
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
File: v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json)
Hash identifier: 1p7hW/oZemECEtkFa/yJ+Y/tsKpVX6GmBi2AbNCc58k=
Subject key identifier: B3:81:E0:32:15:1B:1D:FF:88:22:CC:3E:13:30:44:86:C7:2A:81:C9
Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2
Certificate issuer: /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
Manifest number: FC
Signing time: Mon 21 Sep 2026 06:13:48 +0000
Manifest this update: Mon 21 Sep 2026 06:13:47 +0000
Manifest next update: Mon 28 Sep 2026 06:13:47 +0000
Files and hashes: 1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: PfcEEuA6reCF1SDEOduQ3l/UKJF3+axby2GV/Sd3LrM=)
2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: Z9wsNscGW8jTuOrPcKnc3KiOXLu3fKLaOWy4uh1nNqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl
rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
Validity
Not Before: Sep 21 06:13:47 2026 GMT
Not After : Sep 28 06:13:47 2026 GMT
Subject: CN=6ab0cb1c-36dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:63:84:92:9e:a2:ed:52:5b:98:e3:1b:52:
20:ef:49:d4:6f:9e:25:5a:97:53:14:81:70:54:da:
9e:11:b3:86:c5:b4:b4:64:b9:2d:66:95:6a:2b:2b:
5e:c4:8b:75:c5:ea:d9:2d:d7:8e:fa:af:fe:2d:4a:
0c:60:6a:5a:eb:55:da:20:9f:b3:a5:9a:51:75:a2:
f7:81:73:84:14:f7:6f:37:a9:da:82:a3:8b:b7:87:
4c:1e:34:1b:ee:64:91:d2:a2:ee:e7:da:f6:ba:ed:
89:f2:47:e1:70:bf:e2:63:34:89:11:6b:9a:bb:06:
4b:38:c3:e5:c3:fa:3c:a0:4b:80:3e:66:86:2c:b0:
7a:60:94:37:c9:b3:40:e6:23:22:32:33:a6:c1:10:
cf:6a:4f:3f:67:3c:72:6e:a3:70:88:c6:4b:71:0b:
ee:9d:f4:6b:f0:0c:03:a6:51:e1:8f:a1:ec:28:3f:
50:9d:e7:46:e2:1f:7d:c7:be:ad:90:bc:79:a5:a0:
09:db:e4:c4:d6:84:e9:bf:b0:f7:8e:2b:00:f1:12:
37:f0:88:e9:f1:00:4d:5c:5b:46:06:1b:21:5a:a5:
26:a7:3e:f7:0d:f0:07:50:1a:58:ce:90:22:17:ff:
f9:2b:bc:18:1c:5c:09:c3:73:8f:72:1f:fe:f3:5e:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:81:E0:32:15:1B:1D:FF:88:22:CC:3E:13:30:44:86:C7:2A:81:C9
X509v3 Authority Key Identifier:
keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:f7:3d:8f:4c:dd:54:e5:2a:05:90:91:9a:02:29:88:10:8f:
e7:2d:47:51:cd:52:ff:5d:00:4b:f0:c4:4a:5c:f1:3e:cf:39:
1d:c8:db:57:5d:e4:bc:07:6e:0e:39:f3:9c:44:61:e5:a9:2f:
66:36:f8:2d:7f:29:bf:1b:28:c2:cb:81:fb:b0:fe:64:ac:2c:
75:5a:ef:16:2f:6f:68:4c:1c:0c:cd:48:7f:d9:c5:49:3b:e3:
92:a3:ca:d4:a9:ab:17:72:42:82:56:be:cb:1c:4e:16:45:a6:
96:d4:67:a3:42:fc:1a:6e:fe:50:66:fe:7f:35:9a:33:f1:8b:
10:6c:b5:aa:c9:81:76:43:40:21:a8:41:17:de:74:07:99:71:
19:7d:1d:6c:e4:50:5d:24:d9:57:e3:33:81:99:e0:87:53:69:
70:08:2e:b7:2a:e0:32:52:47:9a:38:66:2d:24:ef:23:13:f8:
38:92:a8:76:eb:a1:0c:d1:d1:c6:ae:b0:8b:17:a0:b6:91:46:
0e:ae:07:b2:aa:a9:5b:b3:c1:df:12:7c:9e:24:cb:0c:7f:cc:
2c:b0:2d:7c:16:6f:28:c9:95:fc:b3:7d:85:25:65:59:66:bc:
7f:dd:23:c9:da:d9:b1:38:a1:1e:5a:58:09:85:8c:48:31:63:
43:b4:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:50:54 2026 by rpki-client