
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json)
Hash identifier: tVgBVSUKUcbTO/ydmxSbk9lZlohBI7uWQH/S4/liG+8=
Subject key identifier: 4F:56:60:DF:4A:82:B2:5A:2D:CA:B4:84:3C:5C:07:BA:BE:1D:97:01
Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
Manifest number: 019D
Signing time: Sun 05 Apr 2026 03:45:14 +0000
Manifest this update: Sun 05 Apr 2026 03:45:14 +0000
Manifest next update: Sun 12 Apr 2026 03:45:14 +0000
Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: 98X9P44yeEIDlbm61vAhBgYk7RUVveS9upU/ApgOQ/Y=)
2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: kEA6yeUhDISU7WpJDe7H86w819sEogR4lALDsAB0ROU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Validity
Not Before: Apr 5 03:45:14 2026 GMT
Not After : Apr 12 03:45:14 2026 GMT
Subject: CN=69d1daca-0adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:65:b0:f0:83:0a:6d:4f:b3:6b:cd:5e:85:
c4:f0:a9:4d:12:1f:69:16:3b:3a:c6:40:ba:9a:59:
58:0e:b5:c6:34:7a:93:5b:25:3f:af:e6:1a:72:a0:
0e:00:d0:40:08:77:a7:c5:0b:ef:3b:dc:17:db:a1:
bc:2e:e9:7b:a3:58:12:ac:2b:76:11:39:1b:e8:6b:
2a:ab:51:17:79:3f:d0:da:b9:34:62:d1:29:95:9a:
a5:25:44:5a:47:3b:a1:0d:59:11:44:d5:92:39:79:
3a:fa:3c:7f:d2:4d:ac:b2:20:08:b8:bf:87:51:62:
4b:0a:cd:da:50:dc:0e:49:15:93:61:76:b2:fe:d1:
c3:b9:b5:73:c9:71:7e:c2:4a:84:d6:da:34:8e:cf:
f9:9b:5c:70:ff:0a:e8:61:b3:4c:d5:22:48:e7:3f:
b5:1a:32:f2:d7:65:ff:eb:94:57:70:75:7c:18:4e:
32:d3:79:bc:f1:63:0e:88:82:bf:f1:42:73:ae:44:
ab:be:d9:c7:a2:53:6f:bd:5b:1c:09:2f:ff:8c:11:
7c:2a:d7:dd:bc:7f:8b:cd:09:78:46:05:fb:52:2a:
1d:43:e4:a3:4e:cf:da:6f:94:24:f2:74:76:b7:ec:
6d:b2:15:17:08:9c:83:d0:f7:67:cc:30:c3:3e:66:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:60:DF:4A:82:B2:5A:2D:CA:B4:84:3C:5C:07:BA:BE:1D:97:01
X509v3 Authority Key Identifier:
keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0e:b1:a2:d5:46:5c:71:5e:5d:07:52:9d:2f:ac:d6:3b:e2:
f5:3e:5c:23:a2:89:97:80:8e:a6:34:e4:70:32:a0:ad:11:c4:
00:80:98:57:d5:42:38:ef:20:29:b0:1d:4c:82:08:46:8c:0c:
f7:38:1d:47:bc:4d:8e:c3:04:d2:93:9a:c5:54:11:52:69:bc:
77:23:cb:c2:f3:2f:74:57:28:29:0b:cd:fc:6b:72:c7:87:8f:
2a:32:c9:ca:33:fc:4b:eb:51:23:e4:c0:7b:73:36:46:25:79:
86:2c:84:18:9f:82:27:a4:9b:77:0d:85:7c:5b:b3:ea:cf:3a:
81:b2:c5:17:36:9a:f6:6d:47:82:df:4c:43:7c:34:f4:52:d8:
fe:28:c3:32:86:b0:f8:2c:96:97:79:4d:ad:ab:74:36:33:5e:
17:4f:d9:82:2a:a2:cb:b6:39:78:72:fc:fe:cd:5a:ed:94:db:
2b:8e:02:bf:2c:20:5d:19:fc:58:a0:32:f7:5e:66:3c:dc:8b:
a8:89:8d:ef:4d:bc:61:d6:04:f3:78:35:f0:c9:78:9c:d7:3b:
8d:79:cb:80:e4:da:67:29:c0:33:90:6c:d8:3b:ff:ad:6d:e6:
cd:8a:06:36:c4:32:a7:74:4d:1e:d7:22:45:2f:3d:08:ea:a4:
90:2c:a7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:40:13 2026 by rpki-client