
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
File: OY22Qj_F4Pd3TyozMdfbzErb9TY.mft (raw, json)
Hash identifier: U/jRCuvOO7GIpFK3EENjh6HneOu5deS3bKtu0HksrEk=
Subject key identifier: 23:3F:B0:94:5A:9A:05:0D:BA:EB:D9:28:00:7F:C4:72:8B:5B:E4:F7
Authority key identifier: 39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36
Certificate issuer: /CN=A9111E74/serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
Manifest number: A6
Signing time: Mon 31 Aug 2026 07:36:42 +0000
Manifest this update: Mon 31 Aug 2026 07:36:42 +0000
Manifest next update: Mon 07 Sep 2026 07:36:42 +0000
Files and hashes: 1: OY22Qj_F4Pd3TyozMdfbzErb9TY.crl (hash: gni+UT2s7e9pYnecrJi6WU/rhHLtGtts/mL2No/GKM4=)
2: 7A55B678AB4511F091F88158C4F9AE02.roa (hash: Wng56oLjuTsFNRlXa6eaKE0Fy3bZOd74sr2bgIylAjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl
rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 07:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111E74, serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536
Validity
Not Before: Aug 31 07:36:42 2026 GMT
Not After : Sep 7 07:36:42 2026 GMT
Subject: CN=6a952f0a-4a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:7b:8e:eb:19:b0:58:6e:e9:3c:9b:ce:50:
9b:c8:ab:75:37:01:da:38:d0:84:c7:20:8a:87:0e:
13:2a:1b:68:28:61:bc:cb:bb:4a:8c:5a:2a:c9:ec:
cf:b0:aa:12:a2:27:a0:74:8c:b0:e3:01:8d:8a:bf:
aa:ce:d0:90:80:57:67:13:59:cc:ce:b4:e9:f6:9d:
0e:04:1a:a4:74:50:85:b6:7f:e6:81:5e:0b:b8:79:
bc:77:5d:a2:38:ac:b7:c6:b7:1b:6c:48:ad:92:5b:
40:73:cb:6b:70:12:ae:4e:82:b1:25:87:28:de:a8:
e0:e4:b3:b9:82:55:7c:92:7b:99:a2:bd:c6:76:04:
38:31:f3:1d:11:42:0b:8b:7c:bf:9e:32:4c:11:46:
ff:ed:3a:c3:f3:e0:2a:95:71:8b:ce:59:c6:02:d0:
45:ad:e4:f2:3e:4d:e4:77:9a:a0:42:9e:7f:0f:75:
6c:01:f4:28:5a:25:1d:e5:1a:98:7b:72:20:67:29:
b3:c9:75:17:63:ee:c9:5e:e8:67:43:7d:7b:2f:25:
26:83:7f:f7:ea:1b:49:a0:58:58:c3:43:aa:28:1f:
ca:ce:a6:c5:53:62:b7:56:a0:9a:9b:4c:3a:6c:19:
8b:39:c8:13:3e:1b:bb:f1:10:9e:18:ec:a8:6e:b8:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:B0:94:5A:9A:05:0D:BA:EB:D9:28:00:7F:C4:72:8B:5B:E4:F7
X509v3 Authority Key Identifier:
keyid:39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:b3:36:f4:76:51:8b:03:cf:ff:f9:97:49:b3:eb:5c:d3:a3:
21:75:13:67:df:12:0d:2a:68:d7:e3:ff:13:09:60:89:73:bf:
f8:73:15:4c:11:d6:46:fb:ee:a3:84:8a:f1:be:9d:4c:90:a8:
cd:b4:15:94:31:42:28:21:fc:67:df:4b:03:1c:fa:b0:62:a8:
9f:02:a7:a5:76:4d:c4:21:d4:66:b6:0c:01:0e:7b:27:aa:8b:
e9:39:a3:a2:55:d0:48:64:e5:2e:b0:33:03:dc:70:cf:48:94:
b2:6b:f0:45:a2:48:36:96:d9:ea:cb:97:22:56:ab:fc:db:6a:
e3:94:21:03:9b:a9:b4:ac:67:48:8c:7f:38:46:c8:7b:3d:9b:
62:8f:a5:41:38:17:3a:ab:cd:b8:8d:bb:c5:92:43:08:b6:40:
fb:63:6b:01:a8:eb:31:e8:a7:39:13:80:e5:7e:2b:51:88:36:
e6:fd:4b:5e:51:ff:15:9a:9a:e2:51:8c:a6:a3:0d:a5:0e:83:
fc:89:f5:55:c4:9f:5a:ca:95:32:74:73:df:c8:59:97:78:07:
9b:83:78:25:ba:37:17:f8:68:6d:8a:52:e7:c1:b1:58:70:22:
14:28:ad:ea:bb:31:ec:95:c3:4c:3f:0a:de:ea:72:5f:1f:2a:
1b:ac:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:47:26 2026 by rpki-client