
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File: 4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier: gccwsUuUZRxiC9sZI4Hnx+U+0UcPma6eT6idfF8nhHM=
Subject key identifier: A4:CB:33:30:7F:11:FD:CC:14:A7:87:32:E6:F6:63:CC:A9:DD:89:F2
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer: /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number: A4
Signing time: Wed 23 Sep 2026 06:56:47 +0000
Manifest this update: Wed 23 Sep 2026 06:56:47 +0000
Manifest next update: Wed 30 Sep 2026 06:56:47 +0000
Files and hashes: 1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: HhX3XA7rtK4+smPuCtbkVHTtobBx8avPiH1lnSX/7Ws=)
2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Validity
Not Before: Sep 23 06:56:47 2026 GMT
Not After : Sep 30 06:56:47 2026 GMT
Subject: CN=6ab3782f-a7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:19:1c:8e:92:9f:1c:86:93:12:89:62:dc:
1f:aa:6d:af:46:24:ee:52:54:3c:70:0d:62:e4:d9:
32:e1:f0:70:5b:3f:09:d1:4f:56:cc:63:d5:0c:5b:
53:8f:09:ee:1a:45:91:dd:51:fd:34:ac:15:07:c3:
16:d0:f0:e0:65:38:93:e6:4b:00:e3:31:4c:22:2e:
4e:a8:52:11:92:f2:4c:9d:53:4f:63:49:60:5f:13:
79:68:be:f3:93:96:5d:2c:ad:c0:b5:1f:a7:6e:1f:
ea:b1:1a:07:38:d1:57:d9:80:9e:17:7c:e0:45:07:
f2:5d:f0:4f:67:00:37:16:1d:a6:3f:39:a4:17:31:
3b:6a:de:6a:f4:84:76:ad:02:67:21:a0:f8:60:6e:
07:ff:b9:7e:cc:30:c7:f0:08:db:cb:08:e9:e7:de:
5c:0c:b0:ed:96:85:1b:c2:36:75:98:6c:36:28:ca:
23:4e:af:95:36:bf:9f:12:4c:2b:db:1a:39:d8:39:
24:50:63:9a:7a:07:d4:29:51:cc:9d:09:87:5f:83:
93:fa:ea:cf:91:82:86:26:59:6e:1a:30:28:a8:60:
d6:53:0b:61:b9:90:58:8e:b4:a5:a4:61:c1:ae:0f:
30:f7:34:d4:95:58:88:88:e0:3a:e0:62:58:86:a6:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CB:33:30:7F:11:FD:CC:14:A7:87:32:E6:F6:63:CC:A9:DD:89:F2
X509v3 Authority Key Identifier:
keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:7d:67:be:da:2f:7c:4b:fe:4e:ba:4e:e3:1e:51:ba:27:68:
f2:a0:f6:0b:08:78:23:fa:70:aa:73:ee:6f:56:48:0a:fb:09:
f9:7a:b6:51:a1:28:1c:17:f4:27:e2:0c:11:81:6e:b7:be:32:
22:e6:a2:b0:8e:ba:36:72:d1:75:c1:61:81:fd:91:3f:90:2d:
35:6b:22:41:50:87:ac:93:67:8b:e1:aa:03:55:9b:e3:0f:85:
77:e3:c6:e2:25:15:f5:2f:cb:58:d8:9f:1c:63:81:f4:05:ab:
d1:49:8e:ba:16:fc:3b:64:90:91:6b:4f:11:60:77:0b:68:68:
92:f8:cd:74:09:77:02:b7:6f:a2:62:ac:e3:45:51:d8:27:42:
a8:bf:94:4f:68:1d:5c:dd:5f:f4:88:e2:28:81:e5:ca:34:00:
3c:ee:8c:cd:61:8f:c5:97:d8:ba:fe:1f:c3:07:ec:63:27:1f:
08:24:47:71:96:85:ac:b7:46:8c:9a:53:ed:d8:0e:25:83:9c:
d5:cf:a2:8a:48:6b:d1:26:c5:e5:5f:05:8b:fc:bb:ec:89:31:
4b:46:fe:90:67:f3:95:37:af:0e:56:30:a0:fa:44:8c:7d:91:
8f:3d:00:01:2f:fa:6f:e5:56:46:00:04:df:58:fc:b0:7d:11:
9e:d0:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:42:16 2026 by rpki-client