
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json)
Hash identifier: 3FZYqaXKUvqMZ1tqjJjDc7P9jFiT0ZoA0sxVig7wVDI=
Subject key identifier: 46:07:ED:A0:74:ED:44:3E:9E:CC:58:B9:1C:A0:76:CA:CB:E6:B0:12
Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
Manifest number: E9
Signing time: Sun 01 Mar 2026 07:32:38 +0000
Manifest this update: Sun 01 Mar 2026 07:32:38 +0000
Manifest next update: Sun 08 Mar 2026 07:32:38 +0000
Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: AzIuX7z2/xWyBgzMppVG87uH7iMZeQMQcv8htKMsGPo=)
2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: ifxT97kQev+52ME20DTb7eJQD9D/B9KLVgjdG2wnFaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Validity
Not Before: Mar 1 07:32:38 2026 GMT
Not After : Mar 8 07:32:38 2026 GMT
Subject: CN=69a3eb96-56f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:54:6a:90:9e:8b:c9:34:24:a0:05:98:07:
7b:d4:f8:3f:51:24:6d:d1:4f:ad:11:4c:4b:71:c1:
fb:50:c5:7a:19:f4:f1:c7:87:82:7c:d0:47:7f:54:
87:a8:5a:b9:2f:c1:cc:bc:4d:84:8b:ad:32:2b:32:
5a:38:61:94:7a:aa:36:ba:4c:d1:64:0d:29:d7:6f:
77:dd:99:43:0f:e1:e6:26:9e:84:17:eb:83:50:1e:
4c:2e:37:fa:8c:65:93:9e:b7:dc:3f:8e:87:4d:54:
70:19:68:63:6a:4c:44:ba:0c:6f:20:4d:2c:c1:46:
9d:82:c8:50:f7:7a:49:2c:e6:69:d8:03:a8:44:23:
8d:38:d6:21:c0:4d:c5:3a:c1:d8:18:bd:68:a9:5a:
af:d0:87:c6:89:fb:c2:c4:2d:f3:49:b2:97:f6:46:
d4:8d:8b:27:af:32:8a:f7:41:d5:88:42:de:f4:23:
66:59:cc:5a:95:49:04:82:e8:f7:6e:db:cc:12:31:
24:88:ab:39:32:35:43:a5:5a:ea:20:2c:19:7e:ab:
6a:ca:db:60:e0:f5:ba:f7:e3:06:37:ff:07:45:07:
95:6f:0b:0d:f3:a0:55:3f:66:a6:12:34:de:1a:0e:
c6:f1:24:f3:14:76:18:51:38:c7:c8:20:ad:10:9c:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:ED:A0:74:ED:44:3E:9E:CC:58:B9:1C:A0:76:CA:CB:E6:B0:12
X509v3 Authority Key Identifier:
keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b8:57:0b:8a:75:de:bc:e5:b3:27:c8:68:f4:c8:ff:69:0a:
ec:42:e1:66:c2:06:f0:2d:27:cb:79:57:7e:3d:cc:ad:ea:7e:
f1:0a:77:db:07:0d:6a:d5:c2:ee:87:4d:ab:55:bf:69:28:a2:
3f:6e:3b:5d:0c:f1:d6:9d:30:6d:e7:8f:02:29:6b:c3:d6:92:
43:72:1a:58:7e:5e:55:4e:fd:4f:0a:5f:cf:c7:c6:48:9e:45:
f2:0e:34:d4:f9:5e:fc:cf:de:e6:15:50:aa:55:1e:d0:51:b8:
dd:0d:4b:b5:1a:92:36:01:93:b6:84:22:97:72:96:dc:b7:5d:
50:c0:1e:69:8b:43:f7:f4:cb:46:ef:16:a8:e6:8e:9e:c0:fc:
45:91:4a:14:d4:22:4a:09:a5:47:70:e2:83:6a:e0:d1:a9:b3:
41:7e:15:37:65:17:3f:1a:f2:24:03:95:e7:ec:71:78:85:1d:
25:8b:cb:fb:8c:d9:aa:2c:99:ec:b7:b3:f7:76:97:71:b3:e0:
9a:2b:8d:6f:4e:92:27:af:a2:6d:dc:57:24:c5:47:51:04:2c:
18:3c:ea:58:1a:9a:42:98:9c:47:81:a5:87:59:08:54:91:e5:
95:7c:22:37:98:db:56:43:9c:38:f4:c5:8f:49:9c:93:bb:0c:
a9:22:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:59 2026 by rpki-client