
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
File: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft (raw, json)
Hash identifier: CMTdXNo7y7maL7aIVUOhBq1vK3VYWFrUnJWeX6uiI44=
Subject key identifier: 12:A5:D9:49:57:69:DC:89:2F:CD:6B:ED:28:4A:B0:92:80:01:A3:30
Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
Certificate issuer: /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
Manifest number: 022A
Signing time: Mon 27 Jul 2026 04:17:23 +0000
Manifest this update: Mon 27 Jul 2026 04:17:23 +0000
Manifest next update: Mon 03 Aug 2026 04:17:23 +0000
Files and hashes: 1: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl (hash: GtyPsjLDD9ogAswz9A/XD2RpTVXc3WuBobYuZdh3DMA=)
2: 9B2C760CD89B11EF8D75534EC4F9AE02.roa (hash: hyI/PoaRKntL7XpUGJIJnV0DfJsuOHooYB61GtF+kzU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188CCC, serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Validity
Not Before: Jul 27 04:17:23 2026 GMT
Not After : Aug 3 04:17:23 2026 GMT
Subject: CN=6a66dbd3-9bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:1b:de:87:bd:d1:14:18:e7:b2:49:35:56:
51:83:7b:ba:fc:bd:55:0b:92:84:40:38:00:4e:fa:
6a:af:69:d7:a2:cf:36:57:3e:b2:79:1e:ee:69:7e:
7a:c3:ff:cb:e7:87:16:0c:48:ec:e8:7a:9b:4c:de:
24:f5:39:b1:4f:99:d5:4d:ac:38:7d:c4:d1:72:90:
7a:9a:a1:db:ec:67:bc:4c:3e:aa:53:7c:a9:1a:93:
6f:1f:81:dc:fc:b2:0f:ac:e2:a1:b5:12:53:32:29:
4d:0e:fa:8f:e2:00:97:e2:e6:56:3c:03:21:bf:51:
e3:0f:c9:46:5a:30:2c:e2:d7:0e:ae:e3:ff:73:2a:
21:9e:38:4b:23:eb:28:b0:04:a2:c5:91:af:24:23:
44:c6:28:65:43:1c:f8:08:ce:01:3f:a3:0a:ec:97:
01:eb:77:7f:4a:91:55:44:c4:eb:47:78:67:c5:3f:
1f:ac:24:bf:99:46:56:e3:57:f6:c4:d7:08:0d:d8:
1e:9b:43:42:63:77:33:13:36:05:57:52:fc:a7:36:
b5:bb:64:48:2c:d8:59:32:53:2f:67:1f:ad:6a:3e:
0d:b3:77:95:22:f2:77:7c:43:cf:df:16:16:84:ba:
95:dc:85:d1:12:ac:57:54:77:a8:bb:bb:53:a9:4a:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A5:D9:49:57:69:DC:89:2F:CD:6B:ED:28:4A:B0:92:80:01:A3:30
X509v3 Authority Key Identifier:
keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:72:d4:5e:41:c0:7e:04:d6:3e:46:6a:5f:de:29:6d:f9:83:
c0:c3:02:38:38:f9:e5:36:12:77:02:7b:83:48:eb:06:b0:69:
a8:3c:63:0c:47:16:d4:fe:c6:f7:c7:0c:a0:e5:72:c8:dd:43:
e1:b9:92:73:ab:cb:81:ca:c4:c7:2d:7a:2d:2d:0a:6e:2a:ae:
e7:ba:9e:af:7a:e4:14:f3:0c:e3:67:b9:53:2a:f2:9c:5d:28:
f6:52:1a:7e:63:13:70:8d:50:37:51:d6:a7:50:96:89:42:a2:
c1:77:75:2c:19:13:81:6a:23:7c:e2:c7:16:3b:7c:5a:3e:d2:
52:39:25:f0:04:71:7e:51:d3:0a:ac:e1:90:fb:7d:cf:f6:c7:
0f:19:2b:a8:27:ae:b1:c1:59:98:0a:f3:04:61:ae:38:a4:88:
68:de:87:7f:0a:3b:c4:cf:e9:f1:f9:69:cf:ee:05:27:91:df:
74:85:87:bb:a6:13:04:9b:19:ff:cd:73:46:58:ce:f6:f9:6c:
7b:6f:b6:3d:06:b7:49:3b:bd:ff:0b:81:c6:14:62:c7:1e:3a:
a1:b8:97:de:b9:8b:43:bc:fb:89:c0:f0:98:07:8b:f0:58:56:
c2:c1:8e:76:b2:76:e8:8a:63:35:92:d6:a0:48:31:4d:26:79:
d3:b5:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:39 2026 by rpki-client