
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json)
Hash identifier: Hmm0XI8rzUp2l9OZvqyoQVhqaeVi1cICKWDRuVsxsAE=
Subject key identifier: E5:90:6E:5A:C0:B6:74:B2:68:8B:03:26:B0:A6:83:18:E4:8D:2A:3E
Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
Manifest number: 0103
Signing time: Fri 17 Apr 2026 05:50:27 +0000
Manifest this update: Fri 17 Apr 2026 05:50:26 +0000
Manifest next update: Fri 24 Apr 2026 05:50:26 +0000
Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: 1McHE28aIwLpwKQ0RwOCR/6WCQdIw2tRR2njWeQn61Q=)
2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: UgNLpnpsPwAz2rvVqCqPMBi0JxC9elqJ20s+71NKi0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Validity
Not Before: Apr 17 05:50:26 2026 GMT
Not After : Apr 24 05:50:26 2026 GMT
Subject: CN=69e1ca23-4259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:93:e1:77:9d:83:ea:99:ff:76:4a:24:53:
9b:2c:1a:da:63:e2:10:39:b7:5b:71:e4:c9:22:8b:
bf:08:b6:69:09:4c:a4:4f:f2:8c:d3:d9:57:dc:1c:
42:6e:48:eb:ca:2f:e1:3b:5d:50:b1:7f:85:9a:e9:
16:65:be:c3:c0:99:b9:80:6d:a7:90:3e:51:43:05:
ed:72:d0:df:fb:20:fb:37:fb:49:bd:b4:d1:99:ca:
17:ec:84:dc:65:b8:80:7a:c7:b1:e8:eb:8c:48:b9:
f2:69:e6:1b:1e:e1:55:16:c9:84:a3:e6:32:e1:f4:
ba:c1:2f:f0:3d:14:5c:19:d3:15:3a:52:d0:e0:02:
07:91:51:f9:c0:f5:46:1b:b1:cb:71:0c:7d:04:0a:
b3:9f:dc:76:24:6c:7c:16:4c:71:d1:3d:05:b8:2a:
15:fb:21:8a:5d:8b:18:14:43:08:f4:ba:9c:db:c1:
c7:1f:d2:22:26:dd:e6:87:e5:22:24:67:8d:0b:d3:
ea:e9:d8:67:44:1a:35:19:ab:03:67:2c:a1:a6:69:
54:63:0f:80:b0:24:6d:6e:da:e3:9b:89:d7:5c:32:
9a:86:7a:77:60:c6:ab:43:51:b8:de:2f:01:c1:ad:
7a:16:50:a3:f1:2b:33:ae:df:90:98:ff:4d:22:86:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:6E:5A:C0:B6:74:B2:68:8B:03:26:B0:A6:83:18:E4:8D:2A:3E
X509v3 Authority Key Identifier:
keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ff:e7:c5:b0:5d:0e:bf:d0:75:8f:c2:50:13:50:2e:9e:dc:
6b:98:da:7c:6b:38:c6:54:93:31:8e:c9:ae:9d:0e:b1:1e:01:
b7:bb:79:34:fa:bd:f6:56:aa:5a:45:19:80:0d:1c:83:da:08:
b5:53:aa:ae:f0:41:de:d6:3b:52:01:cf:b0:e8:12:37:14:a8:
02:47:ff:96:00:1c:ca:74:c2:62:03:40:f3:12:fd:8f:0d:9e:
14:c3:6a:8e:9d:d1:a4:29:34:f3:31:6b:54:ab:70:49:76:64:
94:75:96:04:00:2b:6a:06:43:fd:93:1f:44:b5:bc:ec:62:8f:
d8:a1:99:06:17:58:9a:4c:9b:cf:cd:bb:1e:83:8d:a0:54:c5:
84:ae:1e:cb:c1:e2:e8:f0:64:8a:e7:d8:b8:19:f4:ef:41:f7:
39:a4:08:f5:72:18:13:c0:8d:b5:22:0f:24:87:dc:89:a7:a6:
e8:85:22:1f:4b:68:ce:60:fc:82:b7:fa:19:f8:e5:e3:14:35:
b0:f3:97:b0:5e:43:b1:06:97:f5:7c:f8:d3:89:06:f9:33:85:
3e:43:0e:b9:89:60:13:2f:5c:81:ed:16:bf:2c:7e:f0:40:48:
44:30:b5:3f:e8:77:20:b2:34:b6:45:b7:58:42:cd:07:3d:93:
cc:0b:f1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:46 2026 by rpki-client