
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json)
Hash identifier: crR2Yjd+oR9DvW+0mnDIc5aKxULLtB4UXxkKukgGAFc=
Subject key identifier: 75:C9:81:8A:E8:A0:A9:A7:41:E0:D8:CD:FB:D4:2D:5D:98:E0:5A:31
Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Certificate serial: 07E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
Manifest number: 07D6
Signing time: Sat 28 Feb 2026 21:42:28 +0000
Manifest this update: Sat 28 Feb 2026 21:42:27 +0000
Manifest next update: Sat 07 Mar 2026 21:42:27 +0000
Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: xDxglmzcOj6+LWb4GhZGCb5Uhhe+7mhYJvraUTsUdtA=)
2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: fXQXf8N5tytPfV8xyqN1Zu7dGcPNJVrKRy7cMq29VZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2016 (0x7e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Validity
Not Before: Feb 28 21:42:27 2026 GMT
Not After : Mar 7 21:42:27 2026 GMT
Subject: CN=69a36144-5eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:4c:63:e5:ba:36:fa:20:61:d3:5f:ec:e1:
c5:ef:11:80:e8:60:31:ab:fd:dd:04:28:7c:2e:31:
c6:1f:93:fe:a5:f4:94:e3:69:6f:8b:4d:1d:50:7b:
63:e0:6e:21:af:78:7d:d6:b9:3e:60:1e:ee:c8:e3:
14:b3:b0:68:1b:0d:32:7c:9b:5a:46:51:3c:fa:5f:
de:c0:8a:26:a2:40:c1:4f:cc:3f:49:5b:d6:21:96:
1b:69:99:b9:ee:9d:4c:95:42:cb:9f:91:7c:68:03:
ec:fa:de:89:33:ff:e5:27:91:03:b7:09:42:74:c6:
19:04:07:95:b0:d2:73:23:22:a0:70:2f:3b:b0:7d:
a0:ef:7e:ef:4d:35:9b:dc:90:f9:7c:8b:d8:85:26:
f5:f5:0e:dd:d8:be:15:4e:a2:19:e7:3b:6b:e7:09:
9b:c8:87:38:28:51:53:af:3b:93:0d:d0:ff:b3:da:
22:61:df:8b:ed:e0:da:b8:65:ca:71:c6:5a:27:dc:
99:84:70:97:73:73:45:89:03:00:30:e4:84:9d:f8:
f4:d8:aa:52:e1:65:81:43:eb:60:84:28:a8:6b:dd:
02:d9:71:0b:2a:90:8a:24:76:d3:1a:41:c3:ba:29:
9d:aa:d2:cf:65:23:1d:1b:a4:13:d5:d9:a5:a4:64:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C9:81:8A:E8:A0:A9:A7:41:E0:D8:CD:FB:D4:2D:5D:98:E0:5A:31
X509v3 Authority Key Identifier:
keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:e7:e4:9d:ff:64:00:c0:d1:8e:0d:8e:a7:15:24:31:d7:18:
b4:d8:f8:7f:35:49:f4:bc:69:f6:e0:49:e1:36:c9:3e:7e:44:
8a:35:37:7d:4a:be:2e:2e:cc:cc:09:6d:0f:27:82:04:3d:ee:
40:a7:6f:7c:2a:85:d0:f9:c9:7f:3d:3d:7a:91:3a:b8:42:da:
27:92:5c:dd:ef:fb:cc:44:f8:e4:fe:84:b6:d6:0d:84:52:50:
46:66:a5:7f:d9:9d:dc:d4:d6:20:33:fb:75:b1:ad:d2:1a:9a:
16:33:9c:db:cd:57:6c:38:76:6a:07:57:14:3b:de:1c:8f:d4:
23:3e:a2:eb:ba:2e:97:3a:7f:58:f3:cd:a2:e4:e3:4f:cc:fe:
b1:d9:14:a7:0d:53:0d:33:13:18:a8:a2:80:d4:17:74:a4:d1:
a3:71:0d:21:71:5f:1b:20:48:9c:34:ac:74:bb:32:18:43:cf:
6e:97:e5:61:6b:c3:b1:75:f6:1f:eb:9b:94:36:49:15:82:c4:
b6:28:8d:01:cc:ff:35:13:67:18:a9:1b:1a:97:8d:1e:95:d4:
7c:ae:7c:6e:0d:5b:82:45:f7:b5:a4:09:0e:9a:dc:4d:32:dd:
54:4e:9f:0d:b0:18:cc:bb:25:4e:d1:e4:08:96:81:3a:dc:84:
9f:09:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:18 2026 by rpki-client