
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json)
Hash identifier: rvhWydn/ZUw+DWtgCv7uuhu5jcddhKxID6serUZiTTI=
Subject key identifier: D7:2F:5B:85:5E:04:3C:C8:87:49:62:7F:DE:2F:18:75:E6:F2:18:27
Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
Manifest number: 0220
Signing time: Sat 13 Jun 2026 02:48:13 +0000
Manifest this update: Sat 13 Jun 2026 02:48:12 +0000
Manifest next update: Sat 20 Jun 2026 02:48:12 +0000
Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: UEZB0HfjuVUJtPqxWID2deEPA+RvwaN5ATfcGa83zoM=)
2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: CnQdXrVdbfHUOklxI7z70j5KZwSvtEik5podERJ5fAs=)
3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: 4+MCHLMN337B5RTZTokxnplPrkpGKjeWgwbYWmw0fsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Validity
Not Before: Jun 13 02:48:12 2026 GMT
Not After : Jun 20 02:48:12 2026 GMT
Subject: CN=6a2cc4ed-e597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:5f:55:8a:01:9d:b7:03:bf:e1:39:bc:96:
58:3e:ac:4f:8a:31:07:3f:e7:c7:92:1c:40:ab:24:
9f:4f:6c:aa:a5:42:c0:70:d6:c3:68:fe:b2:d7:16:
98:6a:52:cc:6b:8b:31:c8:50:9b:68:bd:02:3e:8a:
9d:00:5d:6c:36:72:6f:83:f8:d0:06:67:0d:a7:e0:
9d:a2:04:69:8e:a0:2b:aa:a5:75:ae:49:e6:b7:cd:
73:00:9d:ea:34:d8:75:d4:4a:5a:53:55:68:e2:37:
2d:25:05:5a:0f:1d:74:b6:f6:0e:b7:d6:03:6b:b7:
69:f1:aa:08:9b:08:83:8a:f1:d3:9e:13:9a:14:b9:
f4:0b:48:70:65:dc:98:fa:fc:36:64:04:3d:c1:1d:
3c:e5:e0:9a:47:0a:28:cb:2e:83:0d:d4:a2:e4:ed:
66:1d:ac:b2:d1:44:ef:36:be:3f:a3:70:16:43:bb:
cb:a6:0f:e3:0f:70:87:25:84:bc:0b:4e:44:57:80:
40:75:a8:7c:45:2e:11:a2:8e:5d:a3:29:90:07:f1:
9e:7d:37:28:28:86:31:09:44:61:99:c0:bb:b4:3c:
58:6f:a0:28:ba:6a:2d:33:c8:35:76:fb:c7:11:83:
73:20:57:9f:91:a5:5d:ed:e6:5d:a0:73:99:c0:0f:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2F:5B:85:5E:04:3C:C8:87:49:62:7F:DE:2F:18:75:E6:F2:18:27
X509v3 Authority Key Identifier:
keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:97:dd:21:a0:99:83:7f:45:a2:32:70:20:82:48:ad:51:4b:
eb:d5:e8:1d:52:f0:49:91:be:95:a2:e5:57:55:ba:a0:81:70:
8c:c8:3f:6e:08:de:af:2e:5e:84:e7:ac:c5:f8:07:97:6d:8c:
86:0d:8d:23:b5:d6:b7:5a:5d:dc:df:f2:52:fc:3d:0e:4e:03:
35:3f:de:2a:10:9a:f6:4c:fe:2c:77:6c:13:d5:e0:9d:69:d2:
e1:1b:8f:0c:d4:cd:1a:ec:f8:fe:87:24:ab:5c:47:ed:a3:c0:
1c:b8:e9:ff:8b:af:72:67:73:48:26:23:d2:05:0a:5a:23:05:
15:bd:5d:3f:ba:7a:82:2d:ed:43:0a:8d:e6:e6:0c:8f:59:a1:
15:c5:eb:ae:0c:1d:59:f6:35:69:41:76:51:3f:ad:39:01:2e:
0c:b2:a1:5c:28:bf:76:3d:e7:8e:b8:b5:8a:70:40:0c:38:a1:
30:e7:c7:ea:48:bb:ee:d2:df:ba:54:da:2b:7c:54:a8:fc:78:
d9:79:00:c2:78:d6:c0:97:49:bc:9c:3c:90:00:2a:e2:e9:0b:
03:54:ad:b2:42:77:e6:9e:c7:e3:22:6e:82:68:6a:f0:32:af:
fd:7b:00:89:78:d9:6e:cf:5b:63:b9:43:6b:37:42:22:05:7f:
5d:ce:4d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:46 2026 by rpki-client