
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
File: 4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json)
Hash identifier: uOsSpbGm8Y6wWa+tKulaXTlq+TOAO3+f7kjpHFITWJ0=
Subject key identifier: A1:D2:8B:81:67:5C:75:FC:08:62:4B:E5:34:02:DE:B9:0B:71:1F:EE
Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
Certificate issuer: /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Certificate serial: 3530
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
Manifest number: 352F
Signing time: Thu 16 Apr 2026 14:27:33 +0000
Manifest this update: Thu 16 Apr 2026 14:27:33 +0000
Manifest next update: Thu 23 Apr 2026 14:27:33 +0000
Files and hashes: 1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: LLr8NOEQfOHY+D8+Pgng7BpJ9L3ZPba49wTyCXglaNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13616 (0x3530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Validity
Not Before: Apr 16 14:27:33 2026 GMT
Not After : Apr 23 14:27:33 2026 GMT
Subject: CN=69e0f1d5-e36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:d8:0d:4c:d1:96:f6:f6:1d:62:09:93:74:
0e:12:19:ae:4b:2c:3f:88:b9:64:52:69:69:1e:91:
04:fb:70:e0:d3:e9:58:db:13:ef:9b:89:35:66:fe:
b7:5f:f1:04:3d:05:2f:7c:db:e2:3c:bb:1c:db:05:
ee:2d:62:64:1b:75:ba:09:3a:27:48:98:73:51:d8:
cf:82:c7:7d:d0:cd:4f:6b:af:79:5d:e8:dd:b6:4b:
6b:2f:87:ca:7b:7e:37:56:df:a7:01:89:88:77:61:
1a:f7:e5:5f:a5:82:f2:5b:a5:78:3f:89:17:01:a0:
38:32:1e:02:22:9b:c4:52:bd:2d:20:7a:af:a6:d0:
02:17:49:49:58:c4:41:b0:63:ac:97:c3:65:52:44:
00:5a:75:2d:1c:89:a9:a9:98:40:df:f5:12:b6:01:
3d:e5:0b:8c:d6:a8:e7:99:ba:02:10:a1:82:7b:21:
02:c7:44:38:f0:45:01:81:53:43:2c:6f:fc:5c:e9:
86:88:e5:7b:d0:b8:06:f2:f3:ec:cd:77:c2:f9:24:
a6:9a:04:4c:a2:b4:0d:57:48:e9:5f:79:60:de:ab:
32:51:66:e4:c9:d9:60:4a:12:56:80:c9:ac:b0:79:
46:60:df:f8:83:6c:f2:03:80:f0:17:58:29:37:b9:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D2:8B:81:67:5C:75:FC:08:62:4B:E5:34:02:DE:B9:0B:71:1F:EE
X509v3 Authority Key Identifier:
keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ff:76:b0:24:fa:2d:13:bf:5c:fa:02:8f:23:8f:e9:ff:d8:
3c:66:a9:79:f8:34:68:cc:98:fa:9a:26:56:05:7e:0f:23:a7:
bd:9e:4d:35:d1:99:3f:f5:6c:ed:f3:bb:2e:13:20:10:f3:11:
95:62:c2:96:b6:6c:27:08:54:12:e2:53:47:c6:82:96:35:dc:
1d:54:a6:f9:c7:8c:82:9b:c8:33:f0:18:ac:0c:78:72:89:b9:
90:99:8d:53:15:62:37:0f:56:2b:eb:86:70:61:21:e6:f1:69:
3f:ed:5e:dd:cb:4b:51:b0:20:7b:fe:21:18:11:98:e9:93:ea:
d8:c8:05:dd:ec:a3:c1:96:5e:51:76:10:11:3e:61:d5:e7:71:
e0:c4:b7:a0:f8:53:1f:f9:e7:7c:6d:40:78:46:2a:48:5a:16:
0d:83:3f:44:c3:56:5c:95:77:b6:ce:99:30:a5:a2:87:67:a9:
5b:d2:47:4a:13:d2:df:6c:8d:4b:89:b7:85:b1:56:ab:60:35:
64:be:4c:7c:e7:7f:4d:38:4e:27:8f:f8:ca:6d:68:b5:cd:ff:
2e:78:50:0c:70:f0:fe:31:3a:26:98:11:f3:23:c5:8d:8f:19:
21:cf:6a:f3:cf:dc:6e:d2:c5:02:4f:fa:da:93:48:6d:04:ba:
0b:8c:0a:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzdFMzMxMTAvBgNVBAUTKEUyNDk2Njc4RDZGRDRFMjJFOEFDMEU5RkY2Q0Q1ODEw
RDZGQjc5NEQwHhcNMjYwNDE2MTQyNzMzWhcNMjYwNDIzMTQyNzMzWjAYMRYwFAYD
VQQDEw02OWUwZjFkNS1lMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAva/YDUzRlvb2HWIJk3QOEhmuSyw/iLlkUmlpHpEE+3Dg0+lY2xPvm4k1Zv63
X/EEPQUvfNviPLsc2wXuLWJkG3W6CTonSJhzUdjPgsd90M1Pa695XejdtktrL4fK
e343Vt+nAYmId2Ea9+VfpYLyW6V4P4kXAaA4Mh4CIpvEUr0tIHqvptACF0lJWMRB
sGOsl8NlUkQAWnUtHImpqZhA3/UStgE95QuM1qjnmboCEKGCeyECx0Q48EUBgVND
LG/8XOmGiOV70LgG8vPszXfC+SSmmgRMorQNV0jpX3lg3qsyUWbkydlgShJWgMms
sHlGYN/4g2zyA4DwF1gpN7m+0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHSi4Fn
XHX8CGJL5TQC3rkLcR/uMB8GA1UdIwQYMBaAFOJJZnjW/U4i6KwOn/bNWBDW+3lN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0UzMy9BODBFQ0U0ODFE
ODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRpTG9yQTZmOXMxWUVOYjdl
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRrbG1lTmI5VGlMb3JBNmY5czFZRU5iN2VVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
N0UzMy9BODBFQ0U0ODFEODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRp
TG9yQTZmOXMxWUVOYjdlVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs/92sCT6LRO/XPoCjyOP6f/YPGapefg0aMyY+pomVgV+DyOnvZ5NNdGZP/Vs
7fO7LhMgEPMRlWLClrZsJwhUEuJTR8aCljXcHVSm+ceMgpvIM/AYrAx4com5kJmN
UxViNw9WK+uGcGEh5vFpP+1e3ctLUbAge/4hGBGY6ZPq2MgF3eyjwZZeUXYQET5h
1edx4MS3oPhTH/nnfG1AeEYqSFoWDYM/RMNWXJV3ts6ZMKWih2epW9JHShPS32yN
S4m3hbFWq2A1ZL5MfOd/TThOJ4/4ym1otc3/LnhQDHDw/jE6JpgR8yPFjY8ZIc9q
88/cbtLFAk/62pNIbQS6C4wK2A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:57 2026 by rpki-client