
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json)
Hash identifier: Xt4P3T7S12xdPJnqMmoeRhNDO5BoXE/7yY9ZRVQ9T/M=
Subject key identifier: C9:45:09:59:12:44:B6:23:35:A5:BC:7D:55:18:6A:56:78:9C:71:D1
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial: 0534
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
Manifest number: 0524
Signing time: Fri 12 Jun 2026 20:24:49 +0000
Manifest this update: Fri 12 Jun 2026 20:24:49 +0000
Manifest next update: Fri 19 Jun 2026 20:24:49 +0000
Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: KX9Nb8vHKwGFrj7h1V+J/RxezlenL3pioqhWqJ1i2t8=)
2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: 4xgHsmFBzpOEDFWrTsnY/UVdPSnGuyQ3aHzpdWQKEDE=)
3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: pjU8yoKCWn12BkoGzYOOIFYk2quDrJg/9dgAwTEFemk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Validity
Not Before: Jun 12 20:24:49 2026 GMT
Not After : Jun 19 20:24:49 2026 GMT
Subject: CN=6a2c6b11-147e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:56:c1:91:be:8f:cf:5f:77:5b:02:78:6e:
b4:03:09:5c:22:30:d6:18:48:ba:6b:21:07:19:82:
25:13:8e:8d:16:97:21:db:39:5c:fd:8c:f8:a1:5e:
8c:81:2d:1b:d9:52:40:85:39:26:aa:65:3b:31:c3:
0b:d4:63:8d:b9:b6:46:cf:2f:64:5e:8c:1d:c1:07:
b8:8d:e6:96:a4:67:04:97:e9:33:08:2c:72:10:01:
92:62:5f:6e:f7:7b:aa:8f:ae:6d:70:81:8c:89:27:
9f:1a:86:bc:ad:7b:ed:52:e3:12:0a:7c:ae:29:01:
37:94:69:d7:dc:91:cf:d1:8c:b0:71:30:81:08:19:
ef:c5:98:ca:91:da:69:1d:54:d3:7b:e5:a3:ac:65:
41:75:cc:62:90:8f:cc:17:17:c9:c6:64:5b:1d:b0:
c3:2a:47:84:9f:de:50:e2:33:3b:f0:ab:28:bf:31:
e0:24:20:d8:bc:09:57:22:43:dd:bd:04:0d:d8:07:
54:e8:fb:1d:f4:10:de:d1:3a:93:90:4e:51:0b:33:
d3:c6:34:9d:85:c3:0f:fc:19:fd:df:11:ac:b4:b5:
4e:a5:de:36:8c:f0:f5:9d:11:78:1f:02:57:76:90:
36:96:10:61:c5:38:3c:1a:34:e8:dd:d0:16:b8:af:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:45:09:59:12:44:B6:23:35:A5:BC:7D:55:18:6A:56:78:9C:71:D1
X509v3 Authority Key Identifier:
keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:75:40:5c:03:4f:f6:f9:95:51:6d:45:06:8b:2e:e9:c8:48:
c0:1a:20:cc:5e:84:bc:c9:97:ce:3d:98:e2:1c:76:8b:09:5f:
87:e8:e8:05:53:10:30:7a:7d:a5:84:61:54:6a:b2:7a:dd:a8:
ac:6e:06:11:82:d0:05:d5:8c:4a:9e:6c:52:fc:6a:b6:a1:46:
4e:53:28:f2:46:4b:84:64:85:b2:fd:f2:b7:0e:06:47:0f:d7:
52:37:53:4f:f4:cc:5b:14:0b:cb:44:6b:be:e0:73:b0:6e:fa:
8f:b1:15:59:d8:49:1d:9f:c1:bc:36:e7:2c:29:52:fe:fe:d4:
ce:cb:ed:f6:fe:58:f9:cc:fc:5f:e8:71:86:f1:96:d0:d4:87:
4f:ef:ca:ad:5d:b0:d2:fb:9f:3f:81:25:ec:c1:92:29:e7:cf:
b9:46:32:4c:85:bc:d3:ea:68:2f:73:30:10:73:67:9a:90:d0:
d2:fd:8a:10:bf:7d:30:62:90:1a:3a:1c:e9:5f:0d:6b:c0:cf:
9f:cf:96:ef:cb:02:1b:e4:3c:7a:54:41:ec:17:33:65:4c:3b:
8b:6c:a6:b4:a8:15:cc:30:5b:e9:53:95:ef:59:8b:65:71:07:
a5:74:4b:b3:1b:75:78:1c:a1:93:5d:e8:aa:38:10:dc:6b:69:
9b:23:30:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5
NTNCMzZFNTEwHhcNMjYwNjEyMjAyNDQ5WhcNMjYwNjE5MjAyNDQ5WjAYMRYwFAYD
VQQDEw02YTJjNmIxMS0xNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZhWwZG+j89fd1sCeG60AwlcIjDWGEi6ayEHGYIlE46NFpch2zlc/Yz4oV6M
gS0b2VJAhTkmqmU7McML1GONubZGzy9kXowdwQe4jeaWpGcEl+kzCCxyEAGSYl9u
93uqj65tcIGMiSefGoa8rXvtUuMSCnyuKQE3lGnX3JHP0YywcTCBCBnvxZjKkdpp
HVTTe+WjrGVBdcxikI/MFxfJxmRbHbDDKkeEn95Q4jM78KsovzHgJCDYvAlXIkPd
vQQN2AdU6Psd9BDe0TqTkE5RCzPTxjSdhcMP/Bn93xGstLVOpd42jPD1nRF4HwJX
dpA2lhBhxTg8GjTo3dAWuK+GjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlFCVkS
RLYjNaW8fVUYalZ4nHHRMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw
RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK
OWxXVV9HNkppZnlWT3pibEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiXVAXANP9vmVUW1FBosu6chIwBogzF6EvMmXzj2Y4hx2iwlfh+joBVMQMHp9
pYRhVGqyet2orG4GEYLQBdWMSp5sUvxqtqFGTlMo8kZLhGSFsv3ytw4GRw/XUjdT
T/TMWxQLy0RrvuBzsG76j7EVWdhJHZ/BvDbnLClS/v7Uzsvt9v5Y+cz8X+hxhvGW
0NSHT+/KrV2w0vufP4El7MGSKefPuUYyTIW80+poL3MwEHNnmpDQ0v2KEL99MGKQ
Gjoc6V8Na8DPn8+W78sCG+Q8elRB7BczZUw7i2ymtKgVzDBb6VOV71mLZXEHpXRL
sxt1eByhk13oqjgQ3GtpmyMw6g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:54 2026 by rpki-client