
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json)
Hash identifier: 6Y7eZJB+71e/D6fABZ93aLXuLNiMR87ZisB07BI1ve0=
Subject key identifier: 3B:DA:62:0D:90:7E:52:9B:15:38:98:0C:92:2C:60:3C:78:7B:3A:1A
Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Certificate serial: 1EB4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
Manifest number: 1E9B
Signing time: Sat 28 Feb 2026 16:05:28 +0000
Manifest this update: Sat 28 Feb 2026 16:05:27 +0000
Manifest next update: Sat 07 Mar 2026 16:05:27 +0000
Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: KYLC1jaY1eOChcLK6y6MrXWrDrQOaF/CMPQ4odRyATo=)
2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: UxhWyZVVGOaHnTJ2ecJ+4EhY7aL+ZMo65cqrYb+GALY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl
rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7860 (0x1eb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180562, serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Validity
Not Before: Feb 28 16:05:27 2026 GMT
Not After : Mar 7 16:05:27 2026 GMT
Subject: CN=69a31248-11ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:32:03:9b:89:ec:88:5b:e7:1f:85:1b:02:
33:58:ae:2b:bb:39:b0:bc:af:10:4d:85:b1:4d:5e:
94:47:d8:45:ea:58:b9:0a:dc:62:89:87:0c:ad:2b:
56:99:6a:00:e1:9b:b3:40:9b:1e:72:41:b5:95:a5:
a7:31:5d:15:50:11:13:ed:e1:03:2c:6f:78:e7:18:
92:e5:46:dd:3f:22:8b:f7:8a:71:0a:04:f3:56:4d:
53:ee:56:b1:94:a7:ff:91:29:09:97:30:6b:e5:8c:
03:b0:93:b8:e5:0f:06:a2:dd:bc:e8:5d:31:5d:22:
bf:61:e9:a6:cf:d6:1c:13:8b:86:da:8f:66:18:c2:
20:f5:e3:7b:0a:f0:03:be:25:8b:e8:50:ec:8c:64:
eb:6a:c8:75:1a:23:be:04:b8:7d:ab:80:8c:e7:38:
e4:41:43:3f:24:d8:52:0b:99:56:ce:c1:ad:6d:c2:
61:c4:57:ca:56:58:5d:55:6d:df:f4:0c:fc:a3:34:
26:de:63:d8:be:a5:13:1d:fe:48:5d:e9:16:2d:b2:
cf:c1:7d:d8:ba:9f:79:b4:6d:36:5f:27:bb:6c:a5:
da:dd:8e:44:3c:c5:7f:b2:07:6f:62:1b:90:72:f6:
6d:ea:73:f3:8c:c8:86:f2:fb:a0:42:17:45:23:ac:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DA:62:0D:90:7E:52:9B:15:38:98:0C:92:2C:60:3C:78:7B:3A:1A
X509v3 Authority Key Identifier:
keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:a4:87:91:68:3c:76:00:ab:b0:62:d0:a3:83:43:30:52:65:
a5:d6:d9:6b:be:54:45:fd:af:11:63:38:3f:0a:3a:39:f6:84:
48:e6:34:f9:3d:90:6e:95:eb:fa:ea:6a:b8:52:c7:cb:81:c9:
26:cb:73:5d:15:9b:10:dc:07:a0:18:e3:a6:b5:09:80:8f:36:
b7:42:69:87:bf:16:e1:a4:00:f3:35:60:45:e1:f9:a1:0c:fd:
3e:96:76:39:1b:bd:31:ae:a3:cb:8e:0a:16:a5:b2:dc:b6:01:
a0:28:7c:8c:55:26:06:ac:7e:3e:32:af:99:28:95:40:cb:33:
66:aa:a3:4b:b0:57:d1:d6:b1:13:85:a0:c0:11:1f:41:c4:28:
2a:07:03:13:1a:65:7b:b3:41:5b:71:45:e1:d1:fa:a8:00:0d:
c7:3e:c5:56:cd:68:91:ef:b0:46:91:e7:48:dc:4c:8c:ba:a7:
d9:3f:de:2a:76:bf:13:b2:98:9f:5c:ba:6a:49:ff:a8:ff:50:
f1:36:c2:33:a0:6f:1e:9c:cd:06:65:1c:74:a7:61:fd:5a:27:
ff:8a:a3:d4:2a:68:4b:63:b0:64:ac:ea:ae:eb:60:0e:cf:a7:
58:11:51:fa:d4:ed:26:03:0e:4a:88:5e:f6:40:ff:ca:3c:19:
0c:d9:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:39 2026 by rpki-client