
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
File: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft (raw, json)
Hash identifier: iO9VMKDuIiJHNlJDwKqfSVDg9942ww5OA5nixIOltKw=
Subject key identifier: 9E:84:4C:92:13:A4:6F:49:61:A8:FD:EF:84:6D:54:13:38:69:10:03
Authority key identifier: E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E
Certificate issuer: /CN=A9190059/serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
Manifest number: 4B
Signing time: Fri 17 Apr 2026 08:02:18 +0000
Manifest this update: Fri 17 Apr 2026 08:02:17 +0000
Manifest next update: Fri 24 Apr 2026 08:02:17 +0000
Files and hashes: 1: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl (hash: EDtNWYvDAFyfV9uyWI22AH+y/Z6kQf6TKajHk9eAonQ=)
2: 0DA28718CE5E11F084703925C4F9AE02.roa (hash: aNAGDtc4oo9p4iSroAq26pCHqmBV0FiomHYHA3EdekQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl
rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190059, serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
Validity
Not Before: Apr 17 08:02:17 2026 GMT
Not After : Apr 24 08:02:17 2026 GMT
Subject: CN=69e1e90a-c62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:29:ff:cc:b1:51:6f:37:56:a4:2e:97:4b:
69:47:40:7b:93:af:23:bc:61:1d:b4:e8:47:68:4e:
20:27:80:51:7c:f5:24:76:af:7d:3d:80:26:74:87:
9c:00:c4:98:a4:72:cb:5d:76:a8:0b:53:6f:ae:68:
73:61:7f:49:04:ef:9f:7e:ba:d1:8c:46:5f:42:06:
57:8d:5f:a0:23:42:60:97:fc:6c:c0:83:40:cc:3d:
9b:38:e1:2b:39:e2:f8:23:4d:5c:6d:45:7c:d6:53:
3b:3f:06:da:a4:aa:ac:d1:73:d5:87:56:ff:ca:fa:
13:5a:24:6b:f9:81:9a:2d:79:f9:e9:31:46:10:25:
6e:fc:15:20:45:17:d4:98:b8:43:c3:b9:d1:b4:83:
c2:d4:69:7b:52:a6:31:df:07:f4:5f:e5:b9:1b:78:
cc:18:6d:6c:89:3f:a9:7d:f8:e9:f8:a0:cf:21:8d:
86:47:b8:cb:39:9f:78:18:7f:e5:29:7e:bd:3d:02:
35:fa:81:0f:5e:17:97:18:75:8d:e0:29:e5:24:18:
92:42:18:5b:08:e3:61:39:d9:6d:e2:9c:47:7b:69:
70:6f:44:c4:9c:eb:13:06:07:12:b1:c1:e4:9c:0c:
27:45:83:f1:85:b8:3c:36:1b:a9:5f:9f:52:ee:95:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:4C:92:13:A4:6F:49:61:A8:FD:EF:84:6D:54:13:38:69:10:03
X509v3 Authority Key Identifier:
keyid:E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:04:87:b4:f5:f9:8e:0f:8d:5e:16:aa:f4:df:6d:24:76:a8:
14:45:a1:d9:64:df:1c:73:dd:8e:cf:41:c8:7e:a0:e1:ce:44:
8f:85:31:b7:27:57:38:1b:e3:df:7d:a3:14:c0:31:ff:b3:cd:
df:7d:cf:43:e6:7d:de:21:1a:ba:c3:c2:5a:5e:48:32:fb:b8:
9e:a3:4b:79:19:7a:36:8f:1c:bf:63:c2:a2:2d:ef:ad:0a:3e:
2a:b5:19:85:53:b2:ca:bb:ea:75:a0:cb:a0:b9:42:60:9b:78:
1c:c4:4a:c2:48:c7:9c:fb:64:d9:78:9e:3e:cd:16:d3:bd:e0:
c0:b8:1e:9d:9b:98:b1:af:1c:c2:b5:41:43:a5:40:d3:ee:73:
11:7f:7a:c1:98:c5:bc:c2:5d:80:6c:ed:8a:9a:45:ed:a7:54:
87:de:60:29:2d:dd:30:d4:2a:01:ec:fa:6e:a8:b1:d7:51:71:
d9:5d:23:42:c1:d2:2e:ae:38:f4:6b:6f:80:ce:8a:53:02:39:
2b:7e:58:a6:e6:81:88:85:68:28:57:a8:5b:21:88:9d:38:ce:
bc:46:99:80:69:b5:cf:9a:53:85:3d:87:f6:f0:4d:71:7d:5d:
95:16:b0:56:2b:a7:b2:8b:78:4d:cb:43:92:08:5d:6b:49:22:
b2:5a:ae:15
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MDA1OTExMC8GA1UEBRMoRTAyNDM1RDUxMzQ5M0MzRDQxM0QzMUVEMUY4RTBEQ0Ez
MEFFMEM5RTAeFw0yNjA0MTcwODAyMTdaFw0yNjA0MjQwODAyMTdaMBgxFjAUBgNV
BAMTDTY5ZTFlOTBhLWM2MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbCSn/zLFRbzdWpC6XS2lHQHuTryO8YR206EdoTiAngFF89SR2r309gCZ0h5wA
xJikcstddqgLU2+uaHNhf0kE759+utGMRl9CBleNX6AjQmCX/GzAg0DMPZs44Ss5
4vgjTVxtRXzWUzs/BtqkqqzRc9WHVv/K+hNaJGv5gZotefnpMUYQJW78FSBFF9SY
uEPDudG0g8LUaXtSpjHfB/Rf5bkbeMwYbWyJP6l9+On4oM8hjYZHuMs5n3gYf+Up
fr09AjX6gQ9eF5cYdY3gKeUkGJJCGFsI42E52W3inEd7aXBvRMSc6xMGBxKxweSc
DCdFg/GFuDw2G6lfn1LulYVTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnoRMkhOk
b0lhqP3vhG1UEzhpEAMwHwYDVR0jBBgwFoAU4CQ11RNJPD1BPTHtH44NyjCuDJ4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwMDU5LzQ3OTk5NDlFQ0U1
RDExRjBBMzM0Q0U3NEM0RjlBRTAyLzRDUTExUk5KUEQxQlBUSHRINDROeWpDdURK
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNENRMTFSTkpQRDFCUFRIdEg0NE55akN1REo0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw
MDU5LzQ3OTk5NDlFQ0U1RDExRjBBMzM0Q0U3NEM0RjlBRTAyLzRDUTExUk5KUEQx
QlBUSHRINDROeWpDdURKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQALBIe09fmOD41eFqr0320kdqgURaHZZN8cc92Oz0HIfqDhzkSPhTG3J1c4G+Pf
faMUwDH/s83ffc9D5n3eIRq6w8JaXkgy+7ieo0t5GXo2jxy/Y8KiLe+tCj4qtRmF
U7LKu+p1oMuguUJgm3gcxErCSMec+2TZeJ4+zRbTveDAuB6dm5ixrxzCtUFDpUDT
7nMRf3rBmMW8wl2AbO2KmkXtp1SH3mApLd0w1CoB7PpuqLHXUXHZXSNCwdIurjj0
a2+AzopTAjkrflim5oGIhWgoV6hbIYidOM68RpmAabXPmlOFPYf28E1xfV2VFrBW
K6eyi3hNy0OSCF1rSSKyWq4V
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:36 2026 by rpki-client