
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json)
Hash identifier: Zx52w+fUPIYFuJR/UwKRD7mboPaByazOnqnZn7oqPco=
Subject key identifier: 9E:BD:09:89:B3:97:6E:18:43:45:91:17:9C:47:48:08:36:9D:A8:55
Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
Manifest number: 0152
Signing time: Mon 21 Sep 2026 05:14:41 +0000
Manifest this update: Mon 21 Sep 2026 05:14:40 +0000
Manifest next update: Mon 28 Sep 2026 05:14:40 +0000
Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: Ow9/w2qqJufm5TG7hx8l/b14jUEgO1Sr3aek2XcZEaU=)
2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: UgNLpnpsPwAz2rvVqCqPMBi0JxC9elqJ20s+71NKi0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Validity
Not Before: Sep 21 05:14:40 2026 GMT
Not After : Sep 28 05:14:40 2026 GMT
Subject: CN=6ab0bd40-a4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:db:31:b1:a2:d2:1b:36:0d:af:db:bc:25:
5c:0c:75:74:e4:90:f2:4f:0a:70:b6:b4:39:6b:8e:
18:3e:b3:cb:27:f6:2e:c4:b3:e1:e9:57:c6:f4:5b:
a7:a8:58:a2:d9:6a:0b:b0:01:9a:f1:d5:4c:bb:e4:
c7:69:e5:c2:50:3f:a9:62:c6:0f:fd:35:95:94:a2:
32:64:3a:c4:ae:7c:54:2d:f8:5d:90:3a:97:48:ab:
07:a0:c3:fd:f0:5f:e4:13:9b:6c:ad:61:05:d7:6a:
6a:56:c8:f1:a7:d4:da:1d:32:91:ea:90:4b:ac:0f:
58:0d:83:ff:14:54:2b:3e:31:65:c9:4b:0c:1a:f9:
ee:48:bd:42:88:ac:c5:29:40:c3:1b:c0:b8:9d:09:
9d:2e:00:80:4e:83:5a:97:87:be:83:8b:ae:7b:6b:
94:ff:1a:5e:59:46:52:1f:a3:fc:15:32:f9:89:71:
4e:1e:76:e2:0f:e6:c0:ef:ac:0a:90:28:4c:4b:89:
75:96:d5:31:bf:53:da:2f:21:18:ef:fa:5f:bb:60:
0e:5c:1e:ac:db:00:82:26:0d:3c:b2:a8:4d:af:05:
11:7f:95:60:79:59:fe:5a:67:0b:10:86:d6:32:2a:
df:87:47:a3:f6:5c:24:e2:bc:7c:88:dd:97:29:4a:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BD:09:89:B3:97:6E:18:43:45:91:17:9C:47:48:08:36:9D:A8:55
X509v3 Authority Key Identifier:
keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:78:9d:22:45:27:88:aa:bb:0c:f5:54:b4:05:62:23:ee:e8:
47:81:fb:dc:6a:0d:ab:3d:c9:c1:5e:d3:2c:80:f3:2c:f4:41:
4b:aa:d7:93:34:e5:8e:62:b9:ee:b6:8b:15:0d:ab:57:04:f8:
38:a7:99:62:37:f3:1e:e8:ad:b1:b2:32:b3:5d:1b:4e:4c:d4:
93:3c:23:8a:a7:21:63:e6:d3:d1:50:cb:39:c3:e1:4f:34:83:
3c:72:20:b5:c1:88:8d:05:dc:2f:f0:00:09:51:f5:63:39:4c:
bc:6c:5b:b5:3f:e8:ab:0a:f4:8a:1d:d0:f7:48:8f:96:9c:7a:
44:e2:74:1e:99:4d:86:1a:99:92:82:e9:96:6e:22:6c:a9:11:
48:1d:9d:bc:74:1f:5b:6d:f7:a9:44:df:24:b7:31:9c:9e:c7:
1d:f9:c3:f5:72:93:fb:d1:c5:1b:73:bd:3c:fd:c3:5f:d3:a6:
fe:48:39:74:e0:6e:c4:c3:60:bf:11:9f:51:49:35:ad:18:8b:
88:f5:af:85:6c:89:c4:99:db:cb:87:7c:61:05:50:fd:f9:06:
b2:fe:bd:ea:7a:fe:d5:5c:0b:ef:8e:06:24:98:f4:8a:7f:dc:
b6:7b:af:d0:67:0d:72:ab:7f:a2:9a:e3:f3:d6:d3:e0:46:dc:
ee:8d:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:24:18 2026 by rpki-client