
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json)
Hash identifier: UNsgqymogkLEkJ9rLS9qn3glouu58fc2LLYcj+46EBI=
Subject key identifier: 7D:27:B0:4E:21:34:53:D7:98:31:37:76:F8:9E:C1:3D:40:4B:9A:AA
Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
Manifest number: 0116
Signing time: Sat 13 Jun 2026 06:07:52 +0000
Manifest this update: Sat 13 Jun 2026 06:07:52 +0000
Manifest next update: Sat 20 Jun 2026 06:07:52 +0000
Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: cWetuQMI9aPW9xOaBWoirGtVE4shxKqZoV0r1bACwRU=)
2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: HUtXLhQ2zyP4LJGfZauEnR2MPzei0tQ4qoL8B66B5TY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Validity
Not Before: Jun 13 06:07:52 2026 GMT
Not After : Jun 20 06:07:52 2026 GMT
Subject: CN=6a2cf3b8-129e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:d7:25:87:22:9d:b5:67:de:c7:9f:a9:07:
f3:56:b5:ab:99:a0:c5:e4:bf:6d:d8:72:02:f5:e4:
00:7e:32:45:e4:7d:57:c0:91:70:b8:f2:46:d4:85:
bb:55:81:16:d3:2e:90:c9:4b:80:e3:77:ab:4f:5d:
39:df:e6:76:67:c8:93:7b:14:d7:e0:d3:1a:a5:85:
d5:9a:01:29:51:4e:e0:c0:98:0a:4e:da:81:a1:a8:
af:26:c0:62:8e:17:0a:0f:5b:8d:a2:6a:94:4d:25:
26:4d:6b:d9:ce:cb:73:29:b5:62:8f:0f:d2:3d:c8:
90:1d:e6:cb:07:58:1a:b7:2f:5e:5f:1d:8b:13:83:
a0:ad:5c:87:9e:de:10:a8:27:55:f5:e7:24:bf:f8:
93:f1:07:c1:e9:2f:53:d4:65:32:0e:ed:8e:0b:db:
45:1f:a0:e9:21:d0:8f:51:5d:56:56:1d:d7:93:36:
bc:83:a8:01:68:be:55:22:ea:c8:91:48:64:1b:ec:
b0:8d:43:d6:e9:d0:ee:7f:6a:25:b9:78:ab:ba:94:
76:a6:a7:5e:c8:e7:84:e7:b0:73:1a:4b:2e:a6:38:
06:48:9e:89:88:1d:98:6e:fe:da:d1:d4:e5:d0:a8:
a6:9a:92:a8:ea:fc:40:5a:b4:94:1e:2c:fb:83:0b:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:27:B0:4E:21:34:53:D7:98:31:37:76:F8:9E:C1:3D:40:4B:9A:AA
X509v3 Authority Key Identifier:
keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:2c:3d:f9:1c:0c:dd:f0:f4:06:80:5a:cd:51:37:74:ac:e1:
79:7c:ca:7a:6c:98:8c:48:ea:05:ad:4b:9e:5e:39:10:92:db:
22:ae:ec:38:cb:ca:cf:7c:32:21:16:46:49:5b:2e:9b:e9:5c:
4f:ad:c0:7a:c1:06:a4:9e:82:c6:56:52:a1:3e:49:8a:ff:1a:
aa:01:d6:03:42:b1:80:36:9c:33:95:13:62:20:ac:df:91:e5:
90:86:64:e4:ff:56:14:87:1e:a4:b7:72:89:bd:5f:bf:eb:af:
2a:10:3f:9e:e3:e3:ca:40:5c:80:33:67:95:8a:dc:dc:4d:58:
ee:7d:89:9f:a4:25:8d:7e:5e:b2:94:48:48:ad:57:cc:d8:b7:
7f:96:13:0f:cd:e6:04:12:97:cd:3d:b1:06:1a:78:fe:f5:98:
25:c4:12:a9:10:51:e7:dc:18:6a:df:28:5c:30:9a:12:a3:8a:
03:1c:7a:00:ff:ab:02:44:45:21:98:bd:13:3c:2f:48:7e:ea:
41:e7:a8:cd:c4:eb:51:02:33:34:18:ea:60:03:cd:34:55:7d:
74:5c:1b:f2:7f:cf:60:8b:cb:77:74:21:8b:50:e8:9f:26:4f:
5d:0a:fc:46:3b:db:f0:19:3a:44:e0:37:16:09:18:88:2b:63:
00:0e:0f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:25:39 2026 by rpki-client