
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json)
Hash identifier: CnLC9ZmBhYiNKjsHpTZ4YZdDXNUDEdUs35okaoC6+XI=
Subject key identifier: F7:99:B2:37:E0:B6:07:0E:22:45:D7:0C:6C:A4:6D:CF:CF:5E:C4:5C
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
Manifest number: 0296
Signing time: Sat 13 Jun 2026 01:45:54 +0000
Manifest this update: Sat 13 Jun 2026 01:45:54 +0000
Manifest next update: Sat 20 Jun 2026 01:45:54 +0000
Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: NewEkUgUuSa/F+EQapfFiZuwBKIUPQ6tgIgIbgTIYe0=)
2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: poF5iER85gmZG51MJJTxxsmqAYXARy0knubqmMXJg/4=)
3: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: bytZ59Ia8ZFaLY4XNox1TiPwLTz6zD1b+H+2egXVeZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
Validity
Not Before: Jun 13 01:45:54 2026 GMT
Not After : Jun 20 01:45:54 2026 GMT
Subject: CN=6a2cb652-0294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:e5:4d:91:e3:02:58:5e:c8:f7:73:35:28:
07:67:61:f5:cc:bd:c8:ab:ab:31:39:31:d0:53:ed:
b4:01:63:81:60:b1:32:17:b0:da:3d:ff:60:64:bc:
68:c4:9e:d6:a4:01:99:36:20:e3:0c:9a:fb:fa:b1:
a9:71:85:e9:83:ce:06:8d:87:e1:03:6e:ba:ed:87:
7c:f2:9a:dc:c9:4a:f8:a4:66:2d:77:22:46:c6:16:
fd:c5:88:0a:3d:f5:ca:ff:31:51:02:8c:28:3c:c7:
32:7b:ca:9d:36:23:91:60:4c:a9:b8:c8:b0:8a:d6:
3d:0b:e6:1a:74:d1:48:04:d6:55:28:54:fc:ef:15:
9f:47:47:de:8a:82:b0:cd:3c:3c:28:c9:39:96:44:
de:a7:97:b2:66:ad:6c:59:0d:52:00:33:3f:2f:d0:
3e:a8:47:84:f6:8a:6d:bf:ef:95:a1:59:fd:c4:70:
ab:b5:d6:71:9b:87:3f:3b:61:a5:f8:9a:d4:7d:7b:
75:af:1b:95:bc:a7:5b:86:7c:2c:19:6f:62:21:95:
2b:82:fa:31:61:41:6f:1d:cf:5c:b7:11:e7:ff:2d:
7a:62:70:d6:63:da:70:fb:49:dd:fc:9a:46:aa:ff:
26:58:ef:3f:4f:21:b9:b7:46:c2:23:f4:87:da:ef:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:99:B2:37:E0:B6:07:0E:22:45:D7:0C:6C:A4:6D:CF:CF:5E:C4:5C
X509v3 Authority Key Identifier:
keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:3f:0e:74:22:ca:aa:82:48:c6:bb:ba:b9:fd:e9:a2:4a:53:
d8:28:28:33:6a:24:48:9e:cf:d3:41:10:7c:26:88:11:3f:a0:
94:56:c5:ee:5e:25:db:4d:84:79:6c:8f:18:fa:13:20:29:77:
ba:88:c6:f8:bd:cf:11:50:e3:f5:81:8d:60:d1:1d:be:ae:59:
9e:38:97:45:e1:9b:80:16:03:b4:07:5b:23:67:18:3b:a1:9b:
59:b9:79:8b:71:6b:59:42:6c:77:05:68:e4:0d:80:12:8e:0a:
10:2e:85:d1:92:d3:c2:9c:30:a2:15:f2:06:fe:68:f7:55:d9:
56:dd:71:67:57:bf:24:e3:8a:a5:6e:af:d5:2d:6d:15:8d:c1:
26:67:12:b4:45:d0:59:23:85:76:52:e7:0a:8e:cb:fa:b8:e9:
60:f4:30:b6:c4:a0:76:04:ee:f6:b3:f8:92:80:de:95:f4:3a:
b3:5d:e4:56:97:18:ce:ab:07:39:95:f1:53:98:26:ad:78:78:
68:7b:ed:ed:a0:ec:bd:d3:30:f1:e1:53:e8:3f:49:b0:b0:6f:
b0:7f:04:17:30:f4:45:1a:a5:49:da:ac:d5:53:57:b2:00:8d:
29:ae:f6:f6:a8:3a:18:06:2b:c6:9e:a0:f2:ac:f2:c9:89:37:
53:54:31:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:44 2026 by rpki-client