
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
File: 4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json)
Hash identifier: w6VuZOPyECtuLP9K66Q4q9M25GODEeU/oC+BYFBttco=
Subject key identifier: 09:56:97:56:A0:84:81:72:7F:B9:81:8D:79:0B:05:1C:49:E2:B4:97
Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
Manifest number: AA
Signing time: Fri 17 Apr 2026 06:53:56 +0000
Manifest this update: Fri 17 Apr 2026 06:53:55 +0000
Manifest next update: Fri 24 Apr 2026 06:53:55 +0000
Files and hashes: 1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: GqZDXfoABQczVH2mNVtcV602/o2vcAVZYlg0YgbIwgs=)
2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: j7nDmBZXblO/tpvpaih+MGRhVNByB2VTssko4z3YvKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Validity
Not Before: Apr 17 06:53:55 2026 GMT
Not After : Apr 24 06:53:55 2026 GMT
Subject: CN=69e1d903-9cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:1c:69:41:16:16:16:64:56:71:c8:5b:0c:
a5:85:d8:ea:41:3e:e1:6c:5a:4d:59:80:d8:2f:37:
b3:e0:67:c9:a5:cd:a6:0b:20:db:37:e5:89:33:1b:
31:30:6c:73:67:92:cd:68:90:4d:fa:3a:27:47:b1:
11:19:d2:74:3e:81:0c:7c:f4:71:52:58:37:35:df:
95:6a:e3:e8:f0:96:eb:e3:63:90:94:41:1c:dc:cf:
55:fd:cb:df:29:43:ad:98:76:02:57:10:df:31:75:
0a:73:f0:b8:19:0d:dd:12:23:6c:66:1c:c2:49:53:
19:eb:1b:61:7f:13:66:20:fb:f8:17:6d:e5:54:c8:
f1:b7:fd:a3:7e:ab:d4:89:21:74:5e:bd:1d:0c:48:
b8:93:1e:01:f7:ba:6d:04:d5:d4:d8:bf:d8:21:32:
4d:b3:34:2c:85:66:6f:53:b0:65:80:1c:f0:ec:4d:
ab:c1:f8:2d:78:96:c0:e1:78:10:b5:6b:06:56:32:
62:8a:02:27:0d:37:ac:4b:b1:68:2c:9f:b8:69:61:
2f:fb:6f:a9:29:16:80:7a:da:c6:8d:ba:9e:5b:81:
fa:ab:f7:2f:72:a0:fe:08:eb:b4:44:e7:8a:2f:4d:
cb:71:29:e4:78:37:b4:23:ea:e5:52:b7:2d:bc:d0:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:97:56:A0:84:81:72:7F:B9:81:8D:79:0B:05:1C:49:E2:B4:97
X509v3 Authority Key Identifier:
keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c5:8d:0d:fa:1c:8a:9a:57:9c:9d:21:18:0e:33:5c:14:68:
2e:6e:52:26:ce:73:cb:b2:8e:eb:4a:0e:fb:ad:f2:a7:94:fb:
94:e6:22:be:47:f4:6b:0b:de:e4:09:ec:a3:16:ea:7b:f0:3a:
dd:c1:3d:39:06:47:8d:6f:19:2d:34:af:ea:04:63:97:1d:b0:
a2:2d:e7:87:00:1c:fb:91:83:f2:47:48:84:d7:bb:9e:57:17:
62:d5:f7:f7:7d:3b:7b:65:85:a0:73:a9:62:7a:21:6c:b9:19:
6d:3b:b2:2d:91:0f:db:8d:b1:56:21:94:f8:bc:6e:60:d5:0c:
9a:50:d4:50:81:c6:b9:13:2c:4d:da:5c:52:4a:8b:2e:88:29:
b5:5a:55:be:93:8c:17:7d:a5:a0:8e:ce:15:fc:28:a6:c6:53:
7b:a5:52:66:1c:5e:dd:2c:c2:0c:1e:ee:16:d9:39:42:b0:74:
dc:d8:8f:44:bf:55:98:55:5c:57:41:31:05:b0:7e:de:5c:0d:
fa:e6:76:16:5f:fe:38:98:b2:1a:f5:a0:8e:1e:85:dd:6e:fb:
72:31:1b:68:c9:a3:8f:18:a8:03:9c:ec:1e:f4:b1:09:89:9d:
ac:91:09:96:f4:22:64:49:f1:3a:8c:a1:de:7c:3b:4e:7d:20:
a3:b7:c6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:51 2026 by rpki-client