
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json)
Hash identifier: joEfisGnDdT1krDL5rdzVfqRkcgvQHoZhiRsbdbAxNQ=
Subject key identifier: 97:8A:97:F9:E6:FE:92:83:48:73:9D:2E:4A:0B:3B:B0:CE:08:C5:BE
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial: 054A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
Manifest number: 0539
Signing time: Wed 22 Jul 2026 20:48:29 +0000
Manifest this update: Wed 22 Jul 2026 20:48:28 +0000
Manifest next update: Wed 29 Jul 2026 20:48:28 +0000
Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: N2/wcAB+kdVP9JgucOiu7o4wCYKrkhtx6YLyBspsNMk=)
2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: 4xgHsmFBzpOEDFWrTsnY/UVdPSnGuyQ3aHzpdWQKEDE=)
3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: pjU8yoKCWn12BkoGzYOOIFYk2quDrJg/9dgAwTEFemk=)
4: 81EDAEEC6DE911F1BE416AB35CA30FBC.roa (hash: YA17LyHTfthDzdk1fJZ4Q1wQt3Gaa9uu+WHv2HF57n4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1354 (0x54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Validity
Not Before: Jul 22 20:48:28 2026 GMT
Not After : Jul 29 20:48:28 2026 GMT
Subject: CN=6a612c9d-6c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:2b:35:b4:59:b6:8c:5e:1b:97:b5:d3:7c:
b9:50:e6:96:5d:ac:e5:0b:a4:17:89:1f:90:9f:9a:
b7:92:7a:fa:b6:5c:c6:d5:a6:aa:9a:0b:3d:2a:00:
8d:fa:99:43:40:21:b1:ec:66:39:3d:e1:d6:75:2d:
17:c6:16:82:ff:2f:9a:d5:f1:b6:64:53:a5:4f:89:
fa:08:35:21:44:40:7d:e0:49:bd:d7:e1:13:c1:be:
67:86:f2:ab:81:00:6a:d0:79:d7:a2:58:f7:18:5a:
79:38:a4:1b:2e:03:a5:27:f8:f4:9c:20:11:f8:39:
d4:95:b0:2c:be:8d:d1:59:bf:08:07:ea:4e:30:85:
29:81:0c:97:69:3c:58:1e:cd:76:12:4c:d0:f0:9e:
91:60:83:27:6b:86:cf:40:9e:30:05:7f:67:82:0a:
83:9a:35:66:4e:ed:43:6f:1a:5b:73:25:3e:c3:7c:
3b:a6:56:ef:22:13:87:29:ae:87:d1:9d:98:c9:08:
cf:f3:47:e7:d2:b9:bb:85:a8:cd:f7:6f:09:07:1c:
22:ba:ea:2b:b1:2c:d7:50:ea:88:5d:20:c4:9d:2b:
37:25:40:96:5a:52:bc:39:f1:47:65:02:6d:fa:ce:
72:18:ce:96:13:bd:42:ff:4d:59:12:16:65:23:14:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8A:97:F9:E6:FE:92:83:48:73:9D:2E:4A:0B:3B:B0:CE:08:C5:BE
X509v3 Authority Key Identifier:
keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2d:74:70:8a:f0:77:cd:42:67:9c:c4:bf:c5:e9:80:58:f0:
8c:b9:0f:c2:ef:f1:dc:f3:57:19:7d:24:77:ef:c1:5b:7d:1b:
1c:52:75:a4:0e:8d:20:5a:c2:49:15:00:9e:a8:41:d3:22:7b:
bc:af:0c:63:a8:91:57:26:33:1d:ad:d7:f0:92:2c:5b:b3:7c:
b5:e4:af:f2:e3:dc:03:78:1f:e8:08:dd:01:1f:65:aa:ba:f0:
77:f7:14:a0:6e:a8:fe:bf:e6:f1:5a:3e:34:0a:b8:35:95:04:
9f:c3:21:61:43:18:69:62:b5:d6:95:a5:9b:41:97:9b:cb:11:
79:de:04:59:4e:23:50:65:cc:db:1f:8f:49:2c:5b:50:30:94:
4b:48:ed:83:59:8f:c4:26:95:64:89:7c:75:a5:d6:38:b2:0d:
6a:8b:48:6b:a6:36:ed:83:8e:bf:2f:43:4b:13:ff:73:32:df:
4c:bf:85:40:5a:5b:d3:2e:0e:97:e3:ed:af:42:1e:61:35:57:
51:cd:3a:c9:47:87:61:7f:dc:93:cd:a6:cd:c3:cd:67:cb:17:
11:c6:4c:5d:7e:b7:d6:3f:e2:36:d7:1f:9a:4d:75:ad:22:32:
06:96:3f:56:03:94:35:b3:a3:07:89:61:d1:d5:d0:4b:23:7c:
da:69:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:28 2026 by rpki-client