
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json)
Hash identifier: ybd5oaB95JV04F68TKDEXUEGaNRN3dvr8BLWx6GR+dg=
Subject key identifier: 92:4C:A9:C4:9C:F0:59:3D:30:17:34:FE:D4:E4:E0:EE:EE:60:F7:82
Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Certificate serial: 081D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
Manifest number: 07FB
Signing time: Sat 28 Feb 2026 21:41:05 +0000
Manifest this update: Sat 28 Feb 2026 21:41:04 +0000
Manifest next update: Sat 07 Mar 2026 21:41:04 +0000
Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: +JoKm8EyI60wy2OTedm3vudiiho4pIjrBJPmwnHb/o4=)
2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: hFRxkLpFxynkLA+bgk7ZWKTxrIef2z810IITJ3Z3KSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Validity
Not Before: Feb 28 21:41:04 2026 GMT
Not After : Mar 7 21:41:04 2026 GMT
Subject: CN=69a360f1-2d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:5d:ac:26:47:06:c4:0a:b2:fe:81:99:49:
26:af:39:2c:71:29:77:0a:83:3e:f1:ea:ff:7b:b9:
35:a6:78:10:1f:24:7f:f0:69:7b:cd:23:8e:51:9e:
73:fd:89:fa:6a:8d:20:57:78:0f:46:64:5d:53:f3:
a4:85:29:ed:d9:b6:c9:d5:52:08:dc:8d:02:18:9b:
20:72:84:56:38:61:0f:7a:0a:3f:ae:b4:79:06:f9:
65:f0:24:07:55:fc:02:4f:9f:b3:79:da:71:df:14:
12:f8:05:07:47:71:f6:48:c2:99:8a:3c:00:bd:dd:
60:ae:27:05:8f:e9:cb:5b:eb:33:ae:0b:94:e8:40:
ef:7a:82:20:f3:28:a6:b6:db:75:3d:d7:32:c5:de:
04:39:62:76:92:06:9e:84:95:39:6c:09:52:f0:fe:
af:54:a4:83:31:6d:a0:1a:f0:9e:7a:12:c4:50:a6:
21:55:20:99:46:f5:88:a8:32:d7:f7:15:08:a2:f8:
10:aa:3e:9f:49:66:6d:d4:64:2b:18:95:a5:2a:a6:
61:68:1e:79:39:95:72:13:14:5e:48:24:ea:60:78:
19:38:e1:38:91:b0:59:3f:1e:42:91:3e:ec:4c:ec:
c6:0d:2c:75:c7:8b:da:94:23:71:4b:04:90:34:ec:
4d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4C:A9:C4:9C:F0:59:3D:30:17:34:FE:D4:E4:E0:EE:EE:60:F7:82
X509v3 Authority Key Identifier:
keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5b:fd:82:9c:b5:1c:16:12:0c:bf:0a:88:c2:d3:f1:44:c5:
21:05:aa:2e:8f:a6:6e:42:66:63:c4:ba:29:5e:26:dd:99:78:
5c:16:68:60:a7:ae:a7:4f:01:2c:32:46:67:61:d9:71:0a:2c:
16:e0:dc:1e:8d:4b:c0:7e:e8:c3:37:f3:09:c1:cc:f4:43:b0:
25:6f:51:ef:01:ba:62:58:90:cc:30:ce:cd:b0:3f:94:50:ce:
ae:b0:97:14:6f:04:4e:21:39:15:eb:3e:de:07:bd:98:7f:4c:
df:da:32:9a:25:b5:66:4e:15:a1:bb:29:78:1d:2b:66:e3:e4:
b4:ce:3a:ef:04:5a:96:4a:a2:52:1a:e4:bb:c7:3f:e9:be:df:
9b:9d:39:c2:e3:ab:7b:50:80:96:ae:5b:68:03:7d:38:2f:4c:
1c:f1:07:28:2a:dc:07:e6:42:58:88:93:c4:e7:bc:94:fe:ab:
09:46:cc:9e:41:d7:1a:f9:c4:8e:2b:a6:c6:05:05:98:03:a0:
9a:4c:5e:3f:84:9c:4b:68:42:c2:98:f7:19:cc:81:33:a6:d4:
63:80:33:33:19:b4:9f:fd:02:d8:97:8d:c5:c6:91:04:6f:2f:
c4:83:98:55:b7:dd:43:ee:1b:87:f9:c0:26:13:70:80:b8:a5:
38:45:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:16 2026 by rpki-client