
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
File: 4dFD2djqAiJMHLDJFey4TuKLWqo.mft (raw, json)
Hash identifier: WSL9nAGgOMGQCyJyA2fHjas/UD9wikGHQs/Qqmohnvk=
Subject key identifier: 22:1B:6A:3C:D5:D3:27:D7:3F:E4:8E:BF:82:5F:80:FB:3A:29:04:8B
Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
Certificate issuer: /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
Manifest number: 026B
Signing time: Thu 23 Jul 2026 03:17:21 +0000
Manifest this update: Thu 23 Jul 2026 03:17:20 +0000
Manifest next update: Thu 30 Jul 2026 03:17:20 +0000
Files and hashes: 1: 4dFD2djqAiJMHLDJFey4TuKLWqo.crl (hash: GnCuLGbaGmMkkZiDMBG/KaYGgsjllItKZrU4DHTYoNc=)
2: 9283C1F8DA6011ED9BC6175FC4F9AE02.roa (hash: LUHYZ/6kqurL/jOA9WsqOIbXqqpGM7KM4Mk7l+DENE0=)
3: 916EFEE0DA6011ED9BC6175FC4F9AE02.roa (hash: RremoPLYHwOMsWIoI3OXSWs8zLNwfSA8SoWwpFXqkZA=)
4: 90AE648CDA6011ED9BC6175FC4F9AE02.roa (hash: sE0FXcv6AB6dmDFKiWcu8KQiOOpk2VVY0iuOGiUmgoI=)
5: 91FAB1ECDA6011ED9BC6175FC4F9AE02.roa (hash: GKQTSqIzwIY4GOth+FkYLT5SOAlB26R/4wVLOg8mq+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Validity
Not Before: Jul 23 03:17:20 2026 GMT
Not After : Jul 30 03:17:20 2026 GMT
Subject: CN=6a6187c1-b76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:88:b9:2c:64:5a:4a:f6:af:6b:36:a3:3b:
12:14:f9:7b:23:e0:99:14:d0:02:71:12:c6:4d:59:
36:a1:bc:3c:77:94:8c:06:e7:54:60:d9:41:5f:d6:
7e:6f:eb:6f:15:c8:5a:c6:aa:74:7d:91:c0:ac:ca:
6d:10:f2:91:66:48:c2:b7:e8:98:60:27:d7:a7:1b:
a8:93:9c:22:11:8f:a2:40:fa:09:38:49:4e:3b:29:
de:64:39:79:22:90:f2:ac:98:03:48:9d:03:f6:9e:
ce:cf:1a:c9:0b:fd:1b:e7:01:4d:03:13:e0:7f:01:
d2:5d:5b:63:b8:6a:4d:03:c3:fd:cf:11:b4:56:69:
8c:26:cf:5f:4f:4d:a1:a7:78:d0:ee:5d:de:fa:ff:
58:82:41:f1:94:01:47:22:d4:cb:1d:11:63:32:ae:
c8:b7:6c:21:4c:01:12:44:f1:5b:6b:1b:c7:ca:e0:
03:9e:75:44:53:d5:53:b0:15:29:4c:2a:a5:67:4d:
bc:aa:69:64:3f:66:3a:84:59:3b:21:20:ca:f0:ba:
0c:56:6e:3e:b3:1e:be:ce:37:5e:05:6f:e2:c2:f3:
03:15:98:5c:7e:a5:55:cb:44:12:81:c3:cc:df:94:
c0:47:34:93:b7:9f:a0:6e:06:ca:b7:c7:72:6f:4d:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1B:6A:3C:D5:D3:27:D7:3F:E4:8E:BF:82:5F:80:FB:3A:29:04:8B
X509v3 Authority Key Identifier:
keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:90:21:aa:55:21:72:ae:db:c8:9a:57:02:90:8c:30:05:ec:
1a:99:32:c6:a2:0f:66:94:ad:6a:4e:58:d9:94:68:1b:40:ec:
c0:57:5c:f5:8d:6d:b9:52:c7:ca:2f:2c:5b:9e:a5:e0:51:c3:
86:82:ff:cf:45:fb:31:0b:4b:69:08:6e:c4:75:ab:8d:31:94:
13:18:cf:0f:2f:94:a0:e7:51:af:5c:34:b9:df:41:b7:36:1b:
b7:ca:aa:54:8f:34:90:84:b9:55:aa:cc:66:eb:e3:56:5b:7f:
9c:4f:75:d3:74:ab:91:5e:3c:45:b4:4a:8d:46:35:78:34:00:
5b:75:83:10:ce:d1:05:93:d7:cc:48:cf:cb:ea:32:19:6f:3d:
7d:98:b5:d8:db:70:ab:5b:a8:c1:de:06:f4:78:8e:da:f4:fd:
62:ac:56:75:ed:b1:de:ee:d5:fc:25:43:9b:83:f8:f6:eb:63:
f1:8f:0b:ad:00:0f:5a:17:a2:74:49:3c:b3:30:60:dd:14:df:
01:44:28:88:51:a7:a9:33:a1:12:da:a6:7b:f2:7d:8c:7d:96:
12:ea:71:e5:a1:08:a4:3f:71:01:f9:20:4b:04:9f:61:42:37:
6c:5a:09:6c:10:97:93:6a:52:16:5d:d2:b7:2b:52:9a:d7:d9:
7a:94:45:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBDNTMxMTAvBgNVBAUTKEUxRDE0M0Q5RDhFQTAyMjI0QzFDQjBDOTE1RUNCODRF
RTI4QjVBQUEwHhcNMjYwNzIzMDMxNzIwWhcNMjYwNzMwMDMxNzIwWjAYMRYwFAYD
VQQDEw02YTYxODdjMS1iNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx/2IuSxkWkr2r2s2ozsSFPl7I+CZFNACcRLGTVk2obw8d5SMBudUYNlBX9Z+
b+tvFchaxqp0fZHArMptEPKRZkjCt+iYYCfXpxuok5wiEY+iQPoJOElOOyneZDl5
IpDyrJgDSJ0D9p7OzxrJC/0b5wFNAxPgfwHSXVtjuGpNA8P9zxG0VmmMJs9fT02h
p3jQ7l3e+v9YgkHxlAFHItTLHRFjMq7It2whTAESRPFbaxvHyuADnnVEU9VTsBUp
TCqlZ028qmlkP2Y6hFk7ISDK8LoMVm4+sx6+zjdeBW/iwvMDFZhcfqVVy0QSgcPM
35TARzSTt5+gbgbKt8dyb00PkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCIbajzV
0yfXP+SOv4JfgPs6KQSLMB8GA1UdIwQYMBaAFOHRQ9nY6gIiTBywyRXsuE7ii1qq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEM1My9DRTQ0NUJEMERB
NUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFpSk1ITERKRmV5NFR1S0xX
cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRkRkQyZGpxQWlKTUhMREpGZXk0VHVLTFdxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEM1My9DRTQ0NUJEMERBNUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFp
Sk1ITERKRmV5NFR1S0xXcW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEpAhqlUhcq7byJpXApCMMAXsGpkyxqIPZpStak5Y2ZRoG0DswFdc9Y1tuVLH
yi8sW56l4FHDhoL/z0X7MQtLaQhuxHWrjTGUExjPDy+UoOdRr1w0ud9BtzYbt8qq
VI80kIS5VarMZuvjVlt/nE9103SrkV48RbRKjUY1eDQAW3WDEM7RBZPXzEjPy+oy
GW89fZi12Ntwq1uowd4G9HiO2vT9YqxWde2x3u7V/CVDm4P49utj8Y8LrQAPWhei
dEk8szBg3RTfAUQoiFGnqTOhEtqme/J9jH2WEupx5aEIpD9xAfkgSwSfYUI3bFoJ
bBCXk2pSFl3StytSmtfZepRFCw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:33 2026 by rpki-client