
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
File: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json)
Hash identifier: X0l1KHkFdgxo9TzfcBjp+NcyGoPYmwNkBrxaCzKjjJ4=
Subject key identifier: B6:EE:AD:25:89:B4:1A:9E:0A:90:A2:BD:BD:CB:47:D3:91:9A:44:28
Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E
Certificate issuer: /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
Manifest number: 0239
Signing time: Sun 01 Mar 2026 03:13:54 +0000
Manifest this update: Sun 01 Mar 2026 03:13:53 +0000
Manifest next update: Sun 08 Mar 2026 03:13:53 +0000
Files and hashes: 1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: ULRJyKz8SQ5SSmJSCAkbVs+JiYMQWqEvV5ST3dF/k3k=)
2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: n8o3xnaflWVbOqkp6JntoRCYSrJ8NdzSSuqGUsQkMzA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl
rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142091, serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
Validity
Not Before: Mar 1 03:13:53 2026 GMT
Not After : Mar 8 03:13:53 2026 GMT
Subject: CN=69a3aef2-083b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:2a:f0:8c:b6:4d:29:19:d5:88:83:1c:d6:
51:6c:77:4d:56:43:0a:df:03:54:cd:73:0b:b2:9b:
ab:2d:36:c6:25:5a:17:c3:ba:c9:32:d9:fc:86:96:
c5:f9:44:84:95:c2:3e:61:55:0a:f0:da:5f:0e:77:
f6:57:86:3d:7c:68:94:99:30:4f:8c:69:8e:67:ae:
c3:d9:a9:31:54:f3:d3:8b:54:fb:f8:ee:79:ec:2d:
c1:34:63:59:37:0b:3f:8d:5f:b8:96:95:32:3f:e3:
fd:6d:f3:49:0f:2a:20:f6:16:90:64:b0:5e:3d:07:
69:3c:f9:de:91:a5:b1:5d:f3:49:ac:a0:f4:b5:30:
6d:94:1a:13:c0:27:3c:a2:85:36:75:88:6a:6e:b8:
bb:20:f8:39:33:26:c1:14:18:eb:1f:34:99:f3:65:
75:a6:74:22:00:67:84:63:a4:8e:49:87:5f:93:65:
4c:54:2e:a0:50:eb:af:3e:28:69:05:93:44:fb:5d:
62:6e:4c:1b:ea:04:8e:38:f6:6c:05:8a:9b:ed:65:
86:ce:90:5c:c8:b6:e7:8c:5e:ba:63:9f:94:fd:f2:
b6:3e:5f:06:af:7c:02:3b:34:98:eb:d9:7f:a2:33:
eb:e2:6c:99:fe:11:7f:0b:e3:f5:1f:3b:13:b2:68:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EE:AD:25:89:B4:1A:9E:0A:90:A2:BD:BD:CB:47:D3:91:9A:44:28
X509v3 Authority Key Identifier:
keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:0a:87:fe:a2:c2:8c:b3:19:04:d7:cb:e3:ef:de:e6:d7:1a:
6b:2d:7d:16:01:96:32:54:b4:7d:ea:b9:b8:05:85:ce:6d:b2:
60:93:77:74:bb:6b:f2:2d:56:68:ec:6e:07:40:bb:ec:e4:dd:
85:8c:e0:26:7a:af:ac:6c:1d:35:c2:47:22:c5:e1:70:20:0b:
e5:a5:38:1e:a8:36:2a:96:51:cb:8b:f1:17:64:aa:b5:59:a7:
4a:08:f4:6a:f2:04:d6:87:b1:1b:d2:fc:19:ff:b3:a3:2e:89:
58:33:44:18:cb:38:fc:c3:d6:23:84:da:1a:0e:69:31:db:9e:
24:d2:f8:93:af:65:ea:ec:31:5b:56:21:24:45:ce:c1:a4:d9:
fe:a3:15:53:61:88:aa:86:23:8c:58:6c:16:5e:3f:02:20:92:
a1:e2:90:6d:cf:fd:72:8f:6a:19:cb:15:15:75:0a:dd:84:d6:
17:42:df:0e:d7:fd:a6:dc:fe:ab:48:23:07:bd:5c:d8:c8:08:
60:93:86:44:fa:a0:2c:a2:ff:5d:a5:5e:27:e5:7c:58:4d:eb:
5a:8d:1a:bb:9a:9a:c6:b4:da:70:80:9d:53:28:72:3a:63:6f:
f5:7c:c4:7b:31:c2:24:4d:a5:d5:29:91:d9:a0:8d:e8:84:25:
96:e6:f1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:17 2026 by rpki-client