
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
File: 4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json)
Hash identifier: dDtuQShYmRQCGE+tg8fnS2JIIcnZJdoaL91bE9Pz3yw=
Subject key identifier: 10:52:44:76:62:9A:66:A8:55:30:30:43:5C:8B:33:58:FE:9A:96:D4
Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
Manifest number: DA
Signing time: Thu 23 Jul 2026 08:21:53 +0000
Manifest this update: Thu 23 Jul 2026 08:21:52 +0000
Manifest next update: Thu 30 Jul 2026 08:21:52 +0000
Files and hashes: 1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: U1Dh52ZVz4+zoNRYQvd1m3V5TZi3M/sQj4U2SUxVsRw=)
2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: j7nDmBZXblO/tpvpaih+MGRhVNByB2VTssko4z3YvKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Validity
Not Before: Jul 23 08:21:52 2026 GMT
Not After : Jul 30 08:21:52 2026 GMT
Subject: CN=6a61cf21-e8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:dd:5f:10:ab:76:a3:3d:d2:af:39:88:b9:
f8:ee:2e:c4:cd:f0:b1:54:35:ab:2e:e2:cf:3b:ee:
79:20:51:91:f2:b4:e9:94:8c:f5:ca:b0:2b:ff:27:
26:a7:0f:7b:eb:04:3c:58:d2:6c:76:73:e4:35:95:
5c:1e:26:81:39:2b:97:e2:9a:15:60:ef:7c:7e:59:
d6:dc:b7:04:df:8d:08:95:4a:b3:15:97:62:60:64:
b4:dd:e5:36:a2:1b:fb:34:29:33:0d:3b:41:9a:16:
ce:fc:76:ae:ed:bc:13:10:59:b7:3d:6a:04:82:41:
fa:5a:79:13:91:a8:84:d6:10:fd:6a:a1:9a:a1:8a:
9c:4c:87:16:7a:2d:e1:17:7c:6e:fd:13:2d:4e:8c:
61:18:20:58:c8:99:72:60:12:ce:ef:1b:a3:92:b7:
f2:75:b3:ef:f9:47:3f:6b:de:19:d6:72:90:d1:1b:
22:29:b3:e2:da:ba:d7:5f:4f:07:90:fd:fb:97:49:
01:d7:87:d8:f7:7f:ef:83:fd:00:a7:96:5d:1b:88:
bf:01:be:21:2c:7b:a7:94:53:73:78:45:8b:5a:37:
6e:f9:5b:16:48:b3:c4:b0:e0:3f:76:ba:6c:13:8f:
dd:34:18:86:a3:32:b2:6e:75:76:6c:42:ed:8c:ae:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:52:44:76:62:9A:66:A8:55:30:30:43:5C:8B:33:58:FE:9A:96:D4
X509v3 Authority Key Identifier:
keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ff:0e:0c:e2:ee:49:96:ec:e1:62:07:6f:10:88:11:58:4a:
56:58:6a:f5:8f:d7:c3:d3:9f:4b:4e:6e:ad:18:f0:b3:c4:43:
0f:38:95:c6:86:45:f4:38:6f:8c:ba:72:9b:0a:87:03:7d:8c:
6b:9b:aa:98:97:20:6d:de:d3:07:c5:c5:3f:0e:29:21:f1:2c:
18:75:f0:2b:44:a0:cc:9c:8d:f9:23:4d:1c:f4:47:3e:e2:c4:
e9:09:57:44:4e:83:42:70:b3:a0:40:ea:89:cb:e2:c7:df:a0:
b1:a2:5a:6a:81:75:4a:42:1a:77:86:14:78:52:56:6f:bb:f0:
37:eb:fa:82:43:04:ca:65:b9:58:1b:bc:5a:fb:7e:c5:41:37:
16:56:1b:ef:fc:94:a2:fb:8a:3e:38:5e:b9:d4:d8:5e:f3:c3:
1d:f0:f4:88:7c:b6:f1:0b:bf:29:4a:ad:8a:86:89:52:a7:a7:
ce:b5:42:c0:35:6c:ad:e8:e7:d3:26:d7:2f:36:c4:f7:96:59:
6c:55:1e:8d:c5:ef:e5:31:83:47:8b:4f:8a:0d:5b:20:c7:e9:
9f:6e:cd:94:11:2e:ee:27:b7:e8:ac:6a:31:b1:34:70:4c:5d:
60:d0:79:80:d4:38:83:7b:4c:01:77:c8:7e:5b:62:fb:69:1e:
6d:de:37:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:52 2026 by rpki-client