
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
File: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft (raw, json)
Hash identifier: CDNgZiJzQTqpwvvbCHYlnrHjIDY9wL0M4rjhAw026+4=
Subject key identifier: 16:6A:08:21:4D:45:D8:9F:A1:22:C9:7E:3D:88:72:9B:8F:9A:9C:0E
Authority key identifier: E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E
Certificate issuer: /CN=A9190059/serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
Manifest number: 9E
Signing time: Fri 25 Sep 2026 07:27:33 +0000
Manifest this update: Fri 25 Sep 2026 07:27:33 +0000
Manifest next update: Fri 02 Oct 2026 07:27:33 +0000
Files and hashes: 1: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl (hash: xBxM4SbkhwnECEJZPkRP3sentlZdg6iFQV/ZBDERVgo=)
2: 0DA28718CE5E11F084703925C4F9AE02.roa (hash: AdDZHFfcc7Zdrn4Ql7CRvOmqa0OKrZIa586pDCodAEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl
rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190059, serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
Validity
Not Before: Sep 25 07:27:33 2026 GMT
Not After : Oct 2 07:27:33 2026 GMT
Subject: CN=6ab62265-78bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bc:5b:22:b8:8a:17:63:b8:3f:ba:4d:c4:f7:
12:fe:6d:54:22:b8:eb:62:88:2a:bc:4d:e7:08:08:
f3:e7:ed:8b:1d:3d:83:3b:df:49:07:15:43:a1:f6:
00:b9:07:b4:24:04:88:36:03:56:71:5f:53:81:1f:
ec:f6:30:e8:26:6c:cc:5a:27:ad:19:08:56:d5:73:
89:76:16:90:30:e5:2d:52:b7:61:d1:d5:a8:78:ec:
59:48:51:48:b8:4a:24:70:88:15:04:72:0b:53:3d:
b9:b2:46:71:e1:9a:ab:b2:46:b9:d6:77:7e:ba:90:
f3:f5:de:87:8b:d0:e8:20:b6:20:52:1d:34:f1:4f:
58:e2:8c:ae:d5:d9:c4:0d:7c:34:5f:c1:db:18:16:
4b:e8:5a:2c:08:a2:05:e3:af:00:ef:1c:1f:0d:a6:
d9:71:74:c1:3f:c2:64:06:b0:f3:34:04:17:ec:88:
6c:d3:cc:4e:6e:c9:07:83:e5:2b:f7:86:86:9e:87:
e2:fa:02:64:04:23:53:f8:57:33:77:a5:5e:87:9b:
89:a0:46:e5:e7:76:52:7e:29:79:ea:c3:87:79:4e:
a1:4c:8e:79:50:18:6f:86:41:66:7e:e5:25:3b:52:
aa:eb:8a:d5:2f:54:cc:cc:1b:02:43:54:a4:16:13:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6A:08:21:4D:45:D8:9F:A1:22:C9:7E:3D:88:72:9B:8F:9A:9C:0E
X509v3 Authority Key Identifier:
keyid:E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:a0:30:9b:f7:8c:da:72:fe:1a:82:85:28:bd:6a:53:c1:1b:
c6:3c:ed:3e:4e:00:6c:69:63:19:9b:ca:c3:c6:68:52:28:ad:
0f:b3:15:de:11:be:7e:c0:17:d2:fe:6a:8a:35:2c:78:35:72:
8a:34:77:ed:a6:73:93:7e:83:a7:b2:fb:70:7e:e4:ea:08:ec:
15:6d:79:a7:69:b0:2f:83:cb:1c:86:e7:c5:bf:61:70:ca:56:
7b:10:a6:9c:5a:31:23:77:be:38:ac:63:00:3d:15:6a:8e:75:
31:2d:50:c4:47:b5:cd:bd:0c:24:fe:92:07:11:ba:f6:45:19:
81:c3:a3:81:6b:32:d1:a4:39:9a:3a:57:17:ed:08:9c:82:c1:
14:6e:eb:29:0e:1e:3f:7a:cf:69:57:0d:48:f0:0d:16:bb:90:
92:f3:a6:39:40:ad:6f:b9:ba:81:12:66:70:df:9a:2b:52:da:
c6:77:43:ee:c3:eb:bc:cf:e5:96:0c:5b:63:69:82:ff:7c:5d:
34:cf:3a:03:31:26:7a:d9:78:76:a3:04:4b:d3:81:ab:67:3a:
87:d2:1f:17:f5:54:4b:db:f6:4b:ec:84:a0:51:78:6b:7e:43:
b8:a6:05:1f:56:4f:f6:34:42:35:ec:49:b4:2f:6d:50:4d:b2:
79:ce:92:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:35:01 2026 by rpki-client