
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier: zSf0pYywvScRpGFHTaIzLqH1nmNjN7dTmQl5ik49/kE=
Subject key identifier: 34:7F:E1:92:1D:D8:CF:7F:AE:42:DA:7D:01:DB:E4:8C:E8:24:A8:F8
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number: 017B
Signing time: Mon 21 Sep 2026 04:43:04 +0000
Manifest this update: Mon 21 Sep 2026 04:43:04 +0000
Manifest next update: Mon 28 Sep 2026 04:43:04 +0000
Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: 6LvJaF0+O20Si5VVZ6YB3incFHE3z+D0afhA9zhwzzk=)
2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: oemFiSu7xvtYlYRUpCkXZaggbkGyG52ArxoSenXNp0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Validity
Not Before: Sep 21 04:43:04 2026 GMT
Not After : Sep 28 04:43:04 2026 GMT
Subject: CN=6ab0b5d8-a5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:1d:7d:d4:d4:54:e8:85:7e:04:29:0e:c9:
83:5b:f4:9f:4f:64:c7:2f:d4:35:87:45:b4:74:8c:
bd:b8:1b:8f:e8:8a:6f:e6:d2:d8:6d:f2:ca:d7:52:
19:ba:fb:39:e2:a5:4d:f8:80:cf:04:6f:1a:f2:c3:
3e:32:c7:62:fb:d3:28:1c:ff:8b:db:c0:a5:d2:1b:
c6:c8:f3:6a:54:95:f9:f6:c4:47:37:7e:10:6c:7c:
e5:a2:c8:c2:0c:2b:db:45:e1:41:cf:4b:35:df:ca:
ab:1f:77:fe:e4:97:2f:f7:30:68:83:21:5e:cd:01:
37:b9:a7:93:e4:de:55:e3:ef:7c:d6:67:19:b4:15:
97:33:22:0b:fb:13:9b:27:fc:ac:de:fb:b0:7b:57:
f6:a4:4a:55:a8:dd:3d:a0:ae:4c:93:ab:a5:33:e2:
23:69:d8:5a:9e:bf:ff:85:6a:e1:71:88:61:b9:59:
cd:24:73:0d:e8:49:f0:d9:62:b2:15:56:7a:06:04:
c3:88:6a:6a:29:fb:ef:93:41:34:f7:26:f0:73:a4:
f0:4f:4e:2b:85:f3:60:82:a9:a1:c1:eb:ce:02:6a:
d1:c2:d8:e6:33:80:b3:b4:be:2d:b6:8a:ed:eb:23:
27:58:48:93:c7:17:01:e8:df:12:af:92:43:88:b1:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7F:E1:92:1D:D8:CF:7F:AE:42:DA:7D:01:DB:E4:8C:E8:24:A8:F8
X509v3 Authority Key Identifier:
keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:52:15:fa:8d:53:af:b2:87:7f:8c:5f:d4:7e:ba:a0:57:c4:
28:21:1a:ab:f3:1c:bb:e6:03:4c:08:54:a9:bf:b1:c4:8d:f8:
6f:d8:e2:7e:d9:6e:1a:d0:95:fb:90:5a:c5:16:92:a8:83:fb:
50:c0:a2:54:eb:7a:ef:4b:77:47:be:cd:0f:75:cb:4a:2e:72:
9d:29:db:c8:ed:e2:c3:96:c3:e8:33:db:5a:ce:26:25:22:e9:
52:41:e4:c2:e3:74:1a:95:4a:d2:66:fb:73:ce:e4:f4:85:4c:
60:57:83:6e:d6:0d:e3:bb:bf:dd:87:13:1f:e9:dc:ad:e7:f1:
ab:eb:30:5c:96:fb:d7:8c:2b:c5:14:5b:84:11:1b:9c:e2:13:
4e:91:7a:18:bd:dc:54:38:d3:87:9f:a0:58:06:18:47:fd:8e:
f5:24:eb:51:f5:a6:b5:59:d3:90:a4:d5:bf:87:21:1c:08:86:
5e:58:d1:6f:63:5c:89:75:33:ea:d3:7c:21:bc:b3:b2:8a:a2:
38:be:a1:18:39:7c:f0:a9:9b:28:0d:25:d4:43:2e:d0:20:4f:
78:f1:c7:7e:28:63:1a:f9:b8:23:39:7f:1c:36:91:9b:26:02:
61:4d:27:9e:2b:58:1c:52:f8:ad:91:aa:87:c7:97:f8:0b:40:
89:0f:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:20:33 2026 by rpki-client