
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
File: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft (raw, json)
Hash identifier: eDT0ukZeTBSHyjc5Z/P8cNCVIRK61MURvmCnQhNLxBw=
Subject key identifier: DF:D4:35:28:43:DF:26:84:21:0B:61:44:39:DD:C4:60:DD:FC:DA:EA
Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
Certificate issuer: /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
Manifest number: 0214
Signing time: Sat 13 Jun 2026 02:59:08 +0000
Manifest this update: Sat 13 Jun 2026 02:59:08 +0000
Manifest next update: Sat 20 Jun 2026 02:59:08 +0000
Files and hashes: 1: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl (hash: 8wPV0kNk41VDTNGEqbWmyZrYkvuY2ufm/Y45r3rnPL4=)
2: 9B2C760CD89B11EF8D75534EC4F9AE02.roa (hash: hyI/PoaRKntL7XpUGJIJnV0DfJsuOHooYB61GtF+kzU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188CCC, serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Validity
Not Before: Jun 13 02:59:08 2026 GMT
Not After : Jun 20 02:59:08 2026 GMT
Subject: CN=6a2cc77c-aae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:9e:fe:d8:37:f8:59:31:c0:06:cf:79:42:
86:2c:74:6e:b7:93:20:03:70:79:56:14:5b:6c:20:
b5:cf:fe:87:c1:4b:aa:77:5d:3f:ce:bd:1b:49:d7:
7a:da:dc:35:0c:73:5a:90:2a:f2:e3:d9:47:c6:83:
10:24:40:75:35:0c:60:0c:6a:d7:c6:02:a0:be:3a:
61:2e:52:38:ff:ac:34:f1:d3:bf:d0:b9:fb:24:c7:
99:ae:11:09:93:90:59:b7:78:a2:af:ea:70:80:41:
fa:c2:00:ea:dd:a6:fa:21:96:93:42:96:42:f5:c1:
18:2f:9c:e6:86:49:2a:9a:f5:e7:8b:18:98:58:0b:
c1:4d:3c:11:da:a3:37:cf:4d:43:06:96:ea:07:f5:
a1:46:7a:77:dd:8f:fa:e5:ff:b0:ac:1a:ae:3b:f0:
e0:c9:91:72:5e:4c:80:91:08:db:83:a8:f5:86:62:
a6:7d:59:71:ee:47:84:e4:0d:e8:5f:a6:0d:20:bc:
19:91:e4:9e:b5:71:bb:02:49:53:b1:4e:a2:33:84:
28:27:bd:ab:9d:a0:27:0b:6d:cd:e9:31:0c:39:bf:
04:a6:7a:9f:0e:24:74:7e:c3:2c:d8:29:24:9b:f7:
ae:b0:11:94:97:5f:83:7d:da:57:ad:81:03:41:55:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D4:35:28:43:DF:26:84:21:0B:61:44:39:DD:C4:60:DD:FC:DA:EA
X509v3 Authority Key Identifier:
keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:16:77:d3:76:9d:d8:c1:e6:e6:a6:e8:ae:1b:40:a2:a6:14:
c4:b8:d2:36:c3:b2:d0:c9:ad:5c:22:c4:81:a5:9f:0c:16:eb:
c4:01:5d:d9:9c:7d:80:b4:4a:f3:78:33:84:85:ac:c4:39:c2:
1b:21:77:d5:ae:a2:ec:ff:6c:e9:be:80:f9:e8:08:16:01:f3:
c4:4c:09:60:74:5c:ac:98:7e:b1:08:22:fe:37:89:c7:a3:a0:
d8:9d:dd:25:41:c5:cd:dd:13:95:f7:69:bb:3c:46:48:35:f0:
dd:e3:3b:6f:e1:75:0f:5f:d6:0c:cb:fc:ed:0a:75:cb:40:00:
2a:76:c5:e1:d6:6a:22:77:cc:75:f8:65:43:bf:a8:e7:6b:98:
b6:fc:c6:30:72:c8:5e:d0:a2:5f:6b:a3:eb:28:10:e9:9a:27:
36:3d:26:1a:8b:1f:dd:2e:24:32:f7:33:f6:a9:43:0b:5c:85:
a7:df:1a:7a:82:e6:98:c3:4b:6e:f0:cf:fc:ae:00:c1:5b:fa:
f8:c7:43:ca:d4:b8:b4:b6:e8:62:7d:43:39:34:82:9d:e7:6f:
a1:7c:8b:f5:ad:d7:7d:c9:f7:7f:6d:d1:33:29:7e:54:94:03:
50:50:b2:65:27:4b:78:1f:e2:e3:47:f3:31:9d:0a:c3:94:14:
83:f5:37:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:27 2026 by rpki-client