
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier: 4Ip0l2V3sCa9iVghfyYK5I9/rbCilxtWYt2lNfIyV6Y=
Subject key identifier: A9:36:8E:E6:21:CD:0E:BF:99:CE:70:FC:6E:93:39:20:E0:4D:11:E3
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number: 0136
Signing time: Mon 11 May 2026 05:33:59 +0000
Manifest this update: Mon 11 May 2026 05:33:59 +0000
Manifest next update: Mon 18 May 2026 05:33:59 +0000
Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: SRfSjnIz2Ynw94COz8NMPxSdU3JQxrzRKGuuMX7BgVI=)
2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: y1LKkgDaRj1ISWViw1cpYZqZzU1kENkFG+OyOnuW6h8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Validity
Not Before: May 11 05:33:59 2026 GMT
Not After : May 18 05:33:59 2026 GMT
Subject: CN=6a016a47-f0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:8d:93:e7:f1:81:19:d5:94:17:ba:c0:f9:
e9:4f:ff:07:b9:f1:d5:b6:e2:6e:d1:45:59:b5:f0:
44:9f:3f:5b:a7:99:bc:4e:15:68:2d:88:6f:05:2d:
a6:e8:38:55:98:c1:22:ec:8d:f1:cb:4c:13:91:8f:
85:a0:a6:08:84:01:12:00:82:6d:d9:1b:94:cf:d3:
e4:80:7e:90:99:b5:4c:40:22:85:30:78:13:ee:e0:
75:dd:02:38:3c:72:a3:5d:c7:8f:79:77:6b:ca:1b:
0a:25:95:16:14:01:7b:47:04:13:b7:e3:be:ed:b6:
2c:00:f6:c7:d2:5a:ae:97:00:32:e6:bc:9a:2f:bd:
ac:7b:21:46:de:93:3c:bf:23:ef:2a:65:58:bf:3e:
88:cc:4a:c5:5f:4a:f9:be:65:2e:ef:fe:30:7e:8d:
9a:86:84:50:96:33:6e:3e:54:42:4e:e3:48:f6:0e:
d3:30:03:08:61:52:94:7a:c5:19:60:59:2e:73:33:
85:64:19:e6:ee:ca:36:01:67:74:46:1b:50:67:e5:
cf:f6:ab:cc:44:6e:48:51:ba:25:80:47:3a:ae:5f:
91:95:c8:21:07:16:ee:5a:14:6f:67:a9:f8:f1:bb:
71:d6:b8:6f:d5:e7:91:3b:6f:e6:07:6c:b4:b8:7a:
b3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:36:8E:E6:21:CD:0E:BF:99:CE:70:FC:6E:93:39:20:E0:4D:11:E3
X509v3 Authority Key Identifier:
keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:68:13:1b:bc:ce:28:54:0a:7a:23:5b:a0:8c:cd:56:7f:b8:
f9:e9:7f:07:3b:cb:56:57:2e:d7:04:ac:fd:11:cb:d5:35:1f:
00:9e:93:8d:f5:fe:e4:14:30:f2:b1:cb:02:b2:fc:08:45:a9:
6c:2e:b2:6b:23:04:77:9a:47:b7:16:c5:31:d2:41:ec:c0:83:
c7:a7:f6:9e:c4:6b:8c:39:8f:c5:9f:8f:92:1a:03:68:3b:14:
a7:d5:2e:b7:cf:a1:7f:2c:4e:06:bc:57:e2:02:19:04:cd:16:
83:4b:06:28:7e:20:9d:be:43:83:9b:0c:1c:a6:de:ba:9a:8d:
e3:b8:fb:0b:c2:da:b8:3a:98:35:0b:6e:29:3b:38:56:6d:cc:
30:d2:77:b3:29:ee:23:1f:2d:e0:0b:09:1f:2c:50:4d:0c:ee:
71:2f:4c:2c:ab:99:75:41:28:57:e8:2c:a9:fe:c8:97:8a:5a:
b7:f9:89:e7:e7:47:3b:63:40:8d:d8:ca:b9:87:41:f0:42:7e:
a6:0c:d8:18:42:89:67:b9:d7:be:ff:d5:1b:c7:c2:f4:f8:f8:
b6:4b:e3:27:10:ed:db:3f:ae:d5:3d:b8:f3:88:02:50:7c:21:
52:93:20:01:82:bd:e9:53:fe:d0:07:1d:0f:5a:5d:2a:27:d0:
b8:7a:b7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:54 2026 by rpki-client