
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json)
Hash identifier: drJN02glQFfH6FIU2V/e1mckiOyQKZFb+J4+mMcKWl8=
Subject key identifier: E9:65:22:F5:0F:33:C4:8B:D6:5A:8F:B3:55:FC:6E:3A:29:3F:36:D7
Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
Manifest number: 0107
Signing time: Wed 13 May 2026 06:20:02 +0000
Manifest this update: Wed 13 May 2026 06:20:01 +0000
Manifest next update: Wed 20 May 2026 06:20:01 +0000
Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: ZPUXFayIdkguVG7zi7aPh1AJ3mlBpyakjuF1jyRvr78=)
2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: HUtXLhQ2zyP4LJGfZauEnR2MPzei0tQ4qoL8B66B5TY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Validity
Not Before: May 13 06:20:01 2026 GMT
Not After : May 20 06:20:01 2026 GMT
Subject: CN=6a041812-4bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:99:94:c2:c6:65:dd:94:55:a4:48:02:7a:
0b:f9:71:35:fe:f4:89:fe:e4:23:23:e8:c5:1d:65:
e9:7f:a1:97:de:f5:96:24:29:34:4c:fb:a9:23:30:
ab:f9:0f:2e:91:d6:14:16:7d:a5:a2:cf:3a:02:5c:
79:1b:80:78:8c:56:bc:d1:93:01:1f:52:0e:77:8f:
2f:c3:1b:40:3c:26:78:31:11:10:74:06:74:83:d1:
6c:85:bd:ee:d6:13:08:d1:64:b9:fa:ac:4a:95:6c:
74:7c:5e:2b:da:a0:09:7b:67:97:a5:81:ed:d6:07:
00:d3:fe:c7:75:6d:bd:ae:4c:67:78:57:dd:7f:e7:
dd:87:67:da:e9:28:f7:0c:d6:6a:77:95:8b:e2:b8:
7f:ad:55:16:a2:a3:ea:61:ea:f5:7e:d5:d0:37:f0:
1b:92:fe:ab:e9:c2:0f:12:dd:29:cc:f5:28:09:f8:
43:e8:36:25:40:ea:0e:62:73:c4:92:08:22:10:2f:
0b:dd:7c:0c:aa:2f:9c:2c:90:fc:e2:43:39:ce:a8:
f4:4b:49:38:23:94:72:86:89:e9:d2:c9:e4:00:50:
f0:71:c5:39:8f:ab:ea:f5:a5:97:2d:fb:ed:b9:15:
a6:7b:dd:d1:26:c2:1d:d0:4b:f9:11:3d:f5:0e:6f:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:65:22:F5:0F:33:C4:8B:D6:5A:8F:B3:55:FC:6E:3A:29:3F:36:D7
X509v3 Authority Key Identifier:
keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ab:d6:3c:02:81:4e:30:80:03:b2:8c:fe:a5:a5:13:57:07:
41:bf:32:e1:fc:ec:1f:53:73:6b:a7:61:22:28:ec:15:22:58:
dc:83:bd:4a:3b:2e:d0:f0:d3:99:7e:6d:7d:5a:2c:40:3e:cf:
1a:c5:96:57:68:ff:26:66:ea:ea:93:e0:8d:7f:79:07:ce:f0:
0e:1e:f6:09:90:de:07:70:97:5d:a5:11:ef:a1:82:da:44:ec:
50:b4:7c:cb:19:89:99:91:4a:b8:98:40:52:98:24:47:53:09:
ba:8c:b6:75:ad:34:20:ba:bf:0a:32:e1:ab:59:78:ec:35:2a:
8a:1b:b2:ab:a2:5a:2c:22:c1:95:c8:c2:a4:1f:70:c2:ad:b8:
65:07:c7:be:05:01:4a:f6:de:f4:10:a7:d7:7d:7b:07:5f:e4:
41:ee:ba:e7:1b:b8:a1:29:74:48:aa:76:77:28:11:46:4e:5f:
15:47:26:62:64:da:0d:7f:1a:0d:cb:24:24:03:87:a8:59:c0:
f2:58:80:53:18:5a:85:1b:ed:27:47:c3:cf:14:6f:09:79:0f:
6c:4d:2f:49:9e:64:e1:2e:3e:8e:c6:e6:23:32:fe:e1:7e:40:
1c:bf:2c:e8:09:d3:97:67:6d:e5:9f:51:32:9f:d9:a1:35:ed:
2a:b9:7d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:57:35 2026 by rpki-client