
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json)
Hash identifier: q79JgDosDWYt/yRVc3/LZyDwiF068mZzxX1wo9uJZvQ=
Subject key identifier: DC:39:74:C1:03:B4:BA:32:9F:55:82:23:C1:6E:65:15:4A:8F:FC:C5
Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
Manifest number: 014E
Signing time: Sun 27 Sep 2026 05:53:50 +0000
Manifest this update: Sun 27 Sep 2026 05:53:49 +0000
Manifest next update: Sun 04 Oct 2026 05:53:49 +0000
Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: w0G4weooWAunIoR7OSP5h6E7sWiPYcItypZfsHum1iU=)
2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: YjXpPUbmw3AhrjvHC2ktn+1vhr7KJz4YOUKhnqHxCV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Validity
Not Before: Sep 27 05:53:49 2026 GMT
Not After : Oct 4 05:53:49 2026 GMT
Subject: CN=6ab8af6d-7db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:13:1d:71:ed:80:e9:26:54:0d:17:76:48:
1d:88:0e:c7:58:ac:86:33:c2:95:95:5e:3a:c1:36:
cc:69:f2:b8:88:ee:c6:97:29:e4:8a:94:23:1e:10:
cc:f1:46:6f:96:cb:47:d3:46:5f:a1:d9:82:99:b5:
e0:38:5f:c0:1e:17:79:de:c2:87:54:c3:58:7f:8c:
12:81:4a:c4:f6:5d:55:1a:9e:fb:f6:6f:57:e0:b1:
7b:b7:58:88:21:36:fc:72:f6:5a:97:a3:99:f5:3c:
93:7c:d4:b9:91:ad:47:d4:36:1c:28:45:b2:6a:f4:
38:a2:c0:4b:e6:32:58:a7:e3:82:b2:d4:8f:67:21:
61:32:1e:1b:7e:b4:7f:8f:b6:98:43:cb:74:c8:3e:
cc:af:51:06:5b:31:7f:ab:3d:a0:8e:64:72:51:d2:
67:be:82:d2:8e:ef:58:b6:1d:28:c7:2a:55:61:b8:
38:80:6e:13:31:81:60:59:a2:c7:a0:41:8a:ea:21:
9d:ef:49:d3:bb:09:82:8a:d6:ff:7f:5d:88:2a:74:
d3:2f:44:26:b7:06:64:89:8f:fe:65:b8:a1:91:c6:
db:2c:fb:de:69:59:ae:dc:37:50:97:2b:4e:47:65:
9b:ce:05:c4:fa:59:6b:d5:4d:93:33:04:15:41:76:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:74:C1:03:B4:BA:32:9F:55:82:23:C1:6E:65:15:4A:8F:FC:C5
X509v3 Authority Key Identifier:
keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:2a:20:26:e4:b5:9e:03:78:a8:2a:b0:73:7a:5e:5b:82:9e:
4c:94:72:fa:c8:60:cb:1b:a2:e2:83:3f:f8:5a:ad:27:ab:ff:
da:08:8e:f3:f3:d5:f5:78:ec:02:e6:8d:ce:0a:e9:c1:a5:f9:
6d:6f:d4:05:5a:e6:1d:a8:b9:f2:7d:25:ea:2f:4f:84:5e:61:
94:ac:0b:8e:b9:1e:85:39:f3:8c:93:f9:93:b5:78:98:7f:10:
6f:2b:82:de:76:a1:15:8c:67:68:ab:00:5c:49:2d:bb:1b:cd:
ec:8b:2d:3f:e1:7f:69:d8:67:84:a0:52:36:09:35:32:b2:6a:
7e:64:1d:db:d8:b5:84:12:f5:fa:c1:94:06:6d:06:ec:53:2d:
47:e8:85:7a:6a:d6:cf:f5:b4:3f:a1:6f:2a:7f:a8:ce:57:85:
49:af:cc:ab:60:bf:bb:55:f0:65:f1:20:5d:1f:69:31:f9:e1:
5d:06:ec:9f:e6:17:93:ea:58:70:93:7d:0a:89:9a:f1:96:f9:
5d:90:c3:83:3d:e2:41:64:da:a3:41:2c:4b:f6:38:37:78:97:
d7:20:43:78:04:15:10:f9:24:48:85:58:0b:71:b6:46:31:0b:
ea:f3:4a:24:55:41:01:d0:53:46:5c:aa:5a:62:08:93:91:6e:
4a:5c:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:25:26 2026 by rpki-client