
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json)
Hash identifier: jXmP6hQfOv4pCV3kd01T/JYFz2yehUuVw+Mmzc8treU=
Subject key identifier: 39:95:33:E1:37:FE:75:9D:F1:62:21:71:69:A2:3D:01:52:3B:34:D8
Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Certificate serial: 082D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
Manifest number: 0821
Signing time: Wed 22 Jul 2026 21:40:19 +0000
Manifest this update: Wed 22 Jul 2026 21:40:19 +0000
Manifest next update: Wed 29 Jul 2026 21:40:19 +0000
Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: s2tdVTPFGRMr9Jcn/s2GGspAX6scko60TlIpORy1VhE=)
2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: E6etJLs09jxCInikK/I6oSWS8vZ+7fWKirFeSQZQozk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2093 (0x82d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Validity
Not Before: Jul 22 21:40:19 2026 GMT
Not After : Jul 29 21:40:19 2026 GMT
Subject: CN=6a6138c3-05f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:29:f6:51:61:52:f1:e9:fa:ef:a5:3e:27:
f8:c1:aa:6b:24:d9:bf:68:13:f6:14:66:05:0b:ee:
47:81:ce:22:1a:24:77:0a:46:ba:b9:d1:7b:bc:8c:
a3:02:e2:2a:34:d5:b5:e4:83:99:ce:cf:d0:49:0f:
16:bb:30:88:c6:a1:80:e1:d7:8d:d1:33:73:07:56:
87:43:bd:f0:91:c7:da:4f:05:9e:3a:d4:23:87:3e:
ab:4d:41:85:3c:df:2c:73:0e:14:38:5a:20:26:f7:
d3:9c:f3:45:c1:72:29:2b:82:1a:73:31:02:e4:c7:
5b:48:f5:dc:e1:5e:e1:a9:92:60:19:f0:9b:be:79:
1a:f9:1d:57:86:57:db:35:5f:b7:66:36:93:de:14:
cd:d2:d6:5d:28:42:c0:0d:9c:bd:3d:b9:bc:17:55:
22:96:80:22:af:33:47:a5:03:0c:4c:60:8a:6b:bf:
8c:fd:16:92:1a:a2:e6:cd:19:29:4e:81:b4:f4:c4:
f2:c1:c6:8d:59:3b:fa:8e:d7:17:68:6c:fa:35:6a:
86:2e:1b:44:e0:5a:72:85:9e:e5:eb:41:6c:58:18:
4a:ec:c1:b6:e2:10:d1:e8:41:b8:2d:ea:bc:8e:b4:
88:bc:0b:65:b1:fb:ec:3f:ec:41:46:33:92:89:ec:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:95:33:E1:37:FE:75:9D:F1:62:21:71:69:A2:3D:01:52:3B:34:D8
X509v3 Authority Key Identifier:
keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:38:45:3c:53:ff:35:e1:b4:ac:1f:53:6b:9a:6a:13:aa:f5:
a3:3c:5c:e5:8f:b5:4f:af:7f:d7:20:af:c6:c4:13:6c:32:38:
d0:a1:3b:c0:c9:07:d4:36:17:89:93:50:9f:c8:18:59:74:6b:
f9:33:fa:15:cd:f6:f1:16:1b:86:42:b5:c0:fe:f2:c3:af:ed:
5f:68:38:08:8a:b6:a6:b9:0a:e7:76:18:cd:c3:d3:ed:04:5f:
d4:dc:19:d2:d9:d6:5c:12:62:83:b5:7e:8f:cd:69:a9:b3:bd:
19:35:19:ea:a3:cb:2e:e4:72:c5:d6:be:9d:3c:e3:93:61:00:
de:a6:37:44:63:7f:53:54:60:75:3d:18:38:b0:29:de:8f:98:
a6:9a:4c:d7:d0:fa:7a:05:31:a4:0f:7d:95:2a:0d:b5:28:f4:
03:4d:bd:5e:59:2d:b3:a0:24:09:18:fa:ea:aa:67:f9:53:0b:
2d:54:23:82:bf:12:f6:f0:8e:18:98:96:85:92:07:fb:6b:37:
02:77:e1:30:f4:c6:36:9d:3a:1b:71:b1:5a:c2:63:2d:c5:46:
27:53:af:fc:23:40:65:14:d8:8f:53:f8:da:ed:ff:f1:dd:af:
c4:97:aa:c4:43:d8:d7:7c:72:8d:fa:b8:56:97:e5:73:35:c9:
63:d3:0b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:17 2026 by rpki-client