
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json)
Hash identifier: 9SVBRkjj2V0GfAyMcc2rirZL7zXCe/zjTdozfjoT00c=
Subject key identifier: C5:80:10:D5:C0:E6:88:68:CB:6C:19:18:3A:52:A3:E0:E9:84:61:83
Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Certificate serial: 035B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
Manifest number: 0350
Signing time: Mon 27 Jul 2026 02:07:41 +0000
Manifest this update: Mon 27 Jul 2026 02:07:40 +0000
Manifest next update: Mon 03 Aug 2026 02:07:40 +0000
Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: mgd4ab27ZRAne1cFlHrztl5kQx3QiUAnbFys/cPyB+I=)
2: 05D86F1058D411F198F2A881A5833773.roa (hash: khtXuRN2/6rEPemqebTu2pFMVWjbyHDtvqkyXHj0hmY=)
3: E961050E58D311F18E39767BA5833773.roa (hash: SGyrZgoOyY3v7LefvD/KwjXbi3mtFgtFoBnUddJJDfk=)
4: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: xwuBUsXePKpvMYj/ZZ+LZ8VttYRBb2/xivwKeGbI3bE=)
5: EA83E6F458D311F18E39767BA5833773.roa (hash: 7aqLjxsVl/1/yFN4z+qOSpO/mBLZpSJYB4XFpd0ZCI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 859 (0x35b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Validity
Not Before: Jul 27 02:07:40 2026 GMT
Not After : Aug 3 02:07:40 2026 GMT
Subject: CN=6a66bd6d-16bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:2e:97:2e:b9:4f:42:ad:99:fd:c8:7a:ce:
2f:5a:fd:77:47:29:af:b8:5b:e2:46:84:93:19:26:
a3:ae:2d:7b:80:5b:b3:c8:bd:45:3f:62:e7:55:9b:
ec:bf:aa:6a:83:52:40:a0:ae:26:71:b3:db:4f:25:
3f:44:12:60:39:8d:53:6d:01:e1:d5:3c:9e:5d:d0:
24:9e:63:a4:df:0b:c7:5d:3e:86:68:be:6d:7c:f6:
b9:66:70:80:c7:44:d8:53:47:0a:bd:d3:2e:b8:f9:
5e:ce:9c:cb:a8:45:52:16:67:f6:85:d9:e9:c2:1a:
19:f5:bc:03:71:81:dc:df:11:23:bc:cb:a7:d3:c0:
5c:15:7f:51:31:99:c5:51:c2:30:d6:b7:d3:62:d2:
79:0f:e1:0c:10:31:b3:a0:84:c6:64:dd:c5:8b:12:
6b:b0:c4:b7:9e:a7:43:03:ae:6e:1a:e0:f0:8b:4c:
2d:a2:bc:1d:d5:64:8d:94:a0:10:25:6d:fc:44:ce:
07:19:16:5e:7f:ea:34:4c:34:df:56:e2:56:42:8c:
c6:2f:79:70:42:d7:c0:94:ab:2a:b9:cd:64:f0:ba:
3e:1f:ef:b1:88:02:d6:cb:f6:8c:04:97:d8:4e:f0:
66:51:73:f4:8b:41:8d:45:38:4b:a0:53:b5:d8:54:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:80:10:D5:C0:E6:88:68:CB:6C:19:18:3A:52:A3:E0:E9:84:61:83
X509v3 Authority Key Identifier:
keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:d8:6c:a1:8e:e2:f7:1f:9e:e4:ef:23:50:4a:0c:5d:2b:d8:
f1:38:8b:e9:b3:2a:00:24:85:77:77:7d:0e:95:74:55:95:3b:
94:92:d0:69:73:65:9d:17:77:20:8a:3c:8b:76:c5:79:2e:27:
c3:b3:a3:c0:1a:ed:e4:58:9b:79:0d:fb:d9:9f:d6:b4:a8:32:
de:e2:d5:3c:2b:35:af:b0:9c:ae:e3:9d:bf:ec:2d:6c:5b:6e:
16:65:ba:2c:a5:ac:e9:aa:e0:d2:83:d9:83:15:0b:e8:07:00:
d4:4f:63:61:12:1f:b6:1a:fe:10:23:fc:08:ee:3f:33:cf:fa:
24:13:44:f0:f8:28:75:03:ff:74:c6:ed:ec:70:65:fa:c1:2d:
b6:a3:85:20:57:f5:3d:35:1e:92:ac:ee:48:c3:af:41:1f:70:
04:6f:53:24:33:41:39:ce:c5:94:4c:18:d8:e8:68:c1:84:ac:
3f:83:33:fe:79:03:2a:61:bc:e7:86:84:4c:21:9c:be:85:90:
da:d1:ee:8b:72:5f:79:ed:51:0e:dd:75:4a:40:be:64:19:e9:
0e:f2:fe:72:3b:5e:4c:13:bb:e6:62:4f:c6:1f:51:74:cb:b9:
cc:ce:a3:4b:c7:18:af:91:2a:95:4d:26:04:9a:b0:de:b2:b3:
79:f5:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:33:21 2026 by rpki-client