
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json)
Hash identifier: KUPTJNdo5rH62dFDHX/wQa0W3vT6NA43jJ31MJz8uhk=
Subject key identifier: 3F:B2:06:6A:DE:F9:A7:F9:8F:22:CF:0B:18:3F:F6:AF:73:9C:40:2F
Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
Manifest number: 020F
Signing time: Wed 13 May 2026 03:00:47 +0000
Manifest this update: Wed 13 May 2026 03:00:46 +0000
Manifest next update: Wed 20 May 2026 03:00:46 +0000
Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: c0NPh9QHPx7S7/nI5Xtv3ey7ACl3XgloW3zQRe/r1nY=)
2: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: moXXvJLFKkIqyJw20Q1OuyiRN76hq8AL96LMv4bv4WY=)
3: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: W6ueRJhH8jQdhiEkMLdiQl56SAAwLpTfKRe8+DuwqEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Validity
Not Before: May 13 03:00:46 2026 GMT
Not After : May 20 03:00:46 2026 GMT
Subject: CN=6a03e95f-5495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:d1:c9:3d:bb:2f:1d:5f:4b:27:e8:3b:9d:
a3:ca:fc:5b:2a:80:59:f3:0d:93:90:6b:85:5f:57:
cb:28:1c:ed:de:96:29:7a:2b:6e:7e:0a:49:df:31:
9e:c2:a8:aa:38:68:a2:fb:4e:66:2f:ff:3a:0d:ff:
4d:98:2c:26:e8:72:61:7f:6a:1e:71:b6:9c:f0:a8:
63:b0:57:dd:a4:00:17:7d:d5:4d:a5:08:f7:16:7f:
de:f3:75:f6:60:8e:7e:76:a7:d4:1e:28:02:23:bc:
2d:eb:29:c1:94:13:24:b0:6f:ce:88:db:47:fc:e2:
1a:bb:0b:f3:0c:1a:5b:5d:65:6a:4f:e6:75:f1:87:
74:b0:eb:82:3f:3a:16:2d:8b:23:02:c2:87:39:9e:
41:89:7c:5d:22:b4:e4:05:fd:7f:5f:9d:b4:db:5b:
2c:10:af:5c:14:65:bc:4d:a5:47:34:27:15:7f:08:
25:88:d3:d2:02:6f:79:93:f3:a3:4c:ff:3e:3f:bd:
45:4b:50:ec:47:46:87:ca:42:aa:be:7d:6b:57:1f:
62:4a:dc:3c:c3:5a:dd:3a:10:51:03:39:41:29:9a:
7c:7b:bc:77:3f:68:98:0d:01:ee:48:1c:41:b5:86:
ec:ac:1f:c4:91:a7:c8:30:89:bb:8a:f9:81:cf:6c:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:06:6A:DE:F9:A7:F9:8F:22:CF:0B:18:3F:F6:AF:73:9C:40:2F
X509v3 Authority Key Identifier:
keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cb:13:d4:4e:c9:78:e4:71:2e:b0:31:79:38:19:c5:9e:db:
6c:59:ba:0b:66:a6:c9:fd:8b:c2:3e:be:fb:44:e3:a4:f5:80:
c3:00:18:32:c6:29:3d:f9:c2:02:df:ee:1d:91:5e:56:65:28:
72:2d:25:30:6d:47:e5:b7:f6:b3:78:8a:46:4f:f7:1f:18:b1:
15:fe:58:b1:5c:dc:ee:75:37:db:0b:27:a1:e3:97:99:69:7f:
2a:2c:ce:0a:ba:cc:14:35:d0:53:8f:3f:54:dc:74:29:e9:26:
c5:3b:fa:39:aa:0d:ba:3c:e1:d3:24:51:3e:fe:d0:55:f6:43:
ed:2a:19:c8:fe:b9:c7:c9:e5:a8:be:c6:a1:b4:c2:d9:2f:71:
80:8a:3b:8b:60:6d:21:24:0e:0f:4e:19:fe:30:06:5c:47:b5:
2b:22:1b:0c:53:84:eb:84:7a:27:9f:61:88:c3:23:60:65:47:
75:b1:91:55:5c:b3:8f:d2:49:05:49:53:49:a7:89:47:29:d4:
c4:87:3d:db:05:e9:14:45:8b:ad:dd:d8:2f:d6:b8:03:32:ba:
e9:73:fe:70:03:66:04:8b:04:d3:c2:c9:11:a0:8e:f5:9f:ae:
5c:97:27:c0:00:4e:86:e6:c1:bc:f3:cb:6a:70:53:cb:49:4b:
c4:83:bd:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF
QTZDMjJCOTgwHhcNMjYwNTEzMDMwMDQ2WhcNMjYwNTIwMDMwMDQ2WjAYMRYwFAYD
VQQDEw02YTAzZTk1Zi01NDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/nRyT27Lx1fSyfoO52jyvxbKoBZ8w2TkGuFX1fLKBzt3pYpeitufgpJ3zGe
wqiqOGii+05mL/86Df9NmCwm6HJhf2oecbac8KhjsFfdpAAXfdVNpQj3Fn/e83X2
YI5+dqfUHigCI7wt6ynBlBMksG/OiNtH/OIauwvzDBpbXWVqT+Z18Yd0sOuCPzoW
LYsjAsKHOZ5BiXxdIrTkBf1/X52021ssEK9cFGW8TaVHNCcVfwgliNPSAm95k/Oj
TP8+P71FS1DsR0aHykKqvn1rVx9iStw8w1rdOhBRAzlBKZp8e7x3P2iYDQHuSBxB
tYbsrB/EkafIMIm7ivmBz2xT0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+yBmre
+af5jyLPCxg/9q9znEAvMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB
Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n
WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArcsT1E7JeORxLrAxeTgZxZ7bbFm6C2amyf2Lwj6++0TjpPWAwwAYMsYpPfnC
At/uHZFeVmUoci0lMG1H5bf2s3iKRk/3HxixFf5YsVzc7nU32wsnoeOXmWl/KizO
CrrMFDXQU48/VNx0KekmxTv6OaoNujzh0yRRPv7QVfZD7SoZyP65x8nlqL7GobTC
2S9xgIo7i2BtISQOD04Z/jAGXEe1KyIbDFOE64R6J59hiMMjYGVHdbGRVVyzj9JJ
BUlTSaeJRynUxIc92wXpFEWLrd3YL9a4AzK66XP+cANmBIsE08LJEaCO9Z+uXJcn
wABOhubBvPPLanBTy0lLxIO9VA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:04 2026 by rpki-client