
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier: EG7NzlCp7O/7BzjkPSCIjorF/wD0A4aGyRT05sJg524=
Subject key identifier: 98:92:B8:6C:33:2C:AF:F6:0D:4A:5D:45:10:5D:FF:C8:B7:7E:07:7D
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number: 012A
Signing time: Fri 17 Apr 2026 05:19:31 +0000
Manifest this update: Fri 17 Apr 2026 05:19:31 +0000
Manifest next update: Fri 24 Apr 2026 05:19:31 +0000
Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: JXXo89kuhvJU0DdbpPlMypJio2Yo1WB4vfQhR+l0xBc=)
2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: y1LKkgDaRj1ISWViw1cpYZqZzU1kENkFG+OyOnuW6h8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Validity
Not Before: Apr 17 05:19:31 2026 GMT
Not After : Apr 24 05:19:31 2026 GMT
Subject: CN=69e1c2e3-c93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:f6:45:b9:8b:c3:e7:e7:35:e5:02:b2:69:
25:a0:fb:6d:ea:bc:46:eb:54:7e:b1:ac:09:ba:67:
c9:c5:52:77:ee:b2:c3:36:12:29:0d:ba:e3:47:88:
14:c3:9c:20:c7:0e:32:02:12:d5:f4:63:d5:bf:ba:
87:bc:b3:d0:0e:f7:d9:84:ac:a2:aa:74:c8:2f:42:
0c:5f:f0:20:ac:27:bb:78:50:7a:33:a7:7c:51:6a:
2a:90:64:a7:dc:82:71:03:84:32:33:1a:49:78:16:
e2:44:10:03:e6:a6:2d:7c:8f:ad:fb:47:00:2f:76:
e1:7f:73:fd:55:e4:6b:43:d2:bb:3b:17:c0:70:53:
3f:f4:13:24:0c:a0:33:1d:9a:77:37:cb:6d:0c:d3:
0d:69:a4:89:d1:86:29:38:76:b7:9e:5c:dc:c4:58:
33:27:31:c0:ed:e2:82:a3:5b:cf:8f:92:c5:33:86:
cc:5c:6f:cb:38:40:a7:03:ad:f6:41:db:55:8e:12:
04:ce:f3:9d:57:7e:19:a3:3f:5a:e0:33:b8:4b:08:
ec:a5:48:47:39:90:9f:01:77:d5:a8:fe:d5:17:6d:
d8:b7:55:5f:18:e3:60:a1:50:c6:88:94:a0:c8:b9:
57:ec:5b:02:e9:f6:20:9a:2a:4f:18:b0:e2:ea:84:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:92:B8:6C:33:2C:AF:F6:0D:4A:5D:45:10:5D:FF:C8:B7:7E:07:7D
X509v3 Authority Key Identifier:
keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:92:dc:09:8d:88:3f:b1:af:98:02:6d:34:ea:b3:7f:56:f9:
1e:4c:ce:98:4e:6f:4f:2f:c6:c1:16:c9:8e:0d:c6:bf:4f:09:
f8:27:56:fc:7d:65:47:03:87:6c:18:ac:60:ee:69:22:64:58:
55:65:1b:3b:fa:e5:3e:62:83:e6:ab:99:65:e2:26:39:63:36:
36:d3:33:57:3b:c8:13:32:f3:e8:23:da:d8:e8:44:88:84:c5:
ce:9c:cb:3d:df:be:93:1d:34:28:8d:e1:05:88:d4:cd:d0:9b:
e6:51:6e:8e:11:9c:e1:60:6d:d6:bb:34:6a:4e:9b:d1:5f:a7:
68:d3:11:77:06:f0:1b:fb:9a:55:b3:9c:4c:90:f0:04:3b:f8:
a2:11:3d:82:9c:7b:36:36:ea:86:96:d2:09:79:3c:5b:b3:9c:
77:65:63:12:56:80:a4:0a:4b:80:86:17:f9:60:f2:b3:b4:76:
2e:8b:54:7e:04:fa:50:98:6b:43:7a:b0:10:53:62:57:ef:88:
ff:41:16:c5:71:65:ce:c3:45:47:7e:02:a7:d3:2d:a8:d7:44:
92:a6:7a:48:19:1d:39:4d:90:2d:f6:e9:08:f4:64:8b:e0:90:
1c:80:ce:51:4b:9b:c9:fe:70:a3:d3:3e:5e:95:fc:ec:7c:86:
ab:7a:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:48 2026 by rpki-client