
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File: 4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier: FOhqRuFZBnA+sInpXeIAgiVLowH3M0Q2FbijUgRpVr8=
Subject key identifier: B1:F5:2E:B9:80:DF:1D:EB:DA:B5:30:F4:2A:E2:8A:35:06:C6:AD:10
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer: /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number: 84
Signing time: Thu 23 Jul 2026 09:28:42 +0000
Manifest this update: Thu 23 Jul 2026 09:28:41 +0000
Manifest next update: Thu 30 Jul 2026 09:28:41 +0000
Files and hashes: 1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: I23hmoi+VNPFNrdYhdRqa+W3ZUsubHxWwJS9v+Dy9AY=)
2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Validity
Not Before: Jul 23 09:28:41 2026 GMT
Not After : Jul 30 09:28:41 2026 GMT
Subject: CN=6a61deca-831b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:4c:bb:09:ec:b9:2d:4c:d5:57:fc:9c:e6:
a2:3f:13:5c:75:23:6d:70:07:08:a3:8e:22:1e:b0:
14:d7:1c:37:42:67:36:b5:05:ed:a8:a6:47:6b:d4:
78:d7:4b:23:f6:7a:4e:40:e4:7f:b7:dc:00:4f:2b:
07:df:84:4c:ef:b3:81:1f:b2:f9:bf:ca:b4:87:0c:
60:ac:ff:3e:cc:e2:3d:a7:c9:71:e8:ad:5c:63:a9:
a2:df:da:6e:2f:57:95:45:8c:22:8e:5d:c6:83:60:
77:60:37:80:0a:fb:26:73:6f:91:1e:2b:16:0b:d0:
6f:82:03:cd:bc:fd:83:68:e5:90:c7:88:39:0a:2a:
27:df:82:05:d8:82:fb:af:51:a4:c8:b1:92:12:11:
63:d7:8f:ca:1b:aa:25:f2:e4:50:97:1e:9f:5f:62:
f4:8c:11:92:e6:b7:01:7a:2c:61:11:4b:6a:37:7b:
98:32:d5:c6:91:e9:5d:06:fd:1b:af:34:1c:8d:60:
a9:8c:02:46:bb:2e:eb:34:56:fa:16:08:58:12:92:
72:b0:16:2c:95:40:9a:8a:be:6c:32:a9:4b:a0:95:
bf:56:3c:d0:47:a6:b9:6a:a2:93:1e:14:86:52:97:
47:9a:17:9c:64:f3:42:22:f8:c8:5c:85:bc:fc:c0:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F5:2E:B9:80:DF:1D:EB:DA:B5:30:F4:2A:E2:8A:35:06:C6:AD:10
X509v3 Authority Key Identifier:
keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:ef:c6:ad:bf:2f:51:18:5b:a0:5c:52:71:ee:7c:d0:a5:ab:
7e:50:c2:bb:94:0d:99:0a:db:ba:f3:02:be:30:d8:b4:1f:f4:
0c:17:b9:d7:f7:b6:25:0e:ac:f3:38:ab:6a:c4:3e:c4:7e:3c:
d5:4a:e3:29:47:6c:d9:d2:a0:55:34:f3:1b:1b:d6:ab:f3:b5:
9d:cc:7e:0c:b9:c4:85:f4:97:5c:61:4d:fe:f9:ea:e5:29:97:
9e:07:74:83:97:42:cd:77:ef:9d:f4:2e:cb:31:1a:f2:d8:d1:
6a:45:7b:ae:bd:da:12:06:bf:ac:d0:7d:f8:b3:e2:f4:43:0f:
0b:8e:d1:b1:10:c5:6c:18:a1:68:c8:a5:20:8f:62:7f:c2:b5:
99:51:7e:0a:71:2b:cb:96:dc:06:67:7f:08:00:a3:8b:66:f3:
aa:57:47:3f:11:53:87:0d:98:4e:32:0f:89:dc:4c:71:17:58:
84:e7:29:a1:2f:8f:22:02:af:16:18:8b:77:11:43:32:63:00:
2c:c0:3f:e6:09:84:07:ac:31:18:ae:af:21:13:54:60:b6:99:
97:41:60:1e:4f:a6:70:d1:c3:27:49:f0:9b:64:00:36:ed:86:
74:56:7e:55:34:01:13:59:1b:00:4d:63:0a:d1:01:f7:3e:d0:
cd:c8:66:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:01 2026 by rpki-client