
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json)
Hash identifier: gNAT+/ZqFeMmScqGIFFcu0Vru2hmMM6vTZasmQjtXP4=
Subject key identifier: 7B:06:82:EB:50:D3:1D:1A:38:E0:FF:74:BF:FA:5E:CF:CC:C5:F5:24
Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Certificate serial: 0846
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
Manifest number: 0822
Signing time: Tue 12 May 2026 21:15:21 +0000
Manifest this update: Tue 12 May 2026 21:15:21 +0000
Manifest next update: Tue 19 May 2026 21:15:21 +0000
Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: nyoHTfTNq5eBPK8mn53sAhwsnJwlrKXeKfs5rF0PvH8=)
2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 9WkU0MG65lqjQrS/cbUMSYyvQ66+hlJyNvzSbxcBRt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2118 (0x846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Validity
Not Before: May 12 21:15:21 2026 GMT
Not After : May 19 21:15:21 2026 GMT
Subject: CN=6a039869-c1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:38:29:fe:57:37:c9:cb:77:7c:72:ca:02:
d6:2d:a1:38:d8:71:d4:66:92:ef:10:b4:4e:ac:e2:
3c:53:17:d3:3a:8b:0f:c9:12:81:d4:86:ae:58:ed:
80:9c:b6:07:50:a5:84:10:a1:94:67:0f:a7:c5:9f:
5a:e1:79:6d:15:d5:41:72:d6:24:05:56:c3:f6:34:
07:f1:2a:6e:22:4c:b2:7a:a9:03:ac:0c:d8:0c:45:
9c:9b:ff:2d:98:ce:80:2d:bc:aa:c0:88:00:5d:2e:
fd:d4:a8:61:d8:f9:ff:3b:4e:60:78:68:ce:e5:b5:
1c:c5:b8:1d:86:f7:4c:eb:2f:f7:dc:59:29:61:d4:
85:f2:2f:58:22:38:74:16:cc:a6:e4:d6:43:09:4e:
cd:bd:e3:71:79:ff:e2:22:c0:ac:9f:f4:47:e9:0f:
24:8a:d9:1c:ed:9b:03:10:5c:0e:b3:bb:3e:ad:b4:
f7:83:ac:6f:e4:9f:aa:b4:5f:f4:ff:96:29:99:c6:
7d:08:f6:a4:43:83:d7:97:f8:a9:a7:77:0e:0a:38:
f5:14:d1:89:a0:2b:6c:14:5f:23:f0:2a:9b:ab:9c:
ab:72:f2:06:b2:22:97:48:b3:3a:76:7c:4b:88:48:
d3:ba:81:55:cf:ef:e2:fe:3d:ab:01:a0:36:3a:ba:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:06:82:EB:50:D3:1D:1A:38:E0:FF:74:BF:FA:5E:CF:CC:C5:F5:24
X509v3 Authority Key Identifier:
keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:21:34:34:72:b9:6d:2e:3b:4d:c4:33:49:1c:c5:21:8f:a7:
4f:f8:38:d2:bb:6e:f8:0b:13:90:1c:c8:e0:67:d4:48:9f:f5:
c4:e9:e1:2a:07:b3:12:ee:f8:64:80:57:d3:3f:29:7d:be:10:
7e:3a:a5:71:43:5a:69:d6:bf:21:6f:61:23:b9:c5:57:44:7e:
17:a6:ab:2b:c3:30:68:4c:85:71:8b:4c:28:ca:4d:e5:ef:c3:
63:61:1c:da:78:79:0b:ee:83:bf:aa:5f:82:e5:f5:ff:94:49:
ef:c6:80:cd:80:f3:ba:c0:f3:f0:9e:6c:16:7f:ad:75:ba:41:
9f:78:70:6c:1b:b7:92:cb:43:e7:42:85:45:fa:a0:5a:cd:c5:
cb:e5:a7:12:57:0c:cf:40:8f:1f:3b:d5:41:a8:ab:6c:9d:cc:
72:ba:28:92:4e:22:ef:02:d3:b5:70:6e:12:f6:e2:ca:22:ea:
f1:e7:60:9e:e1:9a:63:5a:45:2e:2c:9f:7b:8e:75:08:c2:c9:
05:d7:c3:3a:84:15:b8:49:ce:15:8c:0b:2d:06:59:ad:f9:c2:
4f:db:25:c5:e8:c6:45:83:64:21:ce:33:9d:7d:6c:ec:05:72:
2e:a6:a9:ed:fa:99:64:c9:bd:7a:57:fb:8a:38:b9:5f:cc:08:
45:ec:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:33:43 2026 by rpki-client