
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json)
Hash identifier: h6XNOBeaOjRpPszn4OjEGPjHCUOi+DpiuFj9o7Yjxp8=
Subject key identifier: A8:83:6F:A7:46:FD:2B:A1:21:7B:33:EF:5C:F4:4E:A5:AD:70:73:04
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
Manifest number: 0260
Signing time: Sun 01 Mar 2026 02:50:21 +0000
Manifest this update: Sun 01 Mar 2026 02:50:21 +0000
Manifest next update: Sun 08 Mar 2026 02:50:21 +0000
Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: xmE9m2etCm4jRsfcUK5SRIc0/NIRbbd+JL437HIeSGI=)
2: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: H4ZiNqnOQ9SeXj19JFNgIsK4CCAguZ6MrEtJQSUxrHY=)
3: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: qDV9QCi5HkxixaBFK8kj0xBTXurODiSoIKzsQFF1+SQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
Validity
Not Before: Mar 1 02:50:21 2026 GMT
Not After : Mar 8 02:50:21 2026 GMT
Subject: CN=69a3a96d-366e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:4c:02:f2:fb:89:20:c5:eb:dd:c4:74:fb:
6e:63:af:48:cc:3f:d5:04:40:a1:c0:a7:8c:9a:4f:
f8:d1:47:89:a5:f7:c3:95:28:3d:3d:ab:94:88:f5:
22:1b:fa:6f:1e:1c:8b:fe:63:a0:e4:75:7f:b0:1b:
46:63:08:81:6c:72:fd:6b:7c:10:2f:85:e2:67:fa:
f1:90:51:eb:55:3d:46:b0:40:03:08:3e:9d:9d:ab:
20:c5:e2:38:78:17:44:c1:7f:0c:d3:9e:32:e6:c8:
6d:e9:5b:0c:cc:c1:43:9b:6d:bc:4d:cf:35:e6:cc:
59:7b:1f:6e:a8:d6:15:3c:1a:a6:ae:f0:33:57:ce:
40:39:4c:25:b6:4b:8e:40:8b:9e:1c:75:a2:f1:47:
43:71:c7:ca:02:10:d2:c4:ea:b8:d7:40:83:6f:5b:
68:8f:ea:b7:67:33:ef:d5:85:cd:8c:d8:21:a0:5f:
bc:cc:fc:9f:01:b2:0d:dc:9e:e7:b2:ff:14:53:e9:
e9:a5:dd:2e:33:56:07:29:47:a4:ab:50:07:e3:d3:
20:35:11:29:ba:a4:da:a8:22:df:82:f6:a0:47:1d:
37:1a:f7:d8:c8:21:5f:45:84:52:b7:aa:09:8e:bc:
91:48:4b:77:56:ad:b4:ca:af:94:5d:51:02:88:f9:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:83:6F:A7:46:FD:2B:A1:21:7B:33:EF:5C:F4:4E:A5:AD:70:73:04
X509v3 Authority Key Identifier:
keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:ee:6e:96:23:46:b0:ed:fd:48:c1:7e:ab:c0:84:c7:9a:6c:
10:09:55:14:bf:68:c5:38:75:69:1c:96:4f:28:0e:55:f1:b2:
4c:7b:a4:25:d0:0b:cf:0c:65:57:c4:85:cb:f3:45:31:13:bf:
b6:19:78:2b:2e:36:03:92:0f:5a:c7:43:95:de:80:13:ae:f1:
61:9b:92:6f:4c:9e:7e:47:19:f9:d9:7c:c0:0e:92:3f:ad:a9:
72:dc:b6:ea:18:4e:7b:30:1e:80:07:89:18:48:fc:3d:19:44:
10:bc:db:28:5e:c2:87:43:31:cb:f0:8b:3b:03:02:2a:b7:41:
8c:44:34:bd:05:ed:e1:e0:39:16:ed:6b:80:ed:eb:b7:00:1e:
aa:a7:21:ae:8e:36:82:64:7e:f5:53:2e:a6:ff:6b:b7:e9:78:
54:c6:3c:bd:92:54:bb:83:55:bd:de:bb:7e:42:12:d5:e3:40:
3c:4d:3b:88:30:a7:47:7e:1c:e7:dc:18:0a:c9:60:a6:06:ed:
82:e4:fb:e4:15:94:dc:a0:a0:ab:1b:f0:04:c5:ed:8f:ca:80:
24:a8:d6:14:e3:76:45:04:35:5b:d2:2a:46:0d:26:84:bf:39:
d1:a3:ec:55:12:64:55:65:b3:f0:18:df:93:b7:8a:40:3d:10:
af:1e:2d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:20 2026 by rpki-client