
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
File: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft (raw, json)
Hash identifier: ndqZz3E1ewYTWmsWxQpA2aATBDvRflyfA3Gj/nNkmiI=
Subject key identifier: F0:09:68:64:00:07:5D:FB:1F:B7:4B:E1:50:4B:00:14:CC:54:90:2F
Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
Certificate issuer: /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
Manifest number: 01F9
Signing time: Sun 19 Apr 2026 02:58:24 +0000
Manifest this update: Sun 19 Apr 2026 02:58:23 +0000
Manifest next update: Sun 26 Apr 2026 02:58:23 +0000
Files and hashes: 1: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl (hash: 0iddKQTZCVFDAtf987EdUJGc4vu16Ml9YxGlIVPll+g=)
2: 9B2C760CD89B11EF8D75534EC4F9AE02.roa (hash: hyI/PoaRKntL7XpUGJIJnV0DfJsuOHooYB61GtF+kzU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188CCC, serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Validity
Not Before: Apr 19 02:58:23 2026 GMT
Not After : Apr 26 02:58:23 2026 GMT
Subject: CN=69e444d0-2ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:55:dc:e7:40:af:03:39:ba:f2:0b:5c:52:
35:be:10:f9:23:65:10:e3:b0:80:f7:30:2f:b1:b8:
ac:0d:42:02:1c:90:96:1a:c0:80:fc:2e:c8:1e:2a:
ae:b7:64:22:ca:60:31:f0:c6:c2:c5:83:77:ab:b3:
03:60:1e:8b:cc:5f:41:2b:05:c0:cf:62:64:a4:95:
02:07:1f:94:ef:b1:90:8f:38:00:f2:67:a7:8f:0f:
18:3d:3e:33:25:4e:9e:1d:cc:d6:d7:4f:d8:c7:76:
77:e2:b6:08:a3:58:aa:ff:b5:4f:e9:34:02:86:02:
85:50:4a:7c:2c:a2:35:03:b7:fb:9c:a8:9e:53:87:
62:89:17:1a:be:47:c2:9c:21:fd:fa:ef:39:98:91:
c4:a5:2e:0e:1a:a4:23:58:69:c9:f8:60:3a:1a:8a:
92:f1:44:b7:4b:d6:2c:cb:47:eb:71:7a:38:16:4e:
b3:74:0b:15:0b:00:28:36:31:10:c5:d7:d3:08:01:
b6:6c:71:b0:51:4f:b1:57:7b:8e:59:2b:f5:03:34:
80:89:94:f9:0b:8f:0a:c8:ff:b6:d1:9d:f0:3f:aa:
62:6b:0f:61:9a:4e:f1:9d:1c:a0:5f:c3:8b:cb:09:
9f:07:99:d3:ac:a6:67:07:86:63:6b:22:6c:8f:39:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:09:68:64:00:07:5D:FB:1F:B7:4B:E1:50:4B:00:14:CC:54:90:2F
X509v3 Authority Key Identifier:
keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:67:ee:bb:a5:c8:a4:81:00:bd:e4:ff:bf:a7:79:6d:52:b7:
ea:0d:41:51:83:5b:f4:e9:a5:ae:43:f8:27:7a:d8:10:c4:74:
c2:55:41:c6:76:cb:53:88:2e:0f:7a:f2:12:b6:67:ce:ea:0b:
2e:1f:7c:ed:4d:4f:af:39:8d:05:4c:9f:b9:1e:a4:af:8f:0f:
25:e4:c4:17:dd:fe:5d:83:53:35:22:53:c7:37:5f:4f:41:4d:
eb:5f:20:ef:85:98:3e:c2:44:0d:c4:f4:a0:bd:ce:85:ce:d0:
b7:53:46:49:74:51:84:53:ec:90:05:bd:25:0c:cf:ac:6c:55:
f0:eb:f7:2e:46:05:ab:3b:94:07:14:60:f5:3d:ed:c6:a3:90:
69:05:78:3f:d4:9a:aa:b1:8e:9d:24:a0:61:31:4d:91:57:50:
48:31:79:ac:15:fd:f4:36:d3:a6:a8:6e:6f:7e:4a:a8:53:03:
ee:8d:94:ce:17:a7:59:44:bb:f3:5a:97:7c:c1:5e:a4:16:8b:
c5:27:84:0a:5f:98:ba:f8:ab:32:48:bc:01:d0:9e:51:34:8c:
a2:ef:ec:fd:5c:bb:51:e8:01:04:e8:78:29:55:0d:eb:0e:7b:
91:70:5e:50:e6:79:64:88:95:28:1d:4d:f0:f2:8c:83:a2:07:
88:e8:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:33 2026 by rpki-client