
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
File: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft (raw, json)
Hash identifier: OpWfbXlZBfEzttV8JrosAedFeTcjL9Ko+qKeNYcbw1k=
Subject key identifier: 77:72:62:CA:AF:51:6A:BF:03:E5:0B:BF:F3:D1:F2:03:B9:C1:39:0F
Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
Certificate issuer: /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Certificate serial: 0231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
Manifest number: 0228
Signing time: Thu 23 Jul 2026 04:01:11 +0000
Manifest this update: Thu 23 Jul 2026 04:01:11 +0000
Manifest next update: Thu 30 Jul 2026 04:01:11 +0000
Files and hashes: 1: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl (hash: CixlgiDgQFZY6tjwzH9QTA/SQl13MTssoW32t9tlx7U=)
2: 9B2C760CD89B11EF8D75534EC4F9AE02.roa (hash: hyI/PoaRKntL7XpUGJIJnV0DfJsuOHooYB61GtF+kzU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188CCC, serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Validity
Not Before: Jul 23 04:01:11 2026 GMT
Not After : Jul 30 04:01:11 2026 GMT
Subject: CN=6a619207-1bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:50:aa:fa:56:e0:35:52:ec:8c:55:2e:7a:
18:b4:1f:85:33:e6:8e:d5:af:ef:ef:40:ff:4e:7b:
20:9f:98:43:e1:2d:8a:c5:84:f6:32:e4:05:24:eb:
0a:ab:11:6d:fc:48:bb:c9:58:45:8f:30:77:b8:35:
0b:9c:5f:bc:3f:cb:26:69:9e:b3:11:87:c3:c8:17:
dd:f7:e5:70:3b:20:80:a3:7d:9d:cf:54:31:dc:1b:
b4:e7:d1:e0:99:b4:11:b3:b6:19:cc:95:3b:42:d5:
c0:6f:76:c1:cc:89:13:de:8e:13:14:65:3a:29:74:
72:1f:26:f4:2e:54:74:a7:84:32:fb:8b:8a:01:4c:
99:4e:ea:13:3a:a1:15:34:89:37:e7:87:ae:24:1e:
cc:68:0d:4b:10:00:d5:de:af:0b:88:2b:52:2b:51:
ef:ee:e7:14:58:3c:57:bc:56:d1:a2:1f:29:78:f3:
e2:aa:2f:80:b9:eb:0f:8c:f2:2f:ad:f3:26:c0:d8:
f9:51:f7:ce:f3:32:21:76:4a:07:eb:7f:98:d0:62:
45:9f:19:4f:ce:69:a4:90:a1:fe:bc:59:32:f0:61:
34:f1:99:72:e8:51:6c:7f:61:60:ab:07:81:3e:0b:
d0:8c:87:f4:9f:21:b2:89:7e:7f:cf:e0:02:84:d0:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:72:62:CA:AF:51:6A:BF:03:E5:0B:BF:F3:D1:F2:03:B9:C1:39:0F
X509v3 Authority Key Identifier:
keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:ff:ee:fb:de:3f:b7:e3:94:21:18:eb:24:29:a3:1b:35:76:
dc:f3:06:fb:22:a3:a6:8a:06:62:b8:1a:75:e0:23:f7:92:be:
5e:2d:97:19:da:79:01:d6:1f:58:17:8f:a3:9d:6f:49:94:91:
05:89:a3:f6:51:52:20:ae:76:82:3f:dd:24:da:ff:18:92:f0:
03:f1:32:dd:26:f6:97:68:63:39:d0:67:98:2c:af:df:68:85:
b0:c0:a9:91:de:b0:41:bf:ff:1c:cc:fd:a1:a5:67:7d:2a:e0:
b8:9c:7b:f5:73:d6:b8:54:04:0e:10:8c:a9:bd:45:c7:72:6b:
53:a3:9a:2e:bc:15:74:36:5c:7b:c3:dd:c6:ed:b5:5b:bb:36:
9b:cc:99:38:d3:b2:dc:2a:20:e9:2b:2c:79:3f:47:37:33:89:
98:34:54:ae:9f:6c:e4:f8:3e:24:69:b9:34:9d:2d:bd:54:24:
dc:fd:35:7c:0f:3a:67:30:30:e6:b5:db:12:5e:c6:15:eb:59:
11:88:22:96:a4:4d:d5:36:9e:87:f8:9d:0b:48:2e:93:b1:6d:
f8:18:71:73:af:47:83:99:6d:f4:d8:b3:cc:8e:dd:a7:10:2b:
fe:3e:1f:59:b1:9b:a2:23:98:67:5f:47:ec:d4:f6:cf:21:66:
20:99:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:56 2026 by rpki-client