
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json)
Hash identifier: pBXtWvFUs/zVF0so3etQq0hTskFsCgUeFvCnK5K2Kkc=
Subject key identifier: 8E:25:90:99:62:48:A0:F0:08:19:72:90:60:28:C3:9B:DF:3B:36:92
Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Certificate serial: 037A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
Manifest number: 036F
Signing time: Fri 25 Sep 2026 00:40:48 +0000
Manifest this update: Fri 25 Sep 2026 00:40:48 +0000
Manifest next update: Fri 02 Oct 2026 00:40:48 +0000
Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: WRpHc33Bg7/Elk10VAUTh6fU88KxdRypvs9bo87rIqc=)
2: E961050E58D311F18E39767BA5833773.roa (hash: SGyrZgoOyY3v7LefvD/KwjXbi3mtFgtFoBnUddJJDfk=)
3: 05D86F1058D411F198F2A881A5833773.roa (hash: khtXuRN2/6rEPemqebTu2pFMVWjbyHDtvqkyXHj0hmY=)
4: EA83E6F458D311F18E39767BA5833773.roa (hash: 7aqLjxsVl/1/yFN4z+qOSpO/mBLZpSJYB4XFpd0ZCI4=)
5: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: xwuBUsXePKpvMYj/ZZ+LZ8VttYRBb2/xivwKeGbI3bE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Validity
Not Before: Sep 25 00:40:48 2026 GMT
Not After : Oct 2 00:40:48 2026 GMT
Subject: CN=6ab5c310-4b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:62:9a:ea:66:d5:f0:0f:a7:b3:55:3b:fe:
ec:cf:11:28:ef:e7:b5:a0:3c:08:08:10:12:98:43:
a7:fa:8e:62:11:ef:13:af:30:bf:22:4d:64:0c:7c:
96:23:1b:2c:46:38:18:14:d9:46:24:fc:9c:a7:ef:
c9:bf:b0:6a:95:84:2f:6d:06:8c:ad:1c:7a:63:fe:
ae:92:40:8a:41:bc:f2:df:64:35:ea:21:3c:44:ef:
a5:a5:f5:7b:a5:b2:37:52:a6:93:3f:1f:36:f1:0d:
20:c7:b6:cf:bd:af:c7:28:5e:ec:bc:b4:b1:bb:f6:
fb:f5:83:31:fc:a7:b9:db:dc:c1:8a:86:56:0c:4c:
91:c0:bd:1b:05:7b:6e:e4:d7:ef:94:39:73:99:f8:
0a:61:4f:60:cb:af:6e:55:73:40:eb:4c:90:20:cc:
d7:53:ff:68:13:05:37:9b:9b:35:10:a5:b2:f3:b8:
a5:df:6b:7c:3a:ea:23:7b:c2:92:fe:55:45:fa:bb:
13:6f:7d:84:bc:00:6e:91:61:4f:77:f4:b0:d3:61:
29:d4:d1:18:a3:27:e6:78:71:03:69:0c:76:07:79:
a3:9d:b8:b1:12:1d:db:fc:9b:e9:77:f3:75:f3:69:
d5:57:2a:b2:57:38:3b:a9:cb:a7:5c:ef:35:80:c3:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:25:90:99:62:48:A0:F0:08:19:72:90:60:28:C3:9B:DF:3B:36:92
X509v3 Authority Key Identifier:
keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f9:ba:97:c7:66:b1:a7:ab:ea:25:ec:2c:bf:61:f5:a4:93:
13:d7:08:f3:d9:85:79:4a:94:5f:f7:05:e5:5a:1c:6d:21:b8:
ce:19:0c:ef:40:d6:87:dc:f6:93:5f:4f:cc:6c:bc:e1:14:5a:
78:12:37:72:95:fc:89:30:df:27:31:00:a5:e9:12:23:e3:53:
7d:6e:0d:c9:23:09:1e:2d:f2:a2:98:96:49:9c:1d:b3:a2:33:
f5:1a:0a:d1:86:d3:7b:73:11:43:fc:8c:b9:7e:54:11:d0:3d:
cc:86:cd:69:44:0c:da:f3:0b:9a:ee:4b:89:53:38:0a:de:f7:
a1:b8:3c:eb:79:9d:d5:42:ab:01:ed:dc:f9:27:9d:d1:8b:0c:
50:eb:68:6b:1b:d1:80:c8:cc:89:1c:3c:1a:a5:2a:f3:e8:d4:
73:d7:c9:21:3a:30:f5:b2:46:5f:ed:43:80:e2:28:6a:98:da:
e1:ec:15:d6:3c:82:da:6a:3f:a6:c8:bd:79:4c:42:60:9c:ad:
c6:23:9b:96:07:20:6c:3f:f7:f2:a9:57:60:41:31:43:95:59:
a2:f1:8a:a1:4a:7b:e0:80:5e:13:9a:01:22:c4:08:6b:ee:6a:
a8:44:7e:94:95:7b:af:e9:b8:33:51:8e:fe:f6:74:48:e3:37:
bf:d8:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:44 2026 by rpki-client