
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json)
Hash identifier: n06INLTbdU5X7q85Q4fl2X6SP2P/rxo6pv2PigS+Z/0=
Subject key identifier: 0A:57:C1:06:1A:0F:81:B5:54:C4:4C:9F:9B:1E:DF:2A:9C:A1:E2:56
Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Certificate serial: 0891
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
Manifest number: 086A
Signing time: Tue 22 Sep 2026 20:47:24 +0000
Manifest this update: Tue 22 Sep 2026 20:47:23 +0000
Manifest next update: Tue 29 Sep 2026 20:47:23 +0000
Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: AAauScNcGSxyV+6jSsSsMMff+tbkD2jk1so8a/CIZm4=)
2: xGs6rug6WDHyh1ZySeTGRrJxMY4.asa (hash: 9yEt3DikIep4O7B9SercxIT/lUI+BT7pT0etSvn7IqM=)
3: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 4V6lPO7ag/YW0Vp0T9oZKnRuFp3L/Sg6PmpvkYR7JtQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193 (0x891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Validity
Not Before: Sep 22 20:47:23 2026 GMT
Not After : Sep 29 20:47:23 2026 GMT
Subject: CN=6ab2e95c-fc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:c5:eb:5d:fe:cd:97:ed:38:c6:4b:f0:f0:
62:03:0f:3c:38:ae:e1:60:f5:9a:ae:1d:83:67:ae:
d1:4f:08:1e:f6:6f:7b:1d:a0:9b:eb:71:37:9b:d0:
66:3a:3b:04:b7:fc:e6:85:e7:3d:2e:5d:9b:94:37:
53:ea:c2:89:eb:41:a5:e7:7c:f0:38:14:bc:3a:ad:
c1:fd:c1:2e:6d:cc:57:6d:7d:3f:95:a6:66:7f:ef:
3c:13:21:07:71:c5:2e:53:e7:77:69:7c:ee:8a:67:
13:5f:c2:34:be:84:84:6e:09:fd:0e:00:07:db:a8:
7b:62:74:02:0f:4e:0b:72:88:e1:31:f9:c3:31:6a:
4f:50:c0:08:b9:82:9f:0c:bf:57:e2:c5:8a:d3:c4:
13:20:98:04:b0:ac:0c:48:fe:a8:47:b8:7d:2a:c9:
b4:cf:d4:b3:86:c5:5d:1d:b6:54:62:9c:03:e8:88:
c8:5f:31:2d:69:31:6f:ae:25:2a:08:73:3f:ee:9f:
99:c2:73:05:d1:dc:5b:10:7c:ee:d9:86:c7:9b:86:
31:f2:7d:51:4f:0f:dc:98:69:b1:dd:eb:16:b7:4d:
61:c0:99:9c:d3:85:bc:af:3f:52:6e:a9:41:b9:50:
3e:e4:71:7a:71:42:b8:93:3d:89:94:9f:ce:f5:0a:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:57:C1:06:1A:0F:81:B5:54:C4:4C:9F:9B:1E:DF:2A:9C:A1:E2:56
X509v3 Authority Key Identifier:
keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:66:98:28:9d:48:c2:8f:51:dc:a0:24:5a:e9:27:f4:78:f0:
fb:89:db:56:32:9f:ea:0f:24:de:e6:a4:17:9c:e7:87:e7:70:
71:48:6d:c5:cd:3b:c3:1d:5a:69:4a:b6:14:af:fa:76:b2:8c:
37:57:d8:03:87:37:29:48:e5:c0:cb:01:19:a9:db:1b:e8:de:
5e:9d:0c:f0:c0:df:f6:82:30:e9:57:cf:9b:c9:76:c5:40:52:
ab:94:6b:22:7e:d9:71:43:95:e7:92:35:e6:eb:87:3a:18:96:
a6:77:fe:c9:da:11:ee:bf:2e:4f:6a:6a:41:8d:0b:87:2f:c6:
9b:a4:a2:f7:5f:26:05:ff:5f:67:d5:cc:0c:48:56:e9:ad:fb:
75:cf:5f:f3:5f:5c:a4:e9:fb:5e:35:1b:90:dd:ad:79:30:6d:
3a:8f:ed:57:86:5f:d2:8b:0b:9c:4c:5c:9c:6d:99:dd:7c:cd:
03:42:25:a2:ce:6c:5c:77:f5:ce:ad:65:fe:06:2e:a9:67:7b:
4e:03:0c:54:36:a1:ac:54:13:ab:d1:2c:52:c0:fe:3d:e8:6f:
db:ce:74:90:03:e0:04:e1:30:f1:76:5c:43:f0:03:d2:3d:7e:
9a:a6:e6:aa:c2:4f:a8:d2:ca:a6:ac:95:0a:28:a3:7e:88:0f:
78:8d:10:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:14:19 2026 by rpki-client