
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
File: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft (raw, json)
Hash identifier: x7PmjIuAjX4UUpgPxZ/bDATKTkMm5ofTbTiPxU4uVA4=
Subject key identifier: BE:D5:7F:1C:74:E8:2E:01:52:33:10:94:0D:D8:6B:C2:86:4A:14:12
Authority key identifier: E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7
Certificate issuer: /CN=A9189D79/serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
Manifest number: 14
Signing time: Wed 15 Apr 2026 08:40:39 +0000
Manifest this update: Wed 15 Apr 2026 08:40:38 +0000
Manifest next update: Wed 22 Apr 2026 08:40:38 +0000
Files and hashes: 1: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl (hash: 1ygswI1Gfbzz9dogkjTJg1b1kR/m23xVk9CcH1J6bcw=)
2: 192C64F2252311F18B88524DC4833773.roa (hash: hVhdvs7GH6X86vaiCeryWerFVJfvpNrRVfFuhErwgtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl
rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D79, serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
Validity
Not Before: Apr 15 08:40:38 2026 GMT
Not After : Apr 22 08:40:38 2026 GMT
Subject: CN=69df4f06-6220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:d1:d3:df:dc:d4:9d:0c:61:d0:b8:60:5f:
2a:89:a8:c9:9a:95:7c:de:5f:95:b7:55:01:40:22:
2e:86:15:c0:27:4d:4e:c3:97:00:d3:61:50:e1:ed:
89:e7:1b:47:39:a1:a1:7f:9e:88:f1:0e:44:f3:85:
9d:60:2c:54:25:0d:aa:ac:0d:19:a3:68:26:5f:ca:
11:04:91:b8:28:76:f5:ad:b4:db:91:ea:21:e7:a6:
79:2c:c8:4a:a9:b0:74:c7:27:66:ce:89:fd:79:18:
9b:d2:57:7c:f9:74:81:4b:d8:93:4a:36:18:fe:25:
11:ee:b1:e6:ad:e1:58:b9:01:70:82:2d:01:d1:b6:
a5:a9:f9:4a:3f:23:81:92:ce:d7:56:71:f1:7e:1c:
36:93:df:36:bc:69:c9:56:10:e4:6e:f6:91:0b:d8:
9b:26:94:21:99:b8:67:a9:80:16:03:f0:fe:47:80:
a5:65:a0:b5:5b:af:c3:20:f6:e4:ec:69:bb:af:37:
4a:86:fe:53:ba:0a:76:38:c5:ff:5e:94:82:b2:09:
47:77:b5:3f:b8:47:51:05:58:d4:95:dc:f9:9e:e3:
46:d3:76:0b:76:9e:29:2f:77:6f:ed:01:9b:86:04:
31:a8:12:62:64:b7:d2:b3:9d:69:5b:8f:67:ae:6d:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:7F:1C:74:E8:2E:01:52:33:10:94:0D:D8:6B:C2:86:4A:14:12
X509v3 Authority Key Identifier:
keyid:E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:36:55:fa:f7:66:45:e3:b6:98:ea:44:3d:d5:09:86:3c:d8:
6d:42:bf:11:6a:53:8c:eb:7e:67:cf:9a:05:10:d3:d1:a9:8c:
17:15:89:e9:4e:8c:b8:ec:fb:55:fd:9e:b2:d5:fb:01:d6:b9:
72:4b:b0:c8:d8:02:1b:b9:4a:29:66:c4:36:c7:7f:60:21:36:
79:cb:66:17:4a:cb:bd:a5:31:d6:c0:93:89:af:0d:d2:4c:f8:
4d:36:68:cb:c4:3b:03:67:48:64:6f:7e:37:a9:5a:7f:84:ad:
d9:52:85:8a:77:18:f1:93:e8:a1:ec:d0:b9:fc:1d:4b:0a:bd:
28:bb:e0:82:09:d6:87:de:09:fd:de:53:01:53:bf:8e:3e:cb:
eb:b8:02:ed:1d:46:55:71:e6:e6:30:56:2c:e9:8d:d9:9d:63:
01:fe:6c:af:cb:0f:8d:64:96:0e:2f:72:2c:cd:68:22:c4:08:
06:e5:cd:c0:5e:1f:f8:5c:1f:35:1e:81:37:55:2e:f2:53:98:
91:1d:ff:94:41:a6:12:8c:14:ef:85:fc:c3:0d:69:ea:2a:eb:
ac:68:8a:42:8f:8c:fc:86:79:f7:e5:85:9a:41:3b:65:63:60:
ad:74:1d:86:8b:b2:76:84:66:59:1d:59:22:f9:59:55:4b:6f:
6c:61:b0:bf
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OUQ3OTExMC8GA1UEBRMoRTBFRTVGNUI0Q0NFNzJDMDJDQjFCMTY1REQ4RDZEMDNF
MTE4MTVDNzAeFw0yNjA0MTUwODQwMzhaFw0yNjA0MjIwODQwMzhaMBgxFjAUBgNV
BAMTDTY5ZGY0ZjA2LTYyMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCr2tHT39zUnQxh0LhgXyqJqMmalXzeX5W3VQFAIi6GFcAnTU7DlwDTYVDh7Ynn
G0c5oaF/nojxDkTzhZ1gLFQlDaqsDRmjaCZfyhEEkbgodvWttNuR6iHnpnksyEqp
sHTHJ2bOif15GJvSV3z5dIFL2JNKNhj+JRHuseat4Vi5AXCCLQHRtqWp+Uo/I4GS
ztdWcfF+HDaT3za8aclWEORu9pEL2JsmlCGZuGepgBYD8P5HgKVloLVbr8Mg9uTs
abuvN0qG/lO6CnY4xf9elIKyCUd3tT+4R1EFWNSV3Pme40bTdgt2nikvd2/tAZuG
BDGoEmJkt9KznWlbj2eubdGXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvtV/HHTo
LgFSMxCUDdhrwoZKFBIwHwYDVR0jBBgwFoAU4O5fW0zOcsAssbFl3Y1tA+EYFccw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDc5LzQzQzJBNjkyMjRE
QjExRjFCMUY1QkJBNUFDODMzNzczLzRPNWZXMHpPY3NBc3NiRmwzWTF0QS1FWUZj
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNE81Zlcwek9jc0Fzc2JGbDNZMXRBLUVZRmNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5
RDc5LzQzQzJBNjkyMjREQjExRjFCMUY1QkJBNUFDODMzNzczLzRPNWZXMHpPY3NB
c3NiRmwzWTF0QS1FWUZjYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAWNlX692ZF47aY6kQ91QmGPNhtQr8RalOM635nz5oFENPRqYwXFYnpToy47PtV
/Z6y1fsB1rlyS7DI2AIbuUopZsQ2x39gITZ5y2YXSsu9pTHWwJOJrw3STPhNNmjL
xDsDZ0hkb343qVp/hK3ZUoWKdxjxk+ih7NC5/B1LCr0ou+CCCdaH3gn93lMBU7+O
PsvruALtHUZVcebmMFYs6Y3ZnWMB/myvyw+NZJYOL3IszWgixAgG5c3AXh/4XB81
HoE3VS7yU5iRHf+UQaYSjBTvhfzDDWnqKuusaIpCj4z8hnn35YWaQTtlY2CtdB2G
i7J2hGZZHVki+VlVS29sYbC/
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:29 2026 by rpki-client