
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier: LPmbeBddQSTBO4t2tVWp02lJTtNtuafOHZ2N4kALB9Q=
Subject key identifier: 34:F2:DB:40:11:00:7F:0D:F4:BC:AB:58:5C:EA:56:A2:F2:28:0B:36
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number: 0110
Signing time: Sun 01 Mar 2026 06:59:31 +0000
Manifest this update: Sun 01 Mar 2026 06:59:30 +0000
Manifest next update: Sun 08 Mar 2026 06:59:30 +0000
Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: POC/oCu4KdPbkX41gnT2CMrYE4LJf5R+er1X6AdOBCo=)
2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: e8wZoAxd5aA3CtPGlNCm2H8RgaO0sg67bbRxbVIcezE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Validity
Not Before: Mar 1 06:59:30 2026 GMT
Not After : Mar 8 06:59:30 2026 GMT
Subject: CN=69a3e3d3-3dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:4b:d0:2c:95:85:73:45:53:54:f1:1d:71:
34:ea:48:cc:a8:c0:63:5a:dc:ea:43:06:55:eb:67:
7e:a2:73:1c:fd:e7:7a:17:3d:0d:20:37:00:16:7a:
56:03:45:a8:5c:12:33:33:32:4e:1a:57:bd:90:89:
ea:c5:6b:8f:bb:12:ce:cf:aa:c7:4a:c8:57:3e:47:
e8:1c:90:1c:33:d5:7f:9d:13:62:a3:00:5a:0c:b9:
cf:45:3b:4e:32:be:64:ec:27:5d:9a:34:25:29:8a:
8c:d6:e6:85:b7:c2:a6:d9:5a:32:5d:bd:47:e6:45:
eb:09:ee:d2:d3:db:67:f2:61:0b:a0:75:42:52:3c:
9e:b4:54:3d:6f:83:bb:f7:c3:95:34:19:d9:21:20:
23:7c:f5:77:68:14:46:23:e4:42:94:80:4c:ab:2e:
30:82:b9:af:83:1c:f5:95:6e:25:f9:b6:08:83:72:
dd:45:60:4a:79:ed:4e:c4:d4:5a:78:38:38:24:2d:
10:1d:4e:4f:d3:3f:51:52:14:84:4c:a4:19:20:25:
4b:51:48:75:55:58:b0:80:f2:9c:6c:be:71:a6:cc:
ce:19:db:ab:4f:1a:03:c2:1b:d0:65:bc:1a:81:81:
ce:36:fb:19:1d:89:0c:0a:5d:7d:f7:f2:2b:70:b7:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:DB:40:11:00:7F:0D:F4:BC:AB:58:5C:EA:56:A2:F2:28:0B:36
X509v3 Authority Key Identifier:
keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9b:f7:c2:a9:87:fa:f6:a3:92:ef:bd:f3:ab:6d:91:1c:bb:
60:d4:ca:3b:ca:fb:a7:d6:1f:fd:36:05:35:7b:4f:92:a2:41:
6c:fb:43:3f:09:0b:7b:47:9f:f7:a0:82:dd:3d:79:bf:bf:83:
bb:dd:a9:63:80:0d:c0:90:72:7f:6e:90:18:cd:33:d7:9d:09:
34:7f:aa:b3:a9:24:18:e3:8e:cd:44:c5:16:15:4a:54:71:83:
34:98:b9:83:d4:c5:7b:ff:f7:dd:39:5e:1d:f2:af:51:29:d5:
be:02:56:d3:d2:a5:fa:74:f7:9d:20:d0:01:d6:50:8b:57:76:
58:70:c8:cc:55:d9:b0:96:20:b4:12:de:ad:bc:e1:d2:11:14:
ae:31:86:b8:26:b7:14:22:e3:4d:92:c6:70:80:68:52:de:5a:
e0:81:e1:d5:a8:33:d1:34:6c:66:be:b7:c8:2c:d7:22:d9:4a:
fb:21:26:41:4a:12:78:1a:53:40:52:87:74:16:8c:ed:e7:4d:
55:f8:9b:3c:39:2d:e4:16:d0:b7:ad:92:cc:8b:2e:4d:5d:2f:
24:ff:9a:60:f9:a3:6a:d4:af:14:59:82:c1:cf:17:d7:19:34:
8f:3f:d7:79:21:5c:07:0d:1a:b5:36:b8:7f:b1:5f:97:68:77:
ca:63:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:24 2026 by rpki-client