
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File: 4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier: 54RtzW2FNaM8BHMnWG0GSWHSmqyFEVGR7viFArxorkE=
Subject key identifier: 81:98:6B:DC:F8:48:16:DB:EF:A5:81:3C:8D:56:B8:49:AD:12:C2:81
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer: /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number: 86
Signing time: Mon 27 Jul 2026 09:45:08 +0000
Manifest this update: Mon 27 Jul 2026 09:45:08 +0000
Manifest next update: Mon 03 Aug 2026 09:45:08 +0000
Files and hashes: 1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: be1nVqtpn14V+2VVzbBNAMmd5jsA/xzRARBOok4PdPI=)
2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Validity
Not Before: Jul 27 09:45:08 2026 GMT
Not After : Aug 3 09:45:08 2026 GMT
Subject: CN=6a6728a4-f4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:b7:49:0c:25:6d:ec:32:5a:77:a5:7e:73:
2f:48:33:19:79:f7:95:d4:40:e3:0a:25:be:d3:bf:
31:57:79:84:01:f9:b9:db:be:16:1d:25:9a:a5:52:
a8:7c:9c:1a:0c:90:2b:43:c6:c6:2d:ed:0e:66:4f:
3d:e5:c2:b6:8c:d1:68:50:76:ab:ad:56:04:81:09:
af:d5:33:28:86:76:a8:5b:26:c0:6f:77:71:06:3c:
e2:d0:cc:d0:3c:a3:04:03:a8:31:b8:d7:b6:c8:6f:
bc:8d:52:1c:0a:0c:75:f8:3b:15:48:39:43:22:3c:
74:f1:4a:fd:0f:f3:f4:f4:ca:7c:7c:a2:23:23:83:
0c:3d:08:ad:46:d7:a7:31:53:5b:36:d5:f5:60:76:
4a:76:8f:4e:ed:48:5b:a7:8f:a0:25:ba:54:df:9f:
0e:a7:d3:80:05:a7:6d:92:26:13:10:e8:a5:65:0f:
af:ac:c7:0b:51:e2:83:af:9f:e9:6f:80:0a:fd:c2:
6b:28:f8:28:b4:3a:6c:37:bd:8a:ae:58:5b:2e:09:
51:53:08:51:a9:2f:40:79:2c:c9:69:0e:f6:16:1e:
2f:0e:ab:3f:91:aa:be:73:59:1a:96:57:4c:1f:a8:
d2:1b:6c:bf:87:4e:9a:92:50:d5:d6:03:62:d7:88:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:6B:DC:F8:48:16:DB:EF:A5:81:3C:8D:56:B8:49:AD:12:C2:81
X509v3 Authority Key Identifier:
keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:73:16:ad:3b:e3:39:90:96:79:71:4b:cd:66:13:50:59:d9:
77:87:bf:83:d9:84:99:64:64:7b:25:ba:31:87:e8:52:0a:b6:
aa:47:67:c2:14:00:a8:ab:c1:69:40:27:de:38:93:b0:ab:7d:
55:7f:5c:ba:a0:21:9e:d1:fe:57:64:7a:49:77:97:9c:f5:7f:
e1:a6:2b:b3:12:29:81:ac:53:04:79:6e:d2:d4:1b:11:38:ae:
c1:98:f3:95:f8:ac:48:3e:c9:7c:a2:26:c5:7e:49:6d:c2:3b:
a4:fb:84:d4:04:1b:15:77:d8:2a:c8:ac:7a:78:a5:a0:d3:95:
ea:7c:63:52:d8:15:8d:fb:79:24:78:91:6f:e5:2b:c6:0a:1f:
e8:29:61:ea:ee:a0:16:61:80:10:ea:3b:7d:2a:00:5c:86:4f:
a1:9d:87:64:59:3b:fe:56:8e:03:d6:57:4c:32:50:a0:90:cf:
d8:b1:68:67:79:ea:fd:8c:aa:4c:40:26:f5:22:12:72:28:15:
32:2e:17:be:b3:8e:b2:57:0a:47:33:10:ee:74:1b:d7:f0:fb:
e2:c8:98:24:ac:ec:7f:00:06:ad:17:65:39:96:ee:f2:65:df:
42:dd:8b:e2:ea:6b:70:9f:5d:94:f1:6f:d4:fd:95:be:be:49:
22:b8:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:36 2026 by rpki-client