
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json)
Hash identifier: hcSMQYMN+ZDXsh8SkWNcL77OJ4WXRVVYCbntdZjqI7c=
Subject key identifier: 28:45:B0:CF:04:E1:8C:B6:62:01:46:EF:87:22:F6:DE:00:C4:A6:A8
Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Certificate serial: 0830
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
Manifest number: 0824
Signing time: Tue 28 Jul 2026 21:32:42 +0000
Manifest this update: Tue 28 Jul 2026 21:32:41 +0000
Manifest next update: Tue 04 Aug 2026 21:32:41 +0000
Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: clUYuUQBAGZxWvsKNy3QfXIc1KwQhwn+JSf7ME9ddXM=)
2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: E6etJLs09jxCInikK/I6oSWS8vZ+7fWKirFeSQZQozk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2096 (0x830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Validity
Not Before: Jul 28 21:32:41 2026 GMT
Not After : Aug 4 21:32:41 2026 GMT
Subject: CN=6a691ffa-0df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:fb:85:40:f6:47:f6:cf:79:f7:ef:bc:40:
5c:f1:8e:3e:8f:69:60:05:c3:0d:e4:7d:b1:83:79:
02:9a:28:51:ee:a4:fe:18:03:9d:69:fc:69:96:df:
da:61:75:47:cc:e0:20:64:6a:85:a2:47:0d:ca:69:
ed:08:84:19:80:df:68:7e:ae:ea:9a:cd:0a:6a:25:
fb:2b:a7:9c:a9:32:d4:42:7b:5a:50:f8:15:0e:05:
db:a7:cc:c0:50:b5:1d:13:94:ca:ff:d6:8d:7f:53:
75:a1:ea:86:11:cc:b1:ef:a1:fd:01:02:7e:57:a0:
03:e0:94:39:ee:02:3b:e4:51:ce:27:1d:0a:1e:e8:
06:d9:68:63:b5:df:3b:34:d5:ff:67:7f:4d:d1:2c:
7b:54:08:95:a6:e4:84:bf:ed:e7:b6:cc:1f:67:6b:
dc:62:8d:fd:1d:46:7d:dd:50:f3:83:bf:56:cc:c9:
29:52:62:b7:bb:af:52:f5:bc:ae:15:2e:b8:51:96:
b8:19:9b:b8:7d:17:46:01:b2:5e:e9:5b:73:18:18:
a0:8d:50:99:12:7c:2c:ae:4e:ce:0f:53:e6:e1:03:
5a:62:e6:41:1e:0c:33:ee:8a:eb:79:fa:87:2d:f0:
4d:06:a2:c9:a6:b6:81:62:80:56:ad:5e:fd:27:29:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:45:B0:CF:04:E1:8C:B6:62:01:46:EF:87:22:F6:DE:00:C4:A6:A8
X509v3 Authority Key Identifier:
keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:5d:ab:84:93:41:18:e0:43:f5:71:69:03:f4:15:5a:c0:68:
61:51:da:49:78:44:0a:1a:f3:a4:82:c9:d5:a3:be:3d:4a:0b:
f4:f4:67:50:ae:f8:c0:f4:44:04:7a:c2:17:f0:86:70:06:d2:
63:82:63:2c:95:87:7d:86:f5:01:b6:a4:e1:53:44:7a:54:fd:
a1:f0:3d:1f:d7:8c:fd:2d:de:a2:fa:85:49:6d:c7:75:9c:56:
61:b9:05:cc:ea:a1:a8:07:dd:c2:91:7d:5a:8e:99:d5:6f:e1:
9e:bb:ae:03:a2:29:85:f7:4c:93:56:f3:56:32:e5:17:f6:73:
b3:64:54:53:b7:06:73:d0:70:e7:cf:57:74:e1:94:b5:b8:96:
a4:4d:30:b7:74:02:ce:e2:b5:36:bf:f9:25:bf:62:f1:04:82:
36:46:6b:ad:fb:69:0c:37:11:d5:4e:d3:b3:e6:78:ce:ad:f2:
b7:27:7b:45:9f:27:86:1d:f5:c8:2a:d0:12:df:14:28:33:04:
5d:67:e4:e8:16:b3:36:cc:18:f6:bc:a3:ad:42:53:eb:f3:8b:
4b:6f:73:51:d8:f9:08:75:4a:c2:0a:95:f2:ff:a3:c4:bd:b5:
00:17:73:bb:28:83:1e:d2:46:bf:8c:70:2f:50:55:bd:0e:3e:
2c:bb:55:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:36 2026 by rpki-client