
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json)
Hash identifier: W209k73pHF4qzANMlxKLI02bL/24fy2nPTNvfa+AUlk=
Subject key identifier: F3:C2:26:B0:29:B9:29:7D:3B:42:84:C7:7A:0D:B3:02:97:CC:A9:31
Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Certificate serial: 0819
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
Manifest number: 080D
Signing time: Fri 12 Jun 2026 21:12:00 +0000
Manifest this update: Fri 12 Jun 2026 21:11:59 +0000
Manifest next update: Fri 19 Jun 2026 21:11:59 +0000
Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: kdbxP4B6awMormqfVdqqVfURyJ77SvGxLyDrR60r6cg=)
2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: E6etJLs09jxCInikK/I6oSWS8vZ+7fWKirFeSQZQozk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Validity
Not Before: Jun 12 21:11:59 2026 GMT
Not After : Jun 19 21:11:59 2026 GMT
Subject: CN=6a2c7620-a9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:93:b2:74:c9:52:23:bd:a5:cc:0b:21:80:
9f:42:78:dd:2e:42:6c:d1:11:52:f8:26:b3:1b:48:
f7:51:19:d7:6e:f9:08:a0:63:4a:6b:2e:84:d5:c3:
1e:57:6d:9f:7e:34:db:0b:84:90:d6:a8:91:33:aa:
a7:c8:42:b5:a5:72:c4:4f:a2:48:6b:78:67:4d:05:
eb:7d:78:bd:29:c8:6d:d0:f0:f1:69:99:d5:6b:5b:
13:7e:9c:d8:a2:66:df:c5:34:02:2f:e1:8e:bc:50:
bd:96:72:cd:99:09:a9:00:24:3b:62:78:22:5f:e6:
d4:d0:82:7a:cb:fd:63:82:f8:0f:bc:5b:41:5f:a7:
ac:f4:31:1c:5e:a5:02:31:9f:a5:a4:75:d5:f7:8a:
01:20:57:67:df:59:7a:12:46:d4:13:65:97:8b:74:
0f:9e:95:ca:ee:62:48:1a:e2:2f:72:ea:38:96:66:
6b:2e:14:8d:3e:3e:1a:8a:00:4a:53:74:7d:6b:62:
e6:84:05:cf:34:ef:c5:0d:2d:82:05:12:c6:1e:9b:
08:be:39:c7:ce:aa:ae:67:c0:7b:4e:e2:10:97:c0:
50:7f:fc:86:b9:50:4f:65:89:bd:36:e0:62:7c:94:
cc:d7:aa:c0:03:c6:1f:9e:19:24:1a:2c:27:0f:07:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:26:B0:29:B9:29:7D:3B:42:84:C7:7A:0D:B3:02:97:CC:A9:31
X509v3 Authority Key Identifier:
keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6a:9c:c1:8d:2d:ed:5a:84:29:cf:a5:bb:60:88:99:dd:2c:
3e:c7:20:df:7a:a7:9d:c5:aa:31:45:d5:a7:ad:d8:ea:fa:f1:
fd:ea:f8:ed:d5:af:23:50:2b:57:88:4e:bf:b3:a9:f3:07:b6:
a3:ba:35:b7:4a:a6:62:fc:31:e0:44:e7:f9:4c:4f:3b:dc:b4:
85:ec:7f:d6:22:47:6d:e1:6c:24:a2:21:90:9b:0f:b3:7b:92:
47:12:df:dd:59:98:fb:e6:b7:c8:0f:4a:da:a1:2e:d9:fe:2c:
c6:c4:b7:f6:d5:8d:eb:c0:a8:a8:d4:78:99:48:b1:b4:20:a4:
dd:33:be:5f:fa:87:a2:3f:c1:0b:ac:7a:a7:31:62:48:81:ed:
41:80:78:56:5a:92:a1:df:b4:96:c4:fd:91:4b:e4:fd:a8:21:
ec:3f:0b:44:99:35:c9:ed:07:61:4f:fd:dc:90:a4:b1:c2:2d:
d4:78:9b:67:91:b4:e5:a1:91:f8:fd:0c:98:e2:f7:f6:ee:4c:
71:09:f4:47:50:57:49:59:d9:83:de:48:af:ec:fb:89:aa:04:
fd:f1:0d:95:a8:bc:44:67:af:18:bf:bf:66:89:31:04:0e:46:
5e:c3:60:83:f2:ec:1f:f1:e9:1e:18:b9:b2:7d:65:42:fa:e3:
7c:82:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:27:17 2026 by rpki-client