
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json)
Hash identifier: K5RzHKnMwSys51Iws20IwTl6CE0FoB4xvZTpq/mYeB0=
Subject key identifier: 83:05:89:1D:F9:F0:39:F2:29:B1:09:D7:79:2C:29:8D:C7:6B:75:5C
Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
Manifest number: E2
Signing time: Mon 02 Mar 2026 02:59:02 +0000
Manifest this update: Mon 02 Mar 2026 02:58:59 +0000
Manifest next update: Mon 09 Mar 2026 02:58:59 +0000
Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: E1A5ESjLyhGn6CvEwO3f5qNwx1ZFqgg3WgJ2imtVpxU=)
2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: HUtXLhQ2zyP4LJGfZauEnR2MPzei0tQ4qoL8B66B5TY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Validity
Not Before: Mar 2 02:58:59 2026 GMT
Not After : Mar 9 02:58:59 2026 GMT
Subject: CN=69a4fcf5-2914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:18:b0:63:4a:e1:ef:75:b2:73:6d:80:2e:
41:18:2b:68:ec:5d:58:2f:cf:55:1d:e3:7c:84:22:
a6:7e:31:57:4a:00:ca:78:ca:81:4a:8a:d8:2c:5e:
99:5a:0a:c5:af:92:4d:6f:b1:0f:09:e3:c8:e2:4e:
c9:31:a1:72:3e:42:24:01:82:5e:6b:01:a3:a9:04:
92:e2:14:47:c1:76:ce:df:81:81:2c:40:c1:b0:00:
7b:ca:1f:d1:d4:9a:e6:52:a9:7d:db:03:87:4c:ef:
96:92:d2:10:f3:06:93:9b:d1:82:da:23:43:d0:64:
8a:98:c4:aa:80:e8:0c:dc:1b:cc:53:64:36:9b:aa:
62:92:9c:93:6c:1a:b5:bb:e6:5e:6d:c0:41:cd:bf:
52:e2:54:05:db:80:5d:fc:5f:ab:fd:88:47:0d:b3:
9a:cc:e9:e7:65:7e:e4:35:af:5d:0f:a9:15:d2:e3:
06:2f:93:85:ac:d7:0d:78:2b:51:42:28:71:dc:60:
b1:b7:ca:f2:66:3c:2d:b4:e8:7b:84:19:bb:5f:27:
dd:89:cf:dc:b7:b0:9b:bc:24:40:73:36:91:04:91:
f5:e1:9b:ea:46:2a:ad:05:58:3c:e3:74:e3:8e:f9:
6d:d0:9c:b5:dc:a5:53:7b:5a:21:7f:90:95:11:f9:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:05:89:1D:F9:F0:39:F2:29:B1:09:D7:79:2C:29:8D:C7:6B:75:5C
X509v3 Authority Key Identifier:
keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:be:5f:7e:ee:da:08:49:d4:ea:0a:e7:55:34:c3:6b:c2:83:
34:cb:0a:92:e7:95:72:5e:be:a9:e5:15:3b:40:25:e4:70:89:
c4:84:d8:29:cb:3f:e3:6b:10:78:1e:e7:9d:9a:f5:60:25:16:
05:a7:59:e4:b6:7c:5e:c3:da:7a:bf:48:df:4f:83:b3:50:8a:
72:5d:3c:46:17:f3:9f:cd:07:75:8f:7c:12:59:db:d1:50:42:
36:2d:9a:0b:74:7a:aa:06:31:b1:b6:35:2e:03:e8:25:2c:94:
18:dd:63:96:12:56:b1:84:20:70:47:fb:0e:7a:c9:43:a9:d4:
55:36:84:f1:34:21:37:03:ee:e4:cd:3f:ac:1a:dc:ff:5b:b6:
90:b4:98:51:ea:d2:9b:d4:1a:72:2a:9b:ad:d0:17:2d:59:0a:
af:fe:31:38:3d:31:5e:39:13:75:48:a9:97:85:99:c4:ed:5c:
e4:56:ad:bc:75:10:db:e8:b8:eb:f3:6b:a5:44:89:88:ce:ee:
c4:51:e3:86:e2:2e:77:5b:e2:a3:7e:eb:c7:22:c2:80:57:b7:
08:cd:8a:d7:20:09:b8:44:81:b5:f0:1b:4e:70:8f:e3:5f:1b:
10:46:f7:c4:17:75:04:4b:c9:db:54:61:4e:6e:4b:22:39:8e:
ad:19:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:31 2026 by rpki-client