
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json)
Hash identifier: LUhjsodEn9tXhbfrm5DwxI8NEbOOf+DGjVMFAOn+84g=
Subject key identifier: 42:19:48:FD:1A:A8:94:16:B1:08:DB:17:63:0F:16:40:67:6F:A0:6A
Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD
Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD
Certificate serial: 037C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
Manifest number: 0374
Signing time: Mon 21 Sep 2026 00:38:53 +0000
Manifest this update: Mon 21 Sep 2026 00:38:53 +0000
Manifest next update: Mon 28 Sep 2026 00:38:53 +0000
Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: ySmEOacFbCsltlz+4SM+8dR+Pl//6K97CF+QbRjfW9k=)
2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: A8vw3ItQVUZdYIDmr/9S8qW9fDbbnqv5e1BV2gI3Ago=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl
rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892 (0x37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD
Validity
Not Before: Sep 21 00:38:53 2026 GMT
Not After : Sep 28 00:38:53 2026 GMT
Subject: CN=6ab07c9d-745e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:72:3c:21:2e:c7:ca:16:f0:68:a9:cf:60:
21:79:18:a1:4f:ad:ff:96:b0:d5:f5:f4:7a:fa:2f:
67:da:27:6e:d8:c0:bd:65:b4:e9:d8:15:dd:35:b4:
12:14:26:f6:da:fc:a4:53:9d:13:e2:06:cf:54:1b:
9b:4a:ed:bf:9a:e3:68:5a:f0:94:5f:1e:b7:9e:84:
a1:60:8e:5b:13:df:30:98:ce:ad:ac:e1:fb:22:41:
61:e7:50:70:8c:6c:86:b2:9e:73:97:61:2b:41:a2:
7c:09:6d:07:d1:0c:5a:fd:6d:12:6c:a1:cc:1d:59:
2d:b4:6a:f5:93:18:cf:a6:4f:cc:92:84:16:0e:31:
1a:78:55:d3:72:ca:1d:ab:42:7f:41:22:21:54:94:
1e:7d:d8:8a:17:b2:b6:0a:b3:1b:24:81:a5:f3:cb:
09:fc:1b:94:d0:cb:f5:74:bd:32:93:a9:66:a8:43:
2f:ac:9c:16:b2:38:a9:48:ee:84:ad:64:6d:a7:74:
06:94:5a:68:61:22:f5:a6:84:70:20:a2:73:92:7a:
d4:da:c2:f2:7b:6d:90:39:89:25:c5:fe:8a:97:42:
76:ce:5d:07:e8:3b:0d:9c:c7:46:89:e1:50:96:82:
77:5d:7a:4f:7b:53:47:5c:f4:82:36:0e:c5:25:a7:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:19:48:FD:1A:A8:94:16:B1:08:DB:17:63:0F:16:40:67:6F:A0:6A
X509v3 Authority Key Identifier:
keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:4e:fb:ff:8b:63:a5:98:28:34:39:76:76:bc:77:13:99:de:
60:da:35:c7:aa:b2:de:28:01:e4:de:c8:f0:44:0b:83:c3:83:
1d:72:cc:0e:7a:a1:ce:a2:ee:ab:10:31:b3:5a:a9:28:06:36:
3e:91:41:87:25:e0:ad:a3:8b:ae:69:5c:6c:a0:17:dd:91:80:
6b:30:0d:70:45:45:a5:d9:a0:fe:df:a6:3e:02:df:15:dd:17:
27:fa:92:bc:cf:8d:c6:15:fb:f0:63:d9:4b:87:d2:33:67:33:
12:40:5d:9a:f0:4e:42:a9:84:55:8e:92:50:40:f1:54:a9:28:
46:c7:a4:28:87:e8:45:2d:da:aa:c1:c6:79:33:46:03:c9:cb:
15:a6:ce:ff:14:be:87:a8:2f:d9:62:8a:02:6e:21:1c:c7:f6:
9c:db:7e:5b:8b:24:9c:6a:77:63:56:e8:3e:bb:21:77:68:9c:
4b:4f:c8:2d:ac:2f:9a:ae:b9:e5:bb:be:1d:b1:9c:7f:d1:5c:
d3:d5:a2:c9:f5:1c:43:50:a1:58:75:9f:6d:78:15:a7:d4:a6:
33:84:3e:59:1c:60:b5:3f:ab:4a:20:f4:5d:5b:0a:35:f2:e4:
01:c3:9e:ff:a2:fe:93:af:58:c5:1b:dd:6d:76:3a:8f:ef:1b:
39:d7:1a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:56:57 2026 by rpki-client