
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json)
Hash identifier: U6fH843pElQHNgQOlomZYogwtSJfMjI8OmgPgnqjleg=
Subject key identifier: F5:0C:05:F8:F0:F5:89:13:7C:12:46:C2:A8:8F:8B:52:35:CE:AA:E0
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial: 0311
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
Manifest number: 02F2
Signing time: Mon 02 Mar 2026 02:27:22 +0000
Manifest this update: Mon 02 Mar 2026 02:27:21 +0000
Manifest next update: Mon 09 Mar 2026 02:27:21 +0000
Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: xurZ7F6umCFk+7O4G3yR40wsH+Ue9jtHbovzCWKl6Mg=)
2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: f4KBNNXhgPBc/BcF4pIlH+DixJQ6rFb8dk3R6Bh8OTk=)
3: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: eFA61QoqVBtok5MgSRR+bu+60yvLcHH5Sjs89fqo4HY=)
4: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: rVU3v5dcfBC8i6kV7fxqIowNeSl6idUBUr9G3jQ1fh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785 (0x311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Validity
Not Before: Mar 2 02:27:21 2026 GMT
Not After : Mar 9 02:27:21 2026 GMT
Subject: CN=69a4f58a-5794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:e1:d8:b9:2a:d6:50:73:28:73:34:75:8b:
30:5c:ed:76:fc:fe:97:2e:29:61:24:5d:fd:38:7a:
a0:65:08:42:f0:28:2f:58:a8:b3:35:8a:a5:a4:1b:
6d:09:a1:e8:14:d7:a9:f5:99:9e:22:0e:ae:3e:37:
30:84:f0:d6:c1:a4:d9:f3:a4:b9:e0:a9:28:11:14:
88:cd:e2:86:2a:43:4a:82:61:88:fa:eb:c8:55:67:
38:54:2f:b3:ad:04:49:30:7e:5d:17:d4:64:78:4e:
19:61:7a:d7:02:1b:79:ad:4e:60:5f:f0:3c:0a:d8:
b4:ec:32:db:0a:e7:63:70:6f:62:60:7f:39:d0:e3:
64:73:d5:5e:6d:84:90:e3:58:f1:e7:ba:bb:34:48:
85:bd:c8:3c:37:d3:fb:a2:9a:7f:99:9e:db:68:64:
86:36:10:cb:17:ab:8a:dc:01:be:a9:1d:5b:07:cb:
00:88:29:91:75:a6:66:d7:47:5f:23:2f:1f:16:75:
9c:f3:dc:dc:ec:6c:ff:42:a9:d6:dd:d6:a8:d0:04:
25:82:4b:1a:07:6f:bb:3b:f4:a5:35:64:09:e3:93:
57:58:96:83:f9:31:08:d4:59:4b:99:0e:16:24:72:
29:ac:dd:65:06:63:d9:1f:e8:34:df:92:05:f4:f9:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0C:05:F8:F0:F5:89:13:7C:12:46:C2:A8:8F:8B:52:35:CE:AA:E0
X509v3 Authority Key Identifier:
keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:7c:d0:b6:f6:06:6d:11:18:ed:02:3a:06:59:2e:e3:48:9c:
b4:24:a0:cd:4d:a4:56:97:c4:be:7d:39:41:4b:ae:bf:ec:ca:
40:8a:13:06:6f:4c:6c:82:bb:46:04:ce:81:d1:23:bc:13:77:
d3:c6:e0:f5:f8:33:34:38:47:0d:f4:86:48:31:d6:03:f1:0d:
6f:54:d8:f3:96:ff:ff:b4:84:9f:70:5f:b1:99:09:40:f3:28:
70:c3:f8:3d:13:0c:b0:43:57:1e:be:c3:7f:8a:4d:ab:48:f4:
90:5d:cf:6d:45:09:78:05:f0:df:69:32:1a:ae:a3:dc:c4:9e:
a1:7c:a3:73:e2:53:9c:65:34:8c:fc:e8:02:52:db:c3:c0:24:
b7:41:fc:e9:db:9d:63:3e:49:29:cf:95:2f:73:68:e5:4d:f0:
85:ce:20:0d:0b:8e:3d:d1:5a:c4:6a:96:61:11:cc:da:68:b4:
98:71:7f:f6:45:07:5d:49:68:f6:aa:4c:46:37:cd:07:d6:03:
fd:8a:37:ce:35:ea:bc:dc:7b:84:fc:17:03:da:7c:3c:ec:5a:
b2:88:42:c5:94:c1:ed:05:a6:60:57:97:99:19:60:86:3e:24:
eb:99:8b:c4:f2:b7:51:13:8d:9d:36:a4:90:31:db:cb:7a:54:
d4:75:0d:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz
Rjg2MDI5QTIwHhcNMjYwMzAyMDIyNzIxWhcNMjYwMzA5MDIyNzIxWjAYMRYwFAYD
VQQDEw02OWE0ZjU4YS01Nzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ULh2Lkq1lBzKHM0dYswXO12/P6XLilhJF39OHqgZQhC8CgvWKizNYqlpBtt
CaHoFNep9ZmeIg6uPjcwhPDWwaTZ86S54KkoERSIzeKGKkNKgmGI+uvIVWc4VC+z
rQRJMH5dF9RkeE4ZYXrXAht5rU5gX/A8Cti07DLbCudjcG9iYH850ONkc9VebYSQ
41jx57q7NEiFvcg8N9P7opp/mZ7baGSGNhDLF6uK3AG+qR1bB8sAiCmRdaZm10df
Iy8fFnWc89zc7Gz/QqnW3dao0AQlgksaB2+7O/SlNWQJ45NXWJaD+TEI1FlLmQ4W
JHIprN1lBmPZH+g035IF9PmAIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUMBfjw
9YkTfBJGwqiPi1I1zqrgMB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2
QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H
ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ3zQtvYGbREY7QI6Blku40ictCSgzU2kVpfEvn05QUuuv+zKQIoTBm9MbIK7
RgTOgdEjvBN308bg9fgzNDhHDfSGSDHWA/ENb1TY85b//7SEn3BfsZkJQPMocMP4
PRMMsENXHr7Df4pNq0j0kF3PbUUJeAXw32kyGq6j3MSeoXyjc+JTnGU0jPzoAlLb
w8Akt0H86dudYz5JKc+VL3No5U3whc4gDQuOPdFaxGqWYRHM2mi0mHF/9kUHXUlo
9qpMRjfNB9YD/Yo3zjXqvNx7hPwXA9p8POxasohCxZTB7QWmYFeXmRlghj4k65mL
xPK3URONnTakkDHby3pU1HUNgw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:15 2026 by rpki-client