
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json)
Hash identifier: DDxGNR7oZ0iL2EUri5BoKvPfdMPgFOeghpQVejr0pfg=
Subject key identifier: 62:76:61:F1:34:0A:52:D5:96:30:5C:39:54:75:DF:2D:1C:67:BC:54
Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11
Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311
Certificate serial: 0A23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
Manifest number: 0A23
Signing time: Thu 24 Sep 2026 19:40:30 +0000
Manifest this update: Thu 24 Sep 2026 19:40:30 +0000
Manifest next update: Thu 01 Oct 2026 19:40:30 +0000
Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: wmkAJVI073SiZGiGlvacDhX5EVel0GnXY3jAWe5EP20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl
rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2595 (0xa23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311
Validity
Not Before: Sep 24 19:40:30 2026 GMT
Not After : Oct 1 19:40:30 2026 GMT
Subject: CN=6ab57cae-cf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:33:ee:04:3b:4a:b2:c8:0c:70:fa:f6:31:
4a:40:d3:76:36:5a:91:41:98:d7:a4:87:e5:2d:4f:
72:f9:6a:e0:04:3a:22:8e:c1:5f:22:9e:ba:7a:e6:
b3:21:0f:e6:da:f7:6f:5f:22:c7:83:dc:c3:2e:be:
ad:9c:55:8c:07:91:ab:11:fc:58:42:46:8b:4d:a7:
bc:85:d7:af:a2:7b:94:12:6f:76:2c:28:e1:cb:d6:
39:ab:07:91:63:c8:35:00:fc:c6:4c:28:5d:d2:d1:
ee:cd:b3:87:bd:82:e1:26:42:31:51:53:c5:7c:39:
8f:ee:30:8f:0b:69:42:e7:63:d7:05:d9:42:a5:4e:
b5:79:33:35:3e:3f:9a:72:20:c7:16:1a:24:8b:ad:
44:23:f0:e1:20:1a:db:bc:bb:80:34:9b:ee:5e:99:
3b:e0:e7:23:21:a7:a9:32:d3:5c:a4:61:a9:06:85:
c8:9f:0a:44:d2:af:56:4e:4f:d9:4c:6b:10:9e:c8:
38:27:0b:02:b6:38:99:83:74:c4:c7:28:9c:2c:96:
95:9c:62:f1:f9:7a:d1:76:1a:a8:7b:10:66:9c:84:
75:19:cd:fe:ee:4f:1e:8d:d8:a6:4a:21:75:36:1f:
c1:9c:3e:f4:27:55:c7:7a:75:83:57:ac:31:d2:66:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:76:61:F1:34:0A:52:D5:96:30:5C:39:54:75:DF:2D:1C:67:BC:54
X509v3 Authority Key Identifier:
keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:38:3b:b3:a5:b5:8b:d1:c7:f9:31:2c:8f:54:d9:9d:f6:65:
e7:a6:1d:df:5d:ff:9d:0d:dc:cc:20:24:56:a1:f6:9e:84:50:
96:bb:04:48:22:90:97:98:ea:33:0f:d4:7c:08:53:72:26:98:
34:62:7c:08:41:c3:5d:90:cc:cf:7a:24:96:55:07:5b:16:a4:
31:8b:62:ed:b1:3e:5e:81:7b:6f:7c:fb:f7:07:bc:fd:44:43:
b3:43:0a:d1:ae:b2:75:4e:5c:5d:0a:6b:1b:72:9f:3b:86:9c:
73:d4:c0:e1:18:ee:58:28:3f:f2:6f:06:87:a1:8c:97:67:65:
60:78:51:44:d2:c5:b6:b1:99:be:a3:82:72:6f:62:aa:f2:0e:
45:a5:fb:c5:eb:2b:c3:3e:f2:d2:1f:61:d2:cb:83:d4:bc:ca:
a7:54:ed:84:06:42:5d:bd:14:b0:ca:c9:b0:d9:58:8c:e5:8c:
2f:8b:a1:2e:58:3b:60:a7:aa:48:c8:27:a4:fa:bd:69:47:86:
bd:fa:6a:d7:c5:af:49:54:0e:be:dc:34:1b:b1:b2:99:09:e4:
a7:88:d1:2a:50:0b:77:a0:bc:9b:8c:b2:ea:1b:e7:07:64:c6:
e8:02:b6:b3:0f:ca:39:d2:a6:5f:82:fa:ee:df:04:4e:2e:0a:
5b:c5:43:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3
RDFEMTUzMTEwHhcNMjYwOTI0MTk0MDMwWhcNMjYxMDAxMTk0MDMwWjAYMRYwFAYD
VQQDEw02YWI1N2NhZS1jZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAojoz7gQ7SrLIDHD69jFKQNN2NlqRQZjXpIflLU9y+WrgBDoijsFfIp66euaz
IQ/m2vdvXyLHg9zDLr6tnFWMB5GrEfxYQkaLTae8hdevonuUEm92LCjhy9Y5qweR
Y8g1APzGTChd0tHuzbOHvYLhJkIxUVPFfDmP7jCPC2lC52PXBdlCpU61eTM1Pj+a
ciDHFhoki61EI/DhIBrbvLuANJvuXpk74OcjIaepMtNcpGGpBoXInwpE0q9WTk/Z
TGsQnsg4JwsCtjiZg3TExyicLJaVnGLx+XrRdhqoexBmnIR1Gc3+7k8ejdimSiF1
Nh/BnD70J1XHenWDV6wx0ma6SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJ2YfE0
ClLVljBcOVR13y0cZ7xUMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG
MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV
eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl
Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKDg7s6W1i9HH+TEsj1TZnfZl56Yd313/nQ3czCAkVqH2noRQlrsESCKQl5jq
Mw/UfAhTciaYNGJ8CEHDXZDMz3okllUHWxakMYti7bE+XoF7b3z79we8/URDs0MK
0a6ydU5cXQprG3KfO4acc9TA4RjuWCg/8m8Gh6GMl2dlYHhRRNLFtrGZvqOCcm9i
qvIORaX7xesrwz7y0h9h0suD1LzKp1TthAZCXb0UsMrJsNlYjOWML4uhLlg7YKeq
SMgnpPq9aUeGvfpq18WvSVQOvtw0G7GymQnkp4jRKlALd6C8m4yy6hvnB2TG6AK2
sw/KOdKmX4L67t8ETi4KW8VDTg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:30:36 2026 by rpki-client