
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File: 4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier: bFEjTC1AwKawPiRCyvAW8X1SwDOT4zWWIgsktcDItlw=
Subject key identifier: FA:91:E9:C5:6B:30:3F:5A:C5:F6:A1:FB:35:EA:A9:61:4A:F2:FA:23
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial: 1474
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number: 1330
Signing time: Mon 02 Mar 2026 13:14:17 +0000
Manifest this update: Mon 02 Mar 2026 13:14:17 +0000
Manifest next update: Mon 09 Mar 2026 13:14:17 +0000
Files and hashes: 1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: 7QtmoyyrRzRqmEQ386xUY+UyUkC68DZo65TN3CwNPIo=)
2: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 0Ug2MlowSOnP4Pb++tVsQunj0HFM39e7BgFne7s9Gxk=)
3: 0038D872072E11EB8914E540C4F9AE02.roa (hash: BfVI3TFyV6fOpgoDG6kN2cNefVnef49M3JRzF9OGVQ8=)
4: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: lO58lSpUoRJEo6C2ieXTdSjYTs9Vv0caugZb03Wynjg=)
5: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: ux2ARJ/bgr7if6KwYjchysUxhnA8D8TRZk6Lw4d52aw=)
6: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: Y0tv3S5qBpizFf7zS7O2Gepf7bo7jWIy8poU5vPkGKI=)
7: AD7B2798CDCA11F096B9035EC4F9AE02.roa (hash: 1rrUr85BF/sY2udLImZ0ePN2Kgi1s7SnmiZY7CqnRO0=)
8: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: 0nXqFu4Qi3Igds5cTks5iZ4dhntuRJvANiDD3hyPktU=)
9: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: jlJ7Tld2dLSNm+vxLU+DB4uapMo/I9nK2H7uiQod+hI=)
10: 6A5222E2B8CA11F0AEF0BA3CC4F9AE02.roa (hash: DErQ3o7TiaR6Xkm9YVkxrmIyVyHa9Hd4DAj359Ovfp8=)
11: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: 0JqXWVNYYl5QUi3Ff44dnxQVqYfsFqTw62wHqYfZBwc=)
12: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: WxVTSI5IqBCtDZMa9uJVKr0/nWjqcu853MnRjiV9FJM=)
13: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: 4ErdLc5I6Vjk6uLExe07aYdEJVnOiI+wzbQvVUiYi2A=)
14: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: 9gF1aAdFHEDmuDddG9VCS6z/7V4hA5cH16J97sGtqmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5236 (0x1474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Validity
Not Before: Mar 2 13:14:17 2026 GMT
Not After : Mar 9 13:14:17 2026 GMT
Subject: CN=69a58d29-37de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:e3:42:52:1a:c0:96:37:9e:44:81:88:62:
c7:58:91:89:26:33:91:95:ad:87:91:6c:ad:da:29:
67:30:57:5b:c6:c2:f3:ad:09:e8:98:f1:3a:b8:af:
3f:66:8e:63:b0:24:d7:61:30:38:d9:f1:d8:4c:cb:
91:b6:82:e4:0a:88:58:40:d2:af:8d:17:9b:13:46:
a1:76:55:75:05:9f:84:46:bb:ea:48:4d:55:70:40:
1c:13:9e:bf:b7:13:73:c3:8e:d7:60:dd:22:83:d6:
ce:21:db:ce:c1:69:1e:40:7f:98:a4:32:86:18:16:
9c:2c:50:99:1a:2e:22:70:e2:5b:60:72:62:e0:89:
9a:f6:f1:42:89:8f:e4:fb:1d:18:5b:42:51:9d:a3:
fe:0d:bc:d2:31:71:41:c5:84:30:2d:24:8d:91:97:
e5:bf:15:3d:d1:b6:01:80:7b:32:3b:76:44:26:f0:
17:df:e1:0f:4e:d8:5d:b2:40:3d:cf:40:22:81:e5:
be:08:75:b3:13:1a:5a:61:92:26:b1:18:4b:68:63:
a1:c0:17:ef:f6:26:c9:52:64:17:14:c3:aa:a2:18:
d6:ec:17:00:31:ac:76:90:a8:81:47:4f:4d:ab:5a:
15:67:05:0c:69:12:16:e1:9f:84:80:00:15:4a:b9:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:E9:C5:6B:30:3F:5A:C5:F6:A1:FB:35:EA:A9:61:4A:F2:FA:23
X509v3 Authority Key Identifier:
keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ca:c8:4b:c3:f6:d1:dc:0e:98:66:3a:92:0a:a5:f8:ce:d2:
ac:5d:47:82:f5:51:87:af:74:5f:8c:80:94:5d:be:d4:bf:76:
e4:b3:a9:58:f2:30:89:35:98:9b:24:e5:85:2b:ad:8f:39:ff:
48:ba:52:e2:40:03:cf:b3:b0:e7:0a:35:0f:b0:ef:c0:25:f6:
4a:2e:43:7a:14:49:98:00:df:a7:39:85:a2:41:b1:a3:58:cf:
6f:af:ba:dc:2a:a1:90:8f:76:61:bc:01:1a:7c:0e:c9:0e:3d:
f7:03:1e:77:bf:eb:24:b4:4d:55:dc:5e:13:94:d0:33:50:dc:
3f:0c:54:26:6d:72:ab:a0:54:6b:92:0a:78:00:b9:42:4c:2d:
4c:6a:ff:84:6a:e3:19:54:2e:f0:80:b8:1b:cd:5d:8e:6d:f5:
ee:ed:dc:51:b6:fd:42:36:3c:60:af:17:fc:54:34:64:f9:74:
fb:17:f6:86:d5:92:08:b8:59:dd:33:4a:89:8e:03:e6:bd:4e:
95:4b:71:f4:f7:fd:e6:60:4e:cc:a2:bc:c8:73:99:56:b8:43:
06:4b:84:3e:8b:51:dd:bd:73:91:c2:66:a9:f3:06:6e:05:da:
2e:c9:cc:71:50:7f:29:b4:f8:80:b8:bc:b2:fe:f5:ca:db:a2:
75:09:22:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:12 2026 by rpki-client