
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json)
Hash identifier: 9tHCO5YFn1NUoGCTwdzh8OoJXzDFyQghViiQX+r0ZQQ=
Subject key identifier: 05:C2:19:FA:8E:62:A5:0E:31:48:2B:52:A4:D8:DB:6F:BB:E9:E5:AC
Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Certificate serial: 0377
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
Manifest number: 036C
Signing time: Sat 19 Sep 2026 00:44:44 +0000
Manifest this update: Sat 19 Sep 2026 00:44:43 +0000
Manifest next update: Sat 26 Sep 2026 00:44:43 +0000
Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: jNOaMB3SeIt7NWem4xcnrvFs1EGga7+fejCKMHGQb/w=)
2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: xwuBUsXePKpvMYj/ZZ+LZ8VttYRBb2/xivwKeGbI3bE=)
3: 05D86F1058D411F198F2A881A5833773.roa (hash: khtXuRN2/6rEPemqebTu2pFMVWjbyHDtvqkyXHj0hmY=)
4: E961050E58D311F18E39767BA5833773.roa (hash: SGyrZgoOyY3v7LefvD/KwjXbi3mtFgtFoBnUddJJDfk=)
5: EA83E6F458D311F18E39767BA5833773.roa (hash: 7aqLjxsVl/1/yFN4z+qOSpO/mBLZpSJYB4XFpd0ZCI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Validity
Not Before: Sep 19 00:44:43 2026 GMT
Not After : Sep 26 00:44:43 2026 GMT
Subject: CN=6aaddafc-dfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:5d:dc:9f:47:27:63:62:c4:7f:f3:37:1c:
86:3f:62:88:24:08:6b:cf:a8:6a:9c:31:34:56:71:
fe:ed:e2:30:66:ea:71:e3:fb:ed:7a:e6:3b:c2:63:
e2:63:c6:d7:4e:2e:1d:6f:f5:e4:81:d2:e7:f9:c6:
1d:36:68:92:c5:db:8b:a2:ec:39:4a:e5:27:1c:a9:
81:60:83:8b:59:f0:39:55:33:47:7d:b6:0f:ac:eb:
d4:2e:50:20:d0:bb:4f:3f:ed:b1:b4:be:26:d1:96:
3b:fa:96:3d:52:fd:e1:7e:47:de:5e:7c:ba:dd:3c:
2e:ea:1e:4b:e5:14:0f:ac:7c:a8:aa:67:e7:33:2e:
3b:47:59:6e:49:a0:36:2a:cf:c8:85:21:9d:83:d3:
be:2a:bd:ca:bb:ec:37:fb:75:ff:44:1d:cb:5c:00:
bc:bd:12:00:c3:95:b5:74:51:d9:99:cb:c4:b8:80:
c0:e7:0a:1e:3c:5a:35:be:58:07:73:0a:77:b5:46:
e3:d8:32:b5:f1:48:1f:a3:0e:bc:30:98:b9:d4:e0:
c1:3b:61:66:b2:f1:35:a8:83:dd:6c:2f:b8:98:a5:
43:28:87:79:27:c2:dd:6c:65:eb:ee:59:d2:b8:28:
6d:d8:5b:ff:e2:06:ac:cc:f7:07:38:de:78:76:9d:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:19:FA:8E:62:A5:0E:31:48:2B:52:A4:D8:DB:6F:BB:E9:E5:AC
X509v3 Authority Key Identifier:
keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ac:d0:b2:42:e9:0e:fa:d1:f4:2a:7d:59:86:1d:29:d8:62:
f7:8d:42:58:f7:61:3e:a1:2e:54:6a:d5:70:ff:37:79:a0:3d:
00:d3:2d:0f:e2:67:af:b7:62:60:ec:80:cd:f6:5d:ee:90:1f:
52:06:8d:e5:b5:2a:4b:b8:08:a6:2f:f1:4b:29:54:7a:54:f0:
7e:e7:9c:31:72:a6:8d:3e:e9:e1:61:f3:c5:80:e6:03:6d:e8:
61:ef:f4:a6:71:21:27:a9:14:e2:cf:fd:92:b6:49:79:1b:01:
fe:b9:7e:b6:1f:f3:c0:65:90:5a:48:38:55:c7:ba:5f:11:f3:
af:84:c4:07:5a:5b:89:26:10:2e:af:94:c4:89:0c:73:05:57:
78:5a:14:f1:1e:e0:87:5a:39:d0:a5:53:36:b0:55:23:cb:c7:
b4:28:98:0f:b0:db:68:c1:7b:f5:a9:81:10:70:ea:49:f5:d1:
18:6d:c2:66:43:2a:86:24:1f:eb:07:31:9f:b8:cd:5e:6e:6a:
b3:df:c7:a7:2d:f0:bd:63:41:79:89:56:47:87:93:75:bb:3d:
8a:62:e6:09:d0:b6:ad:94:72:a3:0a:57:4c:16:1f:bc:e9:de:
dc:88:94:01:ca:fa:f2:65:32:72:24:d3:af:40:ee:c6:44:4f:
9c:a5:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:35:17 2026 by rpki-client