
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json)
Hash identifier: vEVkKMi9rsy4TK3zzUb2PLgu7omCFKdNzFK1lTlG1zM=
Subject key identifier: A9:3D:EF:95:C9:72:03:31:FF:4C:B8:23:28:F1:41:A0:DF:A8:7E:50
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial: 058D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
Manifest number: 0578
Signing time: Sat 14 Nov 2026 20:05:30 +0000
Manifest this update: Sat 14 Nov 2026 20:05:30 +0000
Manifest next update: Sat 21 Nov 2026 20:05:30 +0000
Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: B2GsOPmXuBQ1/rNcT2K3wTt9Uw/b164csYE93E8BNLo=)
2: 81EDAEEC6DE911F1BE416AB35CA30FBC.roa (hash: mfLDoHKjc1wOzAFQMRnpJlmvc97T+kUZ6co3lhJxleI=)
3: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: trM8u8ZAXWlvq6cCy8bGxIs90gzz2Jb9u90H3XVV05s=)
4: 68D217FAC13F11F19B446DC24B11F970.roa (hash: BlpUlWSTK1YCBErgzoQ1r4Y5bTUx8NUvclRfgr8y0l0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 20:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1421 (0x58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Validity
Not Before: Nov 14 20:05:30 2026 GMT
Not After : Nov 21 20:05:30 2026 GMT
Subject: CN=6af8bf0a-1a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:3f:5f:f5:76:d3:a9:fb:a7:ec:1f:13:9d:
18:2b:df:ef:c0:b7:f6:05:11:27:c7:fc:92:9f:e3:
47:83:08:40:a2:6a:a5:ca:73:6e:5e:6e:a0:01:93:
92:26:af:48:60:c5:ae:5b:28:31:e3:e2:84:82:04:
78:bc:c3:54:59:65:11:18:2e:60:5e:69:08:45:a8:
26:a4:06:cc:0c:aa:9c:68:f8:89:7d:4b:0a:69:4b:
6d:4b:e0:80:6d:1f:bc:b5:38:36:b3:54:28:61:e0:
2b:0d:a0:91:95:f7:26:f7:d3:a3:45:e1:03:ee:80:
66:0b:0b:21:43:7b:f7:f4:f8:0c:42:4e:91:11:61:
1e:17:a0:c6:9f:c5:3e:24:38:69:cd:ac:f8:7b:22:
63:1c:21:8a:47:3f:5d:50:c1:bb:c7:d5:05:cd:6c:
cb:4f:2e:a6:61:f1:76:b9:af:d0:24:a5:74:83:e7:
33:ee:66:0e:de:4f:ea:b6:23:05:b3:a9:c6:a4:ae:
8a:fa:15:fc:e3:91:65:73:04:30:94:03:73:da:36:
3e:57:d9:e2:9a:46:a3:ce:76:bc:46:8a:11:8d:d5:
38:6f:38:18:03:a1:4a:c9:96:af:46:79:40:26:ba:
47:17:e0:4a:60:a4:f0:a3:13:d9:39:ea:8b:0b:a2:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3D:EF:95:C9:72:03:31:FF:4C:B8:23:28:F1:41:A0:DF:A8:7E:50
X509v3 Authority Key Identifier:
keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a1:45:a5:ef:30:54:93:53:ac:bc:7d:85:05:28:fa:ba:10:
ea:aa:14:d1:3a:a1:1a:83:11:f7:bf:14:12:51:0f:bd:30:7f:
25:57:57:ec:d4:a0:34:9a:dd:61:6e:12:a3:a7:7d:b8:ef:b3:
5e:3b:6f:34:19:f7:2a:38:cd:46:f8:34:ee:65:da:4d:2a:fa:
f1:8d:16:29:ff:a4:86:9b:bb:dc:9b:e8:e8:78:ee:95:17:d6:
f4:1e:ca:83:f3:16:e7:d4:8a:ab:db:da:c4:1b:c9:89:ec:8e:
7e:fa:0d:90:f3:e1:6a:0c:0f:c7:a2:ec:a2:c4:c4:19:25:09:
e3:52:7a:74:01:a7:f7:b2:79:e4:ad:4c:4a:ce:bd:9e:a6:b4:
33:5f:72:9b:d4:64:43:27:ab:57:d8:25:06:f1:cf:c9:03:ba:
d1:2b:cb:1d:9f:96:61:76:a4:ef:56:69:a3:a5:67:71:d8:2e:
05:fa:e8:46:e9:e7:02:66:13:53:5e:52:5e:d5:d1:52:30:db:
21:be:02:bd:cb:ca:0e:e6:38:12:83:73:56:7a:a2:3d:40:73:
d3:a0:cc:4b:04:25:e5:7e:dd:1a:4e:a3:22:b8:23:61:06:04:
e7:df:f4:81:3d:95:31:a8:7a:7a:fc:f7:4b:3b:1f:c3:29:fc:
f3:61:eb:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5
NTNCMzZFNTEwHhcNMjYxMTE0MjAwNTMwWhcNMjYxMTIxMjAwNTMwWjAYMRYwFAYD
VQQDEw02YWY4YmYwYS0xYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxMU/X/V206n7p+wfE50YK9/vwLf2BREnx/ySn+NHgwhAomqlynNuXm6gAZOS
Jq9IYMWuWygx4+KEggR4vMNUWWURGC5gXmkIRagmpAbMDKqcaPiJfUsKaUttS+CA
bR+8tTg2s1QoYeArDaCRlfcm99OjReED7oBmCwshQ3v39PgMQk6REWEeF6DGn8U+
JDhpzaz4eyJjHCGKRz9dUMG7x9UFzWzLTy6mYfF2ua/QJKV0g+cz7mYO3k/qtiMF
s6nGpK6K+hX845FlcwQwlANz2jY+V9nimkajzna8RooRjdU4bzgYA6FKyZavRnlA
JrpHF+BKYKTwoxPZOeqLC6IpiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKk975XJ
cgMx/0y4IyjxQaDfqH5QMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw
RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK
OWxXVV9HNkppZnlWT3pibEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG6FFpe8wVJNTrLx9hQUo+roQ6qoU0TqhGoMR978UElEPvTB/JVdX7NSgNJrd
YW4So6d9uO+zXjtvNBn3KjjNRvg07mXaTSr68Y0WKf+khpu73Jvo6HjulRfW9B7K
g/MW59SKq9vaxBvJieyOfvoNkPPhagwPx6LsosTEGSUJ41J6dAGn97J55K1MSs69
nqa0M19ym9RkQyerV9glBvHPyQO60SvLHZ+WYXak71Zpo6VncdguBfroRunnAmYT
U15SXtXRUjDbIb4CvcvKDuY4EoNzVnqiPUBz06DMSwQl5X7dGk6jIrgjYQYE59/0
gT2VMah6evz3Szsfwyn882Hrzw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:19:17 2026 by rpki-client