
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json)
Hash identifier: hbPoeKyx+4RP+W/TTHNu2Ja5j1nNNVPkqPzryBYrYeU=
Subject key identifier: B1:1C:39:53:2D:E8:A7:1A:2B:0D:22:8E:60:1F:AB:26:14:88:45:77
Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
Manifest number: FA
Signing time: Fri 17 Apr 2026 06:04:13 +0000
Manifest this update: Fri 17 Apr 2026 06:04:12 +0000
Manifest next update: Fri 24 Apr 2026 06:04:12 +0000
Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: 0idaBCIgsQopHfTKTsygsmZADS0STrBOMq8Aqj8ysjQ=)
2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: HUtXLhQ2zyP4LJGfZauEnR2MPzei0tQ4qoL8B66B5TY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Validity
Not Before: Apr 17 06:04:12 2026 GMT
Not After : Apr 24 06:04:12 2026 GMT
Subject: CN=69e1cd5c-abe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:36:29:02:f2:5d:9e:80:ab:eb:4a:a1:cf:
f7:06:65:b9:72:55:c3:c4:94:3b:d2:7e:0d:1a:40:
9b:a0:ae:2b:77:9c:64:d1:fd:f6:86:9a:67:6e:7d:
db:68:81:ce:fc:46:28:30:b7:28:bd:04:8c:21:11:
14:ac:8d:dc:93:36:1c:5d:44:7b:98:c1:15:13:0e:
06:d9:f4:be:75:47:51:45:14:1c:fa:3b:c5:35:20:
55:0c:24:01:0c:24:f4:2f:c0:de:9f:b4:80:32:e9:
d4:fb:62:31:a5:c1:32:bb:47:73:ef:a0:49:11:30:
97:72:8c:23:a6:61:f5:95:41:d1:46:01:95:c2:47:
26:1a:bf:22:dc:c5:6e:03:14:e2:9a:e0:29:e4:f0:
61:7f:ba:6e:73:56:0e:83:93:12:63:fd:7b:c1:9c:
ca:72:30:d2:6a:85:cd:48:12:9e:cc:eb:ef:a5:9d:
f6:76:f7:a2:1e:e4:df:b3:62:39:c4:79:85:4e:0d:
97:a3:63:06:80:1f:79:34:7c:ed:1a:05:05:ee:38:
a1:f9:02:ac:07:ab:67:d2:c1:36:4b:87:58:f8:09:
51:f0:93:32:fb:29:4e:40:ba:be:dc:8d:a3:49:71:
85:59:99:3b:a0:8c:65:aa:60:7e:89:55:3a:a4:81:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:39:53:2D:E8:A7:1A:2B:0D:22:8E:60:1F:AB:26:14:88:45:77
X509v3 Authority Key Identifier:
keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d3:39:3a:74:27:06:92:e4:d1:9a:1b:48:ad:9c:7e:0d:91:
b2:89:7b:b3:b5:9d:50:a0:42:9c:be:8a:19:ce:12:60:d9:4c:
fc:4f:b0:65:1b:98:bf:e9:08:28:20:06:68:4c:89:cd:9f:31:
b0:96:52:70:b7:62:2d:c5:c9:e9:6a:59:c6:07:8f:0c:32:d9:
40:00:68:c1:04:cc:b3:72:c9:48:b0:a0:ed:54:8b:d1:d0:53:
99:bc:12:31:26:7a:14:3e:22:fb:14:e0:f2:7a:42:d6:0a:ce:
d4:89:b8:71:1b:b0:1b:82:1b:65:6a:8f:6d:71:6d:a9:15:60:
42:58:20:70:a0:aa:d5:55:74:65:7d:90:af:54:61:a8:59:03:
86:9a:a1:1e:e3:2f:23:d0:47:6d:ad:1b:07:d7:84:b6:3e:8c:
79:8a:8a:2b:10:2d:eb:19:f6:f6:bb:75:40:c8:8a:ea:c9:44:
7f:ce:9e:aa:62:0a:28:7e:b0:af:a1:0c:d4:fb:1f:ce:21:4a:
33:da:56:19:45:b3:cb:d6:c1:d3:6a:69:3d:55:f8:a9:b7:50:
3c:a4:92:3d:22:08:48:65:78:b3:c6:33:9c:a3:5c:5f:b8:54:
5f:7e:06:f8:05:01:62:21:07:2c:d9:70:b6:90:d9:05:ad:65:
9f:a4:2c:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JCOUExMTAvBgNVBAUTKDgzOEZCRDBCMzk1RUE5MDcwNkM2QzI4OUFDMjZCMEQ3
MzhBMDQyNDEwHhcNMjYwNDE3MDYwNDEyWhcNMjYwNDI0MDYwNDEyWjAYMRYwFAYD
VQQDEw02OWUxY2Q1Yy1hYmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssY2KQLyXZ6Aq+tKoc/3BmW5clXDxJQ70n4NGkCboK4rd5xk0f32hppnbn3b
aIHO/EYoMLcovQSMIREUrI3ckzYcXUR7mMEVEw4G2fS+dUdRRRQc+jvFNSBVDCQB
DCT0L8Den7SAMunU+2IxpcEyu0dz76BJETCXcowjpmH1lUHRRgGVwkcmGr8i3MVu
AxTimuAp5PBhf7puc1YOg5MSY/17wZzKcjDSaoXNSBKezOvvpZ32dveiHuTfs2I5
xHmFTg2Xo2MGgB95NHztGgUF7jih+QKsB6tn0sE2S4dY+AlR8JMy+ylOQLq+3I2j
SXGFWZk7oIxlqmB+iVU6pIGPowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEcOVMt
6KcaKw0ijmAfqyYUiEV3MB8GA1UdIwQYMBaAFIOPvQs5XqkHBsbCiawmsNc4oEJB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI5QS80MTM5MEJDQUNG
RjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFRY0d4c0tKckNhdzF6aWdR
a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2c0LTlDemxlcVFjR3hzS0pyQ2F3MXppZ1FrRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkI5QS80MTM5MEJDQUNGRjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFR
Y0d4c0tKckNhdzF6aWdRa0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALdM5OnQnBpLk0ZobSK2cfg2Rsol7s7WdUKBCnL6KGc4SYNlM/E+wZRuYv+kI
KCAGaEyJzZ8xsJZScLdiLcXJ6WpZxgePDDLZQABowQTMs3LJSLCg7VSL0dBTmbwS
MSZ6FD4i+xTg8npC1grO1Im4cRuwG4IbZWqPbXFtqRVgQlggcKCq1VV0ZX2Qr1Rh
qFkDhpqhHuMvI9BHba0bB9eEtj6MeYqKKxAt6xn29rt1QMiK6slEf86eqmIKKH6w
r6EM1PsfziFKM9pWGUWzy9bB02ppPVX4qbdQPKSSPSIISGV4s8YznKNcX7hUX34G
+AUBYiEHLNlwtpDZBa1ln6QsnQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:06 2026 by rpki-client