
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json)
Hash identifier: ZuHM7QhG4Z6aquMiC927UB72r9RK5Zt88EQsVlr5nxs=
Subject key identifier: 33:28:95:5A:2A:47:65:AF:43:B4:D4:4B:AE:B8:56:2D:46:AF:7A:9E
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
Manifest number: 0156
Signing time: Mon 21 Sep 2026 05:18:16 +0000
Manifest this update: Mon 21 Sep 2026 05:18:15 +0000
Manifest next update: Mon 28 Sep 2026 05:18:15 +0000
Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: fswMe3WbIbKDHC35A5Y1fbdVUOxUQUJDjPuKZ7/Qgr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Validity
Not Before: Sep 21 05:18:15 2026 GMT
Not After : Sep 28 05:18:15 2026 GMT
Subject: CN=6ab0be18-7a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:25:ef:9f:78:cd:f6:80:31:d3:4b:b1:b0:
37:83:5b:47:56:ce:c0:b7:5f:61:14:a1:f6:ca:4e:
02:6d:02:23:fd:a6:7b:76:e3:b5:52:43:c5:ff:d6:
f2:d8:63:be:ba:7f:c6:bf:d0:af:ae:ad:33:58:a0:
21:b9:92:a5:61:b6:67:64:ec:b4:54:48:76:ec:c2:
b7:8f:1c:99:4e:63:fe:aa:3e:6c:61:bb:07:83:50:
27:34:65:13:3c:4b:60:f8:94:32:3c:cd:1e:a4:1f:
24:ac:30:ad:21:05:c1:69:4b:26:d8:9d:c8:9f:7d:
67:7e:3b:20:af:65:a4:98:04:e7:b6:d2:21:af:79:
10:7a:34:35:0b:f7:26:00:be:8a:38:0c:41:24:bb:
c2:22:7a:52:07:8b:ab:d5:ac:50:87:fd:f8:68:70:
a3:e1:47:42:97:ff:85:64:17:28:72:5e:35:77:0c:
45:ac:7c:08:ce:7f:35:1c:ad:4a:03:75:ca:74:ff:
35:6e:1f:33:8f:22:33:b3:17:62:39:90:42:90:0f:
89:bf:f9:91:b9:fa:0f:4a:c5:72:0a:b0:66:f8:4c:
96:86:a1:16:87:0e:c0:27:c3:ca:2a:96:e4:34:08:
a9:1c:e4:f9:29:45:66:a9:9f:3e:9b:35:03:df:1a:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:28:95:5A:2A:47:65:AF:43:B4:D4:4B:AE:B8:56:2D:46:AF:7A:9E
X509v3 Authority Key Identifier:
keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:c9:9f:e6:0f:67:a1:47:1b:af:1d:a4:13:b9:76:cb:75:55:
e2:64:ce:ce:1c:cc:d9:92:e6:02:30:45:c0:01:20:bd:2d:55:
f5:69:05:ee:e1:0b:1a:20:ad:df:b4:d6:48:80:a3:d9:4e:df:
f0:30:7a:9e:10:7d:17:b9:70:2e:3f:51:9f:7c:45:5f:75:12:
f9:58:34:88:40:93:c6:a9:54:b8:7a:b9:98:b8:e5:1d:cc:5a:
89:78:86:94:71:e5:97:d8:60:18:de:65:c2:69:5b:0f:5d:6a:
6c:bc:ad:87:e9:54:93:3e:ee:00:88:d0:cf:a9:ca:c8:10:b5:
26:f4:c6:f2:bb:4c:4a:6f:3a:ba:b6:ef:d6:e3:ba:2b:c4:4a:
25:5c:09:81:d7:e2:df:00:9d:61:cb:aa:3d:d5:f7:d3:d1:9c:
ce:b5:66:26:03:9e:f9:73:fb:11:49:7a:9c:cf:12:ca:d3:56:
9b:ce:48:fb:f1:a9:ba:e1:5d:74:e2:20:d0:fe:c0:1e:48:08:
4a:c2:4d:9d:0e:1c:aa:ed:5c:ab:ab:e7:90:9d:a1:a5:a7:19:
bf:5f:62:fa:1f:8e:9d:06:7d:fb:f8:09:fd:f6:ab:57:7e:9c:
b6:1f:b7:12:37:fb:74:27:b6:b8:5b:d1:a2:5c:d1:5d:ae:b2:
03:e6:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:53:37 2026 by rpki-client