:1E:06:A1:8B:95:56:8F:64:78:1A:F2:57:78:AA:5F:AB:C9:8B
X509v3 Authority Key Identifier:
keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:08:28:73:be:8a:f2:c1:26:d1:0d:aa:6a:cd:df:c1:3e:5c:
fd:d1:0b:82:3f:db:55:6b:59:76:6b:ff:77:5b:6a:97:77:ba:
48:29:3e:9a:85:8d:d6:5a:eb:86:02:1b:5a:2c:64:4e:6f:a8:
57:28:a5:ff:0e:2b:6a:a1:cc:c1:9b:7f:51:ce:77:0a:b4:f6:
7f:7e:b3:6c:86:7c:ea:0d:5c:64:75:98:d7:8e:2c:58:45:ce:
6f:60:66:53:0c:dc:a1:b1:4a:de:30:77:e4:b7:07:f3:a5:91:
11:93:e3:90:89:4f:cd:30:b3:1a:1c:80:c4:94:32:17:48:47:
ed:94:b7:82:ac:e8:28:c4:ad:04:61:1c:3d:d2:98:9e:e2:9c:
28:d5:66:28:ec:9c:78:48:b2:31:8d:a5:53:c0:65:7c:fd:0c:
fc:04:14:4f:69:4a:50:17:90:e4:08:01:b8:b1:a9:ac:34:93:
6a:c6:cc:18:bc:4f:84:74:03:93:6d:44:cb:00:a6:85:e0:bc:
3b:6c:c6:82:55:44:27:bd:c1:ae:a0:b6:6b:f0:ad:40:b8:b0:
b3:f6:9f:57:c3:72:2c:6d:38:e6:e1:a4:30:29:fa:ce:76:ab:
5c:32:9f:df:9e:d6:a1:ce:ad:0d:74:44:38:a9:a8:ef:ef:f1:
90:5d:1b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:24:26 2026 by rpki-client