
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
File: 4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json)
Hash identifier: 7o2sXwxoqdawsGNl8tZDKxL5AiLnNOswhvePAADl65I=
Subject key identifier: A5:CF:27:D4:1E:98:12:AA:DE:CC:4D:01:63:DC:8F:C7:87:72:1C:AE
Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
Manifest number: F9
Signing time: Mon 21 Sep 2026 06:13:51 +0000
Manifest this update: Mon 21 Sep 2026 06:13:50 +0000
Manifest next update: Mon 28 Sep 2026 06:13:50 +0000
Files and hashes: 1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: 4I4ZZN9w2wXH9Y/wK7Sc7Ve9DimDg3okF4j5myvrwkM=)
2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: j7nDmBZXblO/tpvpaih+MGRhVNByB2VTssko4z3YvKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Validity
Not Before: Sep 21 06:13:50 2026 GMT
Not After : Sep 28 06:13:50 2026 GMT
Subject: CN=6ab0cb1f-ceff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:eb:92:ba:36:f0:38:8c:f3:47:73:03:d6:ad:
c6:04:99:0a:36:1d:5d:12:38:25:a7:77:3c:fa:28:
ff:30:00:5a:43:2c:02:55:95:8e:c3:b6:03:81:54:
23:68:39:7f:74:fc:08:a7:23:79:13:bd:07:a0:b4:
63:b3:e8:62:0a:7a:58:8c:11:03:8b:b2:63:9c:21:
ed:e6:88:9f:78:b6:5c:07:41:df:2f:50:53:9f:63:
e5:d1:6a:9b:0f:8e:86:a7:e8:3e:96:42:ef:e4:47:
ab:ac:da:b8:00:71:be:1c:34:1f:d1:5f:0f:cc:36:
33:51:ab:8a:f1:89:cc:19:b0:f0:d9:33:a3:70:84:
fa:cf:6c:08:f6:e7:bc:0b:ff:03:e4:bd:c6:6f:0b:
72:fa:38:e5:58:7e:33:84:0d:dc:ef:3f:4f:26:ff:
18:e3:40:3e:cb:11:5c:71:d7:aa:73:89:88:cd:62:
ca:59:49:6e:cc:b9:7f:16:a9:c2:c1:c0:53:df:ef:
9d:74:b0:9a:c9:58:b4:d4:7d:7a:c6:2d:c3:0a:72:
20:12:e9:38:11:21:0e:09:84:97:74:87:2e:8b:f1:
ca:a8:e8:9a:60:21:ee:9b:83:8a:f4:c3:8a:e5:ea:
47:0b:2e:cf:9a:27:55:f3:9c:14:93:e9:ee:d4:5d:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CF:27:D4:1E:98:12:AA:DE:CC:4D:01:63:DC:8F:C7:87:72:1C:AE
X509v3 Authority Key Identifier:
keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:ca:f3:81:1c:51:c1:8e:6c:a8:5e:11:04:d4:cd:d9:c2:38:
b9:02:74:42:b0:c6:76:87:3a:48:fe:1c:96:38:b7:2c:32:fa:
af:fc:03:03:65:7d:12:f5:18:16:8c:5f:7d:07:6c:85:66:22:
9d:b0:e9:6e:79:9d:13:d1:35:41:1d:7d:e6:47:05:38:81:2b:
15:4a:a0:83:a2:ca:96:87:4a:9e:28:16:3f:98:50:35:a3:8e:
56:fd:c4:5f:7d:e3:30:79:d0:38:fe:8b:31:5f:2d:2c:d0:f0:
d4:ea:fd:9c:26:ad:6c:35:5c:2e:1e:63:db:2f:e4:3c:09:e2:
d1:10:f3:3e:47:66:07:d1:9b:c1:fd:51:5d:d0:4e:cb:e6:63:
ac:4a:4b:95:33:ae:1c:4d:bb:5a:2c:ee:9f:dc:d1:e5:30:a6:
57:07:22:7a:0b:46:21:d4:67:c3:b9:c8:be:67:06:dc:d2:4a:
4d:ea:5b:a1:34:87:37:22:dc:fb:d3:0d:78:ba:25:fb:31:6d:
b8:1e:3d:90:9a:43:a1:24:a1:2b:77:e1:13:ec:02:6d:d7:0c:
a3:a9:8b:08:52:de:7c:cb:25:b1:4a:79:ff:c3:54:72:f7:76:
d1:97:9a:67:29:dd:a1:d0:54:d7:8e:e2:5c:96:c0:4a:21:db:
54:04:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:58:41 2026 by rpki-client