
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json)
Hash identifier: l9bjwjNlm4OrYzqyUR6rBK66RzTlCxCkjjeTuwwd53k=
Subject key identifier: 09:E0:6A:6E:2B:E9:EB:0E:29:38:A4:32:A4:6E:3B:44:22:B7:6C:B7
Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Certificate issuer: /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
Manifest number: C4
Signing time: Mon 27 Jul 2026 09:04:07 +0000
Manifest this update: Mon 27 Jul 2026 09:04:07 +0000
Manifest next update: Mon 03 Aug 2026 09:04:07 +0000
Files and hashes: 1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: 6xPzUZ43JdmoK/YLgeFIMPF6KVOKa6xwy2VUP1lwyPs=)
2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: DfP6HXkk7ZkiBK57u8/8M6u5qiXHtYdjtBByCV+JXf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Validity
Not Before: Jul 27 09:04:07 2026 GMT
Not After : Aug 3 09:04:07 2026 GMT
Subject: CN=6a671f07-d5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:17:c8:ad:30:8a:28:cc:8f:2b:09:0e:e5:
9d:44:7d:47:a7:b6:85:81:b6:5d:71:c0:44:cc:01:
74:85:c6:ff:7b:67:47:63:0b:89:8d:7a:33:22:5a:
63:b9:ff:0e:31:fe:0a:ea:ee:2f:b5:5b:d3:b2:1e:
8d:b2:35:50:fc:f8:75:47:8d:cd:ee:ff:d2:c4:a8:
7d:1a:2e:c4:92:04:b6:9a:63:ab:e8:ee:64:56:1c:
73:81:af:6f:eb:af:6a:ad:b8:28:e1:f3:40:3b:f7:
f0:b1:2a:10:f0:eb:a7:7b:68:ec:8d:ab:fe:8b:51:
be:47:5d:7b:c3:22:8f:d9:60:cc:b2:d5:67:4b:c9:
cf:fa:d6:21:a1:2c:51:71:33:4d:23:c8:d6:11:ee:
b4:90:84:2c:56:b8:ca:a9:55:a3:8f:7b:94:64:b2:
15:af:d6:3b:5b:24:86:da:e3:4d:05:c5:d8:69:3d:
ce:b3:93:27:7b:5e:da:32:e0:ae:f6:c3:5d:4c:64:
0c:bb:b7:e1:b7:a8:c3:37:f4:4a:18:34:da:49:b5:
fd:ab:87:1b:65:12:e3:1e:a4:f5:3b:74:1c:15:85:
b6:16:27:71:ba:5d:44:aa:1b:dd:bd:8e:71:2a:b1:
92:1e:99:52:83:f7:f2:35:bf:88:c2:85:ad:b8:c0:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E0:6A:6E:2B:E9:EB:0E:29:38:A4:32:A4:6E:3B:44:22:B7:6C:B7
X509v3 Authority Key Identifier:
keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6d:e3:f9:6c:94:fb:10:82:b1:cf:bb:9a:c0:74:48:56:05:
43:34:a1:e8:33:bf:98:46:d0:e9:29:0d:93:6e:7e:7c:e3:22:
da:34:74:eb:f1:8b:88:b2:9d:6a:b5:4e:9b:97:b2:b6:df:35:
85:6d:81:71:78:9d:73:80:1b:8b:3a:77:fd:5a:08:0d:26:f5:
3f:09:8f:c3:bb:c2:6f:2a:17:9b:13:81:ce:8c:33:ba:11:df:
c8:1f:a9:0a:64:c7:d6:97:b0:bf:a5:9e:2a:24:77:c3:50:5b:
ad:fc:94:c0:0a:da:81:80:64:62:f3:28:8c:21:bc:3a:02:f5:
ec:18:1e:62:e8:b0:6b:04:1c:44:87:2a:ef:92:16:a0:c8:22:
89:0d:67:fc:4c:0c:b6:8d:8d:39:7e:82:7f:97:73:e0:86:e4:
4c:cc:8d:7e:b6:10:84:36:22:85:7c:e2:83:55:98:9c:ce:93:
35:7a:6f:49:7e:e9:5c:ab:f0:34:4f:71:10:f8:2a:f2:92:20:
71:10:a0:71:12:ca:44:fd:3c:55:f2:9b:6d:ce:e8:57:51:ed:
c9:20:34:0a:e8:61:3a:e2:5c:e8:ea:82:38:9b:d5:74:ed:dd:
11:e1:51:8f:33:27:a6:a6:14:97:43:8a:12:f6:d3:55:93:e8:
2b:85:4e:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUUwOUUxMTAvBgNVBAUTKEUwNUM2NDU1NDVEOUVGODZCNDUxRTUyMTlEODMyNzYw
RjQwNUNBRTgwHhcNMjYwNzI3MDkwNDA3WhcNMjYwODAzMDkwNDA3WjAYMRYwFAYD
VQQDEw02YTY3MWYwNy1kNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyYsXyK0wiijMjysJDuWdRH1Hp7aFgbZdccBEzAF0hcb/e2dHYwuJjXozIlpj
uf8OMf4K6u4vtVvTsh6NsjVQ/Ph1R43N7v/SxKh9Gi7EkgS2mmOr6O5kVhxzga9v
669qrbgo4fNAO/fwsSoQ8Oune2jsjav+i1G+R117wyKP2WDMstVnS8nP+tYhoSxR
cTNNI8jWEe60kIQsVrjKqVWjj3uUZLIVr9Y7WySG2uNNBcXYaT3Os5Mne17aMuCu
9sNdTGQMu7fht6jDN/RKGDTaSbX9q4cbZRLjHqT1O3QcFYW2Fidxul1EqhvdvY5x
KrGSHplSg/fyNb+IwoWtuMABrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAngam4r
6esOKTikMqRuO0Qit2y3MB8GA1UdIwQYMBaAFOBcZFVF2e+GtFHlIZ2DJ2D0Bcro
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTA5RS9EOEJCMEYzNjYx
RkExMUYwQkQ0RjYwNkVDNEY5QUUwMi80RnhrVlVYWjc0YTBVZVVobllNbllQUUZ5
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRGeGtWVVhaNzRhMFVlVWhuWU1uWVBRRnl1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTA5RS9EOEJCMEYzNjYxRkExMUYwQkQ0RjYwNkVDNEY5QUUwMi80RnhrVlVYWjc0
YTBVZVVobllNbllQUUZ5dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATG3j+WyU+xCCsc+7msB0SFYFQzSh6DO/mEbQ6SkNk25+fOMi2jR06/GLiLKd
arVOm5eytt81hW2BcXidc4Abizp3/VoIDSb1PwmPw7vCbyoXmxOBzowzuhHfyB+p
CmTH1pewv6WeKiR3w1BbrfyUwAragYBkYvMojCG8OgL17BgeYuiwawQcRIcq75IW
oMgiiQ1n/EwMto2NOX6Cf5dz4IbkTMyNfrYQhDYihXzig1WYnM6TNXpvSX7pXKvw
NE9xEPgq8pIgcRCgcRLKRP08VfKbbc7oV1HtySA0CuhhOuJc6OqCOJvVdO3dEeFR
jzMnpqYUl0OKEvbTVZPoK4VOFA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:21 2026 by rpki-client