
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
File: 4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json)
Hash identifier: OQACZxWtYGAp0NRL0+Jr0Vtui/mXtFo8wZZjogUuSpk=
Subject key identifier: 41:F0:2F:79:D2:6F:75:A8:B4:6C:6B:E1:FA:B6:58:C2:F3:E4:C3:70
Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
Manifest number: 9E
Signing time: Wed 25 Mar 2026 06:32:56 +0000
Manifest this update: Wed 25 Mar 2026 06:32:56 +0000
Manifest next update: Wed 01 Apr 2026 06:32:56 +0000
Files and hashes: 1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: ieyviqVM+t1pOUIIuCnPiZ5Fvy8gnVtH9c8wvU5l1YE=)
2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: j7nDmBZXblO/tpvpaih+MGRhVNByB2VTssko4z3YvKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Validity
Not Before: Mar 25 06:32:56 2026 GMT
Not After : Apr 1 06:32:56 2026 GMT
Subject: CN=69c38198-47bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:97:54:0a:96:2f:5b:ac:90:7a:dc:ac:3c:
97:0c:ce:95:30:6b:b2:06:ea:f2:af:97:98:55:18:
88:fc:b5:db:e6:d5:db:e0:55:fb:de:39:64:53:0a:
c4:81:87:ce:91:47:d7:2e:80:62:72:4a:61:0a:1a:
d8:00:83:b1:e7:df:fe:d5:58:ec:51:1f:70:2e:a1:
47:05:10:b5:07:9b:18:8b:38:3a:e9:b4:e0:b7:e5:
e1:ba:26:e4:ba:69:6d:d8:90:e9:d5:6b:fa:8d:72:
5b:ad:ef:cf:be:20:50:fc:3a:e2:74:04:98:71:e4:
fe:e4:7a:f7:bd:d3:5a:8a:53:dd:6f:5e:96:52:ac:
f9:78:d2:fc:1e:30:c2:e8:dc:a7:ae:32:9a:7a:8c:
a3:e8:c6:c9:1f:db:8a:d0:ef:b8:aa:1e:2a:fc:72:
c5:ec:0b:ef:1a:d3:29:f0:cc:62:a9:72:4d:4d:4f:
c2:26:36:67:7e:38:10:da:ee:09:22:9f:c8:4b:8b:
08:f2:24:a0:e9:7c:ee:cb:ac:27:b9:48:fa:97:3a:
ba:38:b3:0e:fe:ed:0b:6f:68:91:ee:f0:64:a9:80:
4f:ce:46:b8:67:08:9f:55:d5:41:3a:2b:df:68:86:
2a:e6:d1:d6:10:98:6e:94:d3:f8:fc:99:04:1b:f1:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F0:2F:79:D2:6F:75:A8:B4:6C:6B:E1:FA:B6:58:C2:F3:E4:C3:70
X509v3 Authority Key Identifier:
keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:26:be:54:a7:58:6d:61:19:6e:21:80:25:78:81:bd:af:ac:
ea:ba:4d:63:97:e4:10:d0:97:0d:1f:8f:03:fb:9c:69:fb:10:
83:97:d8:4f:18:76:e7:0c:63:14:e9:40:08:a7:0f:15:01:64:
9a:d1:95:20:7d:0a:01:5b:75:e1:b8:49:c8:ba:96:c3:9b:50:
c8:8c:d2:a3:41:ea:d0:31:8d:b8:38:57:31:70:da:ba:48:54:
c6:fe:75:21:ce:f5:e6:78:36:81:68:fd:63:b2:eb:bc:20:3a:
4c:31:1f:6f:8a:c6:8a:68:93:d5:85:c1:39:85:62:5c:42:e7:
84:6f:35:43:63:4b:ee:7b:a6:e6:26:b4:16:a9:08:8d:26:b5:
cd:15:26:0d:04:97:5d:42:47:a7:b0:2b:4d:f6:8d:90:84:22:
20:58:f9:da:66:c6:e2:23:47:63:70:6f:b8:71:bb:7d:2d:81:
5b:9c:3d:ca:da:2e:da:e6:74:08:e4:84:8e:44:1b:59:00:b3:
57:c1:dc:3d:ea:ec:4c:44:a8:53:56:d8:cd:e9:87:49:8f:33:
ac:bc:94:bd:31:10:35:52:94:90:49:59:bf:06:5a:a1:d6:4b:
37:c3:0e:27:41:7b:24:a0:ae:31:d6:d8:3c:89:3c:8f:70:73:
09:f1:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:39 2026 by rpki-client