
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
File: 4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json)
Hash identifier: h2PGBgJtlW2t1OEA5zpYRF9hxlbZNakHvzbSZI3Bjgw=
Subject key identifier: 19:1D:DF:93:34:BE:F3:67:05:AC:AD:22:AB:66:B0:59:E4:EE:63:93
Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
Certificate issuer: /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Certificate serial: 353D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
Manifest number: 353C
Signing time: Tue 12 May 2026 14:27:56 +0000
Manifest this update: Tue 12 May 2026 14:27:55 +0000
Manifest next update: Tue 19 May 2026 14:27:55 +0000
Files and hashes: 1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: Uc4/TAHHWpJx8S9oonHoT/hLqSYOeOHRKPlfVwfCwHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13629 (0x353d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Validity
Not Before: May 12 14:27:55 2026 GMT
Not After : May 19 14:27:55 2026 GMT
Subject: CN=6a0338ec-5c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:5e:ba:b4:b9:a6:b3:c5:d7:a0:08:97:3c:
2f:47:fc:91:4e:8d:65:5c:91:79:dd:fa:0c:6c:4b:
1f:1e:b1:b5:ed:f6:31:05:01:e9:43:57:eb:60:24:
64:3c:1a:00:f4:ed:29:9c:2e:44:ab:6c:79:99:d5:
fd:ec:e9:c2:22:c7:7b:4b:f9:8c:1e:85:d2:73:cc:
24:88:1e:a6:30:c3:3e:5e:c4:d1:98:7f:1a:f3:ad:
d5:8e:f1:f2:cc:1a:31:69:1d:f6:4a:17:a9:dc:04:
10:11:59:04:b7:1d:30:3c:00:a4:1d:92:c0:67:3c:
af:ea:e4:e2:55:69:74:fa:b1:66:ff:54:97:6f:04:
09:a5:83:98:d9:38:71:f1:13:e4:4a:7e:31:d0:df:
a6:2c:eb:c7:58:03:d8:58:f0:c6:72:ef:8f:f3:96:
44:3f:59:94:7a:db:c1:3e:d3:78:92:3b:26:4d:0b:
63:68:df:dc:22:ce:2e:54:11:ff:2d:dc:1d:c9:8a:
5d:66:be:31:f7:3a:0c:24:05:04:b7:d5:30:ce:50:
b9:b5:af:c3:d4:d9:4e:ec:4c:1b:f6:f7:95:3d:fe:
60:65:8e:92:bf:99:b4:c0:6a:6c:a0:15:2c:d9:d1:
24:e9:3c:52:f9:25:70:2a:ee:7e:bb:37:ae:ab:45:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1D:DF:93:34:BE:F3:67:05:AC:AD:22:AB:66:B0:59:E4:EE:63:93
X509v3 Authority Key Identifier:
keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:f5:0e:04:14:3a:8e:89:98:dc:60:10:72:c3:db:7a:9d:0d:
13:95:b5:b9:9f:70:90:5a:17:85:a9:57:6b:14:f6:bf:e9:8e:
73:11:e4:30:ee:d0:c7:69:83:4b:c1:bf:32:6b:5b:d8:88:f5:
58:7c:1f:8a:ee:70:85:2d:b0:3c:e3:28:5e:07:bc:f6:bb:72:
c7:b9:de:f4:e6:b1:64:0e:4c:e0:41:f2:c4:e7:cc:a3:3a:0b:
df:88:df:8d:fe:fc:25:a5:6b:a6:d9:e5:1f:f0:e7:97:73:bc:
65:d0:d1:33:58:6f:7f:13:19:b2:56:4f:dc:45:0b:60:c9:ae:
8b:0c:ed:74:4e:df:ba:6a:a4:bb:d0:ba:e2:6b:05:b8:13:b7:
32:49:11:4b:b1:da:b7:b4:06:82:9b:0c:02:02:36:f3:c3:5a:
b1:9a:77:ee:32:99:a8:c2:5a:4e:72:48:01:38:c5:61:1a:77:
b1:f8:ac:7a:fb:f7:4f:da:3b:49:06:f2:94:8e:54:ac:32:c6:
b5:ae:69:1c:47:b1:0b:39:45:df:6d:ea:81:22:cf:07:aa:d4:
06:c9:c5:52:28:7c:ea:46:3f:71:e9:3f:b7:7a:75:fb:4e:6f:
c6:42:a8:d3:09:40:b2:fd:67:8a:c0:6f:2b:f8:0c:c3:28:82:
fb:81:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:29:41 2026 by rpki-client