
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json)
Hash identifier: fY5MwWt+xAe0uvQEfy9bAOQ5BNFS5veiPO+yovHHcrg=
Subject key identifier: C6:BC:50:7E:CC:76:99:2E:56:5F:1A:FA:F3:14:4C:E5:0D:A4:13:53
Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Certificate serial: 0D99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
Manifest number: 0D74
Signing time: Wed 22 Jul 2026 18:15:18 +0000
Manifest this update: Wed 22 Jul 2026 18:15:18 +0000
Manifest next update: Wed 29 Jul 2026 18:15:18 +0000
Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: b6c2TNK1il/hyYGeJp9P8XfLINLvPyTR+pFQDo5JyB0=)
2: CA0AB7D0539811F19275B1E8AE833773.roa (hash: RJS1Q5SyoLw5kpGy0JR6IuXz+7wLlZLltCqEB6vPsmA=)
3: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: 8NBaU/JePJQ6/F/3cS0V0StpNvCdrumDQrFWu6BjRDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3481 (0xd99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Validity
Not Before: Jul 22 18:15:18 2026 GMT
Not After : Jul 29 18:15:18 2026 GMT
Subject: CN=6a6108b6-4453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:59:d6:8b:8a:8f:a5:68:7d:8d:9c:3d:96:
fc:28:74:51:39:98:5b:37:56:39:fe:60:24:2d:26:
ab:9f:36:10:d5:24:4d:f8:dd:37:80:b2:5a:20:9b:
40:1d:a9:35:cb:a0:50:6a:3f:f9:2d:5d:9f:a0:5a:
ad:bb:03:5c:0d:c2:8e:7b:8b:56:4e:47:c6:db:51:
83:3d:6b:44:c2:16:98:36:fd:51:a2:ad:63:db:77:
46:59:f6:52:e7:d2:5a:e5:c8:b6:ba:3e:9f:f7:2a:
48:04:82:ee:de:cd:13:9b:1e:a3:d6:a9:d8:26:6d:
84:83:91:6d:6d:02:df:51:f8:01:8d:3a:98:3a:c3:
50:e1:da:37:8f:49:ab:bf:8e:4b:9b:2f:79:0f:88:
72:f2:14:1c:1d:60:0a:a2:2e:f1:4f:8b:a9:e3:73:
64:2b:7f:71:ea:11:f7:73:cf:0a:62:af:5b:fa:74:
24:4a:b3:71:5c:2b:2b:3b:3b:d6:2d:38:d3:0a:a8:
d9:60:db:cc:3b:f7:f1:97:1f:de:d5:56:d6:55:89:
d2:45:81:7b:d6:dc:04:ff:fc:a7:a7:9a:fb:ff:f6:
db:49:c1:8f:a3:99:e5:57:83:cc:b5:47:05:5e:64:
a7:b7:55:cf:ef:e2:99:0f:1b:c5:73:7b:5e:6a:9a:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BC:50:7E:CC:76:99:2E:56:5F:1A:FA:F3:14:4C:E5:0D:A4:13:53
X509v3 Authority Key Identifier:
keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:be:2f:4c:d5:c3:48:6e:4f:87:bf:53:a8:15:6d:59:32:06:
08:68:64:77:34:2c:1e:ed:a7:0e:35:65:3d:c0:92:f7:4f:17:
c3:95:01:b4:18:45:12:4e:9c:9b:6d:a9:1c:f0:ac:d6:cb:01:
ee:d1:14:8b:e9:8d:a3:72:9a:f9:64:03:8c:2c:f7:d0:5d:d5:
c3:be:cc:8e:32:b2:56:cc:49:c8:34:c1:f3:93:b8:a4:87:fb:
71:fd:b5:ee:4e:71:ee:59:78:c1:1d:e4:69:85:79:d5:b2:89:
0f:4d:10:cd:73:ea:62:b4:57:9c:fb:da:80:09:bd:c4:52:37:
22:fe:e6:1f:bf:ff:ef:bc:30:6b:d6:82:9e:b4:f4:12:f6:f9:
80:35:3d:5a:ab:02:3b:e7:c9:55:83:c4:98:ee:95:48:e0:1b:
49:8f:69:bb:ce:c8:da:52:dd:1d:e2:0c:a8:88:b1:f3:99:d7:
c1:42:33:90:43:7e:e4:bc:3f:9b:b9:6e:33:1e:af:bf:df:84:
5c:76:b8:0a:ea:c3:bc:b5:60:78:b9:53:ba:2a:65:94:54:0f:
80:51:9a:50:0b:8f:3e:3f:25:e1:80:d6:00:1a:c2:f4:6f:1d:
a3:31:b7:77:83:24:8c:52:a5:fd:2f:32:a9:88:1d:5a:c5:98:
9d:62:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:36 2026 by rpki-client