
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
File: v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json)
Hash identifier: G2YwOSbU2oel3wqXrHfwirKSSa0RUq2v7h9cDTTCYLU=
Subject key identifier: EB:95:E7:5E:FB:DE:7B:09:9D:A5:E1:44:2F:37:B4:65:EA:28:33:17
Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2
Certificate issuer: /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
Manifest number: FE
Signing time: Fri 25 Sep 2026 06:17:11 +0000
Manifest this update: Fri 25 Sep 2026 06:17:10 +0000
Manifest next update: Fri 02 Oct 2026 06:17:10 +0000
Files and hashes: 1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: tjCsL5G0St+8CSltz1DmE1b7BBwIICw8i31jWRcqx2Q=)
2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: Z9wsNscGW8jTuOrPcKnc3KiOXLu3fKLaOWy4uh1nNqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl
rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
Validity
Not Before: Sep 25 06:17:10 2026 GMT
Not After : Oct 2 06:17:10 2026 GMT
Subject: CN=6ab611e7-702d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:e9:61:82:07:57:ea:6e:36:08:8d:d9:d1:
f6:96:f2:6b:c9:21:c8:03:0f:97:e1:d4:74:97:cb:
aa:e9:17:c0:ca:af:78:06:9e:3c:45:75:ba:f9:79:
7e:14:a5:ec:e5:09:ac:2a:29:9d:71:3c:90:21:52:
75:6e:5e:50:26:e0:ca:51:65:ff:fc:7b:77:11:50:
f3:13:19:6c:a6:e5:a3:7d:91:86:6c:ee:cd:37:33:
0e:a4:a9:bd:2d:c5:3e:44:14:a7:fb:f4:d5:7d:77:
9f:ef:6a:e4:77:45:ee:33:8e:cb:d1:52:ec:08:bc:
ee:32:fe:36:96:c9:3b:38:a1:bb:ee:d6:33:85:fd:
d0:e1:1c:cc:33:40:a0:a2:c0:39:c9:53:5e:fc:5c:
16:5b:bc:1b:db:28:d3:c3:cd:9d:ff:4b:cf:be:d4:
3d:ff:94:49:1f:24:67:50:b0:bf:e5:8e:f1:1b:f2:
b7:dc:bb:23:25:a5:15:cb:cd:d6:02:fa:fa:27:ab:
02:fd:b1:d7:f3:9e:65:f6:73:1d:6c:28:08:76:af:
7e:51:b0:73:8b:ad:c8:9b:d4:9a:38:1f:d3:51:5f:
81:05:7f:69:fe:04:4d:46:c5:6a:e3:eb:fa:fc:c3:
08:d8:d9:04:f5:e4:71:b3:d1:98:51:d5:f2:d3:d6:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:95:E7:5E:FB:DE:7B:09:9D:A5:E1:44:2F:37:B4:65:EA:28:33:17
X509v3 Authority Key Identifier:
keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:95:ae:01:7c:9b:c3:62:a6:7c:aa:fb:57:84:b7:a2:e9:3f:
01:ec:4a:80:0a:af:d2:45:e8:05:9a:c1:af:53:11:1e:bb:dd:
e3:45:fd:fb:80:76:c3:94:ca:7d:27:1d:8a:76:3b:cc:47:15:
6b:df:bd:7d:ba:b5:6e:a5:4e:ae:01:00:89:ab:7b:20:07:ca:
55:b0:8b:51:fb:63:fa:66:10:8a:f0:39:9e:a5:33:cc:be:b7:
f2:9b:79:78:12:26:61:2b:d8:a8:82:59:93:f5:29:26:a6:b6:
50:d2:03:16:8b:e1:0e:31:9b:85:46:70:c5:7e:99:85:2f:8d:
f6:96:e9:e9:ae:da:9a:c8:77:eb:09:69:02:86:3a:ae:c5:44:
ae:9d:d3:b8:8f:20:68:c3:26:c4:c4:54:d5:4c:e5:93:30:ae:
dd:9d:7c:4f:d7:23:8c:71:77:a3:f6:06:7b:6e:ea:d3:80:2b:
ec:e6:ab:c3:b8:9f:5d:dc:77:26:bb:4e:90:f3:fb:5c:a0:c9:
2a:4b:88:5f:83:6e:dc:da:06:82:6e:46:c9:18:60:28:7d:cb:
53:c4:e2:ba:f3:fb:b9:b8:f7:f4:43:09:7a:b3:57:fb:0c:62:
9b:0c:56:2e:6c:0c:39:ba:8b:3f:3d:40:b6:30:d5:72:bb:02:
63:ae:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:43:11 2026 by rpki-client