
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
File: 4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json)
Hash identifier: EohjU353V+/vhaHAvgPOEGcqMCXEGRdZdySl1sRY2S4=
Subject key identifier: E6:AB:9F:19:41:E8:6A:C7:87:15:86:CE:73:3F:09:5D:E4:5F:AD:42
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial: 0737
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
Manifest number: 06D0
Signing time: Sun 01 Mar 2026 22:56:02 +0000
Manifest this update: Sun 01 Mar 2026 22:56:02 +0000
Manifest next update: Sun 08 Mar 2026 22:56:02 +0000
Files and hashes: 1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: Om4bq+mBx9F6hfFx6qmYuOPRW5jOrtBkbzBf6pyYMHc=)
2: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: HxvlT3R4kqOwTlGrsDbEk+rFYJJp21AiQ7YUhKYZemw=)
3: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: Uq1r1G4tm1AaUsLNtGMF+1xso19V+ldz4OeRvJIott0=)
4: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: SRBM1UQ62MzwstNbBGZOLlHSllpwrOM36SMcBobvZHc=)
5: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: yhURItjRdxKg6mcd34cH8KYuvJEG8HUnJFXPM2XlV0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:56:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1847 (0x737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Validity
Not Before: Mar 1 22:56:02 2026 GMT
Not After : Mar 8 22:56:02 2026 GMT
Subject: CN=69a4c402-47b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:b4:42:24:38:ff:e5:2c:db:0b:64:e1:66:
3f:1d:4b:ee:f1:9e:79:f9:42:81:92:82:99:70:1d:
bd:32:17:58:c6:b0:09:3a:da:fe:c3:ea:5d:d8:bf:
a5:ae:d8:75:8f:9a:23:45:88:cf:0a:0a:de:d2:e9:
89:b5:1e:ae:c1:db:2f:18:93:46:df:1d:82:e7:63:
5d:5c:62:87:67:b9:b0:0e:f4:07:76:69:3c:38:cc:
23:51:1b:50:1b:80:70:5d:b5:74:31:a0:aa:c6:53:
e3:14:25:10:50:67:ce:74:b4:3e:75:da:a3:79:56:
34:50:e6:e8:db:21:91:c0:44:4c:2f:59:13:0b:8d:
1a:74:d4:4e:b4:c4:85:e8:b5:a8:bf:6e:e6:4f:44:
44:22:4a:58:b0:42:8d:0b:57:17:14:3c:3b:e7:08:
29:6d:a0:66:d1:6b:a8:b6:c9:2c:62:46:be:a3:3d:
af:00:b9:5b:e5:ea:29:5b:2e:63:e8:76:1e:ca:85:
fc:92:03:43:8d:cc:5a:c7:2d:cd:0f:60:3b:da:68:
45:1e:b9:61:3f:f8:d6:3e:0c:2b:d4:13:4e:cb:38:
58:54:55:1b:4e:75:af:c0:de:5a:d6:70:4a:03:82:
ff:d6:8c:ad:eb:f8:42:83:6b:53:2f:f8:f8:61:e7:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AB:9F:19:41:E8:6A:C7:87:15:86:CE:73:3F:09:5D:E4:5F:AD:42
X509v3 Authority Key Identifier:
keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3d:d2:6a:7d:fd:a3:6b:7e:d0:3e:6b:84:2a:af:57:81:01:
50:e3:2d:2c:a6:65:2d:f3:b2:48:b6:dc:4f:c0:41:71:48:54:
58:31:56:7a:e9:77:a2:f3:53:00:e8:81:4f:bd:fa:ff:99:7c:
08:97:c4:ec:9e:2a:ed:cb:12:d4:ef:51:1d:05:ed:04:0e:01:
48:07:03:f1:08:b5:38:02:0f:3c:8a:88:90:71:75:e3:a6:e3:
da:b8:99:49:19:da:78:99:82:f4:e3:e7:60:70:79:28:2b:77:
3f:de:99:a8:ba:5a:5b:95:df:6a:08:e5:de:15:7f:df:66:05:
93:f9:77:e5:c1:08:84:97:20:88:f1:3c:b7:43:0a:ca:48:2d:
26:44:7e:ff:fd:c4:58:12:fb:73:79:f7:bf:54:c6:81:42:65:
e2:a0:c1:9d:49:c0:e6:a9:4a:cb:9c:31:f5:94:ea:1a:5c:b2:
35:01:5c:66:c5:95:05:9b:c5:23:0b:e1:39:9a:35:35:c3:f5:
31:b6:c8:76:57:1a:a6:28:1e:b1:55:ed:44:3f:aa:58:93:0b:
ac:60:c9:08:a8:e2:4a:3d:25:d3:3b:0e:8d:b6:fd:6f:50:74:
ac:ab:eb:23:12:39:bd:c5:fd:ce:86:6e:1f:48:26:aa:0c:a9:
b2:39:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:43:28 2026 by rpki-client