
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json)
Hash identifier: /fyXptKS7iozyEa8Xq/tpOB6sS9H6Ir4XgwhUZnxbMY=
Subject key identifier: 24:87:31:93:38:F0:1D:C7:17:9F:62:3C:8B:9D:FC:13:A9:42:73:89
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial: 0342
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
Manifest number: 030B
Signing time: Fri 17 Apr 2026 01:07:59 +0000
Manifest this update: Fri 17 Apr 2026 01:07:59 +0000
Manifest next update: Fri 24 Apr 2026 01:07:59 +0000
Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: MXuJw/ywid2oXzaPxkKaZwb24/wqMeaO4rL7bvMB5RY=)
2: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: qxr1xAZVPVy5IH5flTFbZouBg69ZSR0F1Rre519E1ps=)
3: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: pXbpkuqiutX+PAfcE6/HkNxLhVyYjefCmA1YJyvlDKU=)
4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: AInTRm364fWSsEgGDzFSbiLVDp6l9PBB3u+vGg6CfFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Validity
Not Before: Apr 17 01:07:59 2026 GMT
Not After : Apr 24 01:07:59 2026 GMT
Subject: CN=69e187ef-ccf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:86:e0:d7:e6:45:28:dc:b0:ec:59:05:43:
54:76:95:70:bb:5a:56:49:a0:81:6f:38:49:7e:02:
6a:eb:5e:2e:6a:1d:8f:71:90:aa:04:20:57:0c:ac:
b2:09:a4:cd:69:11:51:e7:4d:66:4c:78:81:dc:9c:
5f:55:7a:4b:9a:29:49:56:10:7d:5f:a9:69:e0:1c:
46:ad:ef:e6:b9:5f:41:5c:15:39:47:a8:39:ec:43:
84:48:85:7b:ed:a0:56:eb:c6:36:83:b6:a1:8d:0b:
6c:aa:61:33:f0:43:63:5f:5c:86:a4:b3:71:94:20:
b6:b9:22:50:84:d7:e3:72:f0:71:08:1a:3d:fe:a4:
06:7b:f5:e6:09:00:12:03:29:78:54:7d:f7:8c:86:
5b:ca:90:8f:43:be:0f:9a:48:7c:9c:8e:4f:03:15:
3d:5e:c8:cf:77:28:7c:60:89:ed:cd:9c:e7:ce:39:
6d:b8:1a:d0:06:8e:a7:36:37:20:bf:b2:81:05:d6:
e6:16:2b:4b:0b:08:42:d7:eb:81:1b:5c:ad:e5:fc:
7b:23:a7:b3:70:ea:a1:43:45:f1:a1:65:bd:20:96:
53:bb:8a:71:8a:2e:99:53:86:65:08:b3:d3:cb:f9:
bf:d7:fc:b6:ba:6a:85:71:d9:b0:89:50:00:ad:5b:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:87:31:93:38:F0:1D:C7:17:9F:62:3C:8B:9D:FC:13:A9:42:73:89
X509v3 Authority Key Identifier:
keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:9d:e9:05:bd:74:b2:15:d4:4e:fb:3b:ab:cf:58:f8:3c:cb:
83:a7:ca:c9:8a:a1:87:54:93:60:e6:85:47:c8:73:2a:5d:85:
27:5a:51:8f:72:dc:5f:05:e4:59:ec:5d:09:08:e9:d2:27:d9:
92:0a:6d:ed:d8:86:53:24:a1:0c:c6:a9:d4:36:84:8b:dc:06:
b1:08:f9:50:c3:ac:40:2b:d3:57:a2:cc:92:cf:3a:22:30:e5:
f6:71:14:84:01:85:44:0e:38:b2:a7:4e:1f:59:0c:c0:c5:75:
99:79:a1:9d:a6:89:ec:84:c6:1c:c6:16:47:9f:2b:76:9e:ca:
df:64:79:bd:1f:15:56:b4:9b:7b:83:cf:78:65:44:79:17:d1:
3b:93:61:5a:9d:81:66:62:56:7f:78:d1:04:15:02:10:2b:21:
db:94:60:f2:a4:bc:c1:70:4e:5c:5a:ea:70:d7:9d:bd:2d:3a:
a3:52:51:b6:a5:3e:a7:b4:e0:3d:33:56:a6:a2:9f:5b:2c:0d:
13:d5:b9:69:0e:e2:0d:89:98:bb:e5:ab:23:47:93:25:df:f0:
f7:60:70:14:1a:bf:33:97:70:57:67:79:fb:39:04:d8:4c:17:
bd:31:4f:69:a2:e4:3e:8f:c0:a7:b8:76:1e:1d:11:7a:9f:86:
b6:71:cf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:45 2026 by rpki-client