
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier: s3q511GXHqZndIF9ZBZo/Pif2zRYbXjr0J7A3PAORmM=
Subject key identifier: 30:92:AB:C3:A5:08:9D:8B:64:6D:A3:58:D3:69:F5:EA:F5:E1:D8:12
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number: 011E
Signing time: Wed 25 Mar 2026 04:59:30 +0000
Manifest this update: Wed 25 Mar 2026 04:59:29 +0000
Manifest next update: Wed 01 Apr 2026 04:59:29 +0000
Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: LGfaZAXJwSTMufCjChMoF+lPDTu25q0djpGErZXWw0c=)
2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: y1LKkgDaRj1ISWViw1cpYZqZzU1kENkFG+OyOnuW6h8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Validity
Not Before: Mar 25 04:59:29 2026 GMT
Not After : Apr 1 04:59:29 2026 GMT
Subject: CN=69c36bb2-e3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:8f:a1:63:c8:06:9f:16:c6:0b:fe:9d:50:
c7:06:f1:8b:95:29:2a:ce:6c:85:63:02:be:d1:2a:
8a:d4:10:95:4e:5b:5a:95:6e:a7:48:ac:05:31:f0:
2a:99:48:6f:a1:e7:7c:27:dd:2f:b5:ae:67:b0:c6:
c6:02:59:50:67:44:c5:60:88:36:16:ef:c6:52:e9:
ea:65:7e:83:ea:9c:f6:69:e1:a6:11:00:00:6e:2b:
c2:35:60:90:a8:9e:c4:c5:2d:41:b2:82:ea:6c:ec:
c9:e0:b0:03:e3:23:aa:31:e3:a5:1e:5c:44:b2:70:
ba:73:45:54:d7:33:72:18:7f:bc:0d:3c:5e:80:21:
f3:ec:af:f8:76:01:12:ce:ea:bb:23:50:1b:89:0b:
95:11:ec:e8:e5:f3:00:2c:69:b2:20:cf:8c:61:f8:
72:bc:51:da:d0:12:66:39:43:28:3b:e5:61:fb:6e:
de:04:a9:8e:f0:9b:f9:82:fa:5e:63:df:af:19:65:
8c:e4:b4:2f:20:be:d8:05:c0:00:45:21:c5:ff:79:
d2:a7:51:bb:49:06:9a:da:27:eb:29:35:37:a0:ae:
ce:f9:a5:ed:5e:5c:3b:6c:70:30:49:99:c6:5e:fa:
c5:ce:6c:df:25:cc:38:e1:d7:04:3a:15:80:29:73:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:92:AB:C3:A5:08:9D:8B:64:6D:A3:58:D3:69:F5:EA:F5:E1:D8:12
X509v3 Authority Key Identifier:
keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:0b:b9:80:b5:05:a0:32:26:03:b7:2d:6c:2c:1c:8e:6c:08:
38:64:06:80:b8:c0:ce:1b:36:ae:fc:a8:20:f7:2d:5c:2d:03:
14:f1:f2:12:27:be:66:b4:69:0a:5c:a4:9b:2c:e1:76:09:9e:
dd:2b:e4:a5:b0:8e:9c:f7:ba:42:53:7f:93:bd:45:7b:a2:3e:
49:7b:6b:83:2d:2f:e4:d1:6a:0e:2c:92:7d:92:5c:25:ea:79:
86:88:cb:5a:60:63:17:e7:e1:81:68:81:8a:4a:21:4d:2a:95:
42:ca:01:85:81:9b:f1:9b:08:c1:46:40:18:89:e8:c0:da:ad:
81:36:c5:e1:96:92:8c:f1:15:fe:bb:97:1b:5a:36:7e:24:be:
ac:3f:63:5d:ef:fb:2c:4e:de:15:2c:b6:ef:75:70:41:44:7a:
fe:92:21:7e:98:a3:ca:72:92:71:f9:d9:71:de:b1:96:99:72:
7e:ec:18:1d:47:b6:58:3f:31:9d:38:39:dc:33:81:69:f6:6a:
ae:90:b3:d1:38:75:a9:a8:bc:e1:d8:b4:0c:d5:0c:97:f4:d6:
24:0b:e9:af:9d:6a:46:47:2d:7b:84:59:2c:bc:fa:24:1f:eb:
34:29:f5:9d:5d:69:79:16:18:13:ce:82:2b:db:e8:eb:5a:67:
44:2d:24:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:53 2026 by rpki-client