
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
File: 4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json)
Hash identifier: uCxebkJpR70ne0pjaBPQZSQZ2mItdt7QbuUoul9Wo/Q=
Subject key identifier: 59:39:DD:C2:DA:C9:C8:7C:C7:C6:9E:96:B5:D0:DB:BF:5C:83:08:A5
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial: 0655
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
Manifest number: 062F
Signing time: Wed 22 Jul 2026 23:33:16 +0000
Manifest this update: Wed 22 Jul 2026 23:33:16 +0000
Manifest next update: Wed 29 Jul 2026 23:33:16 +0000
Files and hashes: 1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: DMbgWWwp7lrbuc1y7cLoisUBKgfnfouBxCorBU6EHqg=)
2: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: TBXfHIsLBP1r3Og38/Zn+SGz/Jmiive4bvBF8Q5gW6Q=)
3: F650791EF01411ED9210D060C4F9AE02.roa (hash: AWc+boEStiOUVPv+8IUahYFAvtg7A+MrQdgGzHZN4Yg=)
4: 6D655B7CAF4F11F0A741B236C4F9AE02.roa (hash: 2NIJ+RBIKW5iZiN3H8lcUO6ml0C3TxyzXOWCEv8U7M8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Validity
Not Before: Jul 22 23:33:16 2026 GMT
Not After : Jul 29 23:33:16 2026 GMT
Subject: CN=6a61533c-cd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:21:39:d4:4a:1f:95:80:56:1b:90:96:5e:
6d:23:eb:2e:97:83:36:ba:0a:f7:dd:d7:23:14:37:
46:3d:32:af:2a:d7:be:54:a3:98:3e:86:c9:00:32:
95:ff:dd:44:bc:3d:15:99:28:3c:9e:7c:40:d2:df:
b3:24:db:c6:78:e9:3d:c3:d7:b9:ad:89:ad:d6:03:
49:7a:6d:ac:b2:ec:8f:3c:ff:b9:5e:ad:c5:84:db:
cd:54:be:2e:35:7a:eb:17:9b:ad:69:c9:7d:40:2e:
ad:ff:42:16:5d:6e:e5:01:48:ce:88:80:91:3c:cb:
16:28:0a:a3:7b:48:9b:76:75:52:86:e1:0b:40:52:
98:ef:9b:fd:7c:2a:96:91:ba:38:10:73:41:fb:dc:
01:5c:07:77:0b:1b:1b:a2:f8:04:e6:cc:44:0f:6d:
9c:78:ef:03:c2:48:55:04:ac:41:82:27:0e:d0:66:
9e:f2:64:dd:00:cd:31:8a:2d:63:44:a0:cf:3c:8a:
32:4a:01:79:72:73:a0:d6:0c:d8:33:e5:a7:6e:72:
2b:02:c6:ae:4f:ed:32:a7:db:a6:ad:3c:e5:4a:6e:
21:8f:bf:c9:48:b0:d1:f5:8c:6f:51:de:5e:67:be:
b5:bb:71:b3:23:8f:69:1b:c7:d7:11:27:50:14:26:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:DD:C2:DA:C9:C8:7C:C7:C6:9E:96:B5:D0:DB:BF:5C:83:08:A5
X509v3 Authority Key Identifier:
keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:17:4f:10:d9:3f:ef:98:e8:b2:1a:e5:99:9f:9e:e1:5c:0d:
04:ec:b5:3c:a6:80:9b:b4:08:0c:4a:16:ee:83:c1:4a:74:2a:
ab:8d:2f:dd:82:d7:2b:b6:e6:f1:0b:9d:7b:01:51:cf:9a:0f:
b1:29:6a:9b:5f:5a:93:b7:81:bf:e3:f2:83:ac:43:ca:00:f8:
f5:b8:2a:9d:dd:2d:8d:3f:12:c5:32:3d:76:ce:4f:96:b2:52:
d8:5a:e0:21:31:0e:bf:f6:20:20:dc:25:e7:6e:c5:ad:e6:eb:
c6:3a:56:60:34:24:da:74:b4:23:1c:8a:7d:71:68:1e:d8:16:
e8:e7:b6:6d:89:73:16:24:20:ff:8c:3f:3e:09:08:cd:eb:36:
79:20:f1:b6:27:c4:07:24:f7:4a:fe:0c:10:bb:13:12:29:5f:
df:4c:da:59:17:a4:94:31:e3:34:35:d3:0a:6f:ae:22:5e:a1:
66:ba:e7:dc:25:49:6b:f2:7f:0e:da:25:2a:d7:24:4c:55:f7:
bc:0d:9a:64:f0:83:2b:b8:4b:78:01:68:5c:42:f5:1a:b3:bb:
2f:84:a3:12:09:b6:b8:64:63:63:c9:22:48:0c:e2:17:c2:a6:
72:a8:e1:87:4c:2f:ef:7c:d8:d8:bc:ad:21:d2:ac:7b:ef:f7:
62:c0:ab:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:56 2026 by rpki-client