
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File: 4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier: kPD+DBVvduzWqDir5yAaZPdzdyv4uG31zACZ/TkmUHs=
Subject key identifier: B5:3D:01:07:55:6F:6F:F0:6D:5B:9F:C7:26:80:E1:50:1B:EB:D3:A1
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer: /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number: 48
Signing time: Wed 25 Mar 2026 07:29:49 +0000
Manifest this update: Wed 25 Mar 2026 07:29:49 +0000
Manifest next update: Wed 01 Apr 2026 07:29:49 +0000
Files and hashes: 1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: /2/yh/miK/KGDaGKfY723i4jJlo4u/bAw9zzQBvOAW8=)
2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Validity
Not Before: Mar 25 07:29:49 2026 GMT
Not After : Apr 1 07:29:49 2026 GMT
Subject: CN=69c38eed-d001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:9a:4f:8d:70:ea:28:be:91:b1:57:69:cb:
b1:33:e6:95:81:04:7e:2b:24:13:80:76:1c:36:67:
26:9b:14:3c:70:16:b9:a1:3c:6b:d6:7e:2a:a6:92:
7b:48:f0:42:95:a5:be:e4:c0:7d:9d:57:a0:51:8a:
e2:69:ba:67:26:4b:7a:74:00:5d:01:22:88:11:67:
72:34:19:12:e8:c4:2b:72:08:7b:81:51:bd:13:4f:
1f:25:50:11:26:6c:66:e3:fb:81:1a:9e:cc:97:25:
f7:96:6e:92:46:bc:43:0f:3a:ff:8e:f6:8b:25:ed:
88:78:37:ab:c6:c5:81:3f:e9:82:3a:83:0c:1d:0f:
0c:3b:db:cb:99:56:e9:55:3b:9f:3a:9b:f3:aa:be:
dc:38:4a:ff:ba:b8:ba:7c:c1:c6:64:f3:0a:05:83:
bb:84:3b:2d:6b:83:fa:8b:74:31:79:ba:b9:a0:c6:
37:6a:e1:6d:e8:c6:c9:46:72:54:89:96:2d:4a:23:
31:26:76:74:c4:82:b4:af:3f:cf:c9:43:2b:ab:58:
89:e0:55:4c:fb:d1:4d:29:16:ab:ce:de:b8:7c:18:
c5:ee:20:0a:4e:0d:66:bc:a9:7a:1d:fc:d5:09:ee:
41:81:19:18:7e:5c:88:d0:a1:6a:7d:f2:22:57:d8:
e0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3D:01:07:55:6F:6F:F0:6D:5B:9F:C7:26:80:E1:50:1B:EB:D3:A1
X509v3 Authority Key Identifier:
keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:17:0c:b0:a0:c6:9b:6d:05:00:d0:8d:25:ce:91:f2:30:c9:
aa:d5:d8:43:db:d1:55:2d:ab:f4:ae:a3:a0:f2:30:56:42:f0:
6c:91:99:84:f1:18:0d:8a:86:df:49:e2:68:de:a9:d5:26:1c:
f1:04:26:9d:96:76:c3:d4:27:8e:c7:b2:66:43:c3:a9:32:1b:
09:b7:f0:35:a3:c6:5d:da:7d:8f:c8:ff:e4:bd:b3:93:02:18:
3d:31:24:20:79:3f:2f:b0:90:4e:92:e0:dc:09:31:c4:6e:d3:
58:66:43:4c:5f:16:df:94:47:f6:42:b0:31:43:04:60:98:28:
a4:3d:b1:8e:2f:47:22:e0:89:ad:02:09:eb:9a:68:01:90:69:
ce:f0:a5:88:83:75:4d:6b:8b:2d:2b:07:93:da:b3:fa:4d:3f:
1d:47:99:c5:3c:ba:ff:74:70:80:87:2e:3b:c3:36:af:f9:60:
fd:bb:44:bd:4d:7b:2e:b6:d6:ef:99:4a:e1:56:a9:e9:28:cc:
da:f7:9f:aa:1e:dc:00:88:c7:97:ad:2a:c4:a6:09:6e:b4:4e:
ff:63:e2:f3:1b:09:88:70:fb:66:a5:86:eb:15:3d:51:9b:f1:
0a:79:d6:16:29:88:f3:9c:69:03:a4:de:ef:b8:7b:08:37:39:
b5:f3:c0:07
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
M0I4NzExMC8GA1UEBRMoRTAxRTlEMzZFQTI0OERDMUY2NzdDMzE0QkY2QzkxODI5
MEU2M0ZGMjAeFw0yNjAzMjUwNzI5NDlaFw0yNjA0MDEwNzI5NDlaMBgxFjAUBgNV
BAMTDTY5YzM4ZWVkLWQwMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGy5pPjXDqKL6RsVdpy7Ez5pWBBH4rJBOAdhw2ZyabFDxwFrmhPGvWfiqmkntI
8EKVpb7kwH2dV6BRiuJpumcmS3p0AF0BIogRZ3I0GRLoxCtyCHuBUb0TTx8lUBEm
bGbj+4EansyXJfeWbpJGvEMPOv+O9osl7Yh4N6vGxYE/6YI6gwwdDww728uZVulV
O586m/Oqvtw4Sv+6uLp8wcZk8woFg7uEOy1rg/qLdDF5urmgxjdq4W3oxslGclSJ
li1KIzEmdnTEgrSvP8/JQyurWIngVUz70U0pFqvO3rh8GMXuIApODWa8qXod/NUJ
7kGBGRh+XIjQoWp98iJX2ODrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtT0BB1Vv
b/BtW5/HJoDhUBvr06EwHwYDVR0jBBgwFoAU4B6dNuokjcH2d8MUv2yRgpDmP/Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzQjg3LzJFMjZCNDgyQkNF
MzExRjA5ODcxNzA0OEM0RjlBRTAyLzRCNmROdW9ramNIMmQ4TVV2MnlSZ3BEbVBf
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNEI2ZE51b2tqY0gyZDhNVXYyeVJncERtUF9JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz
Qjg3LzJFMjZCNDgyQkNFMzExRjA5ODcxNzA0OEM0RjlBRTAyLzRCNmROdW9ramNI
MmQ4TVV2MnlSZ3BEbVBfSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCWFwywoMabbQUA0I0lzpHyMMmq1dhD29FVLav0rqOg8jBWQvBskZmE8RgNiobf
SeJo3qnVJhzxBCadlnbD1CeOx7JmQ8OpMhsJt/A1o8Zd2n2PyP/kvbOTAhg9MSQg
eT8vsJBOkuDcCTHEbtNYZkNMXxbflEf2QrAxQwRgmCikPbGOL0ci4ImtAgnrmmgB
kGnO8KWIg3VNa4stKweT2rP6TT8dR5nFPLr/dHCAhy47wzav+WD9u0S9TXsuttbv
mUrhVqnpKMza95+qHtwAiMeXrSrEpglutE7/Y+LzGwmIcPtmpYbrFT1Rm/EKedYW
KYjznGkDpN7vuHsINzm188AH
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:53 2026 by rpki-client