
$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json)
Hash identifier: rJhZix4og/n1Y3oiRNeTUEPWZepuSK+Clpjzq2Hwxak=
Subject key identifier: F1:F9:7E:9D:F1:18:74:5D:9D:F1:03:E3:FA:24:5A:3C:50:5A:F2:CE
Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
Manifest number: 9B
Signing time: Sun 05 Apr 2026 06:45:20 +0000
Manifest this update: Sun 05 Apr 2026 06:45:20 +0000
Manifest next update: Sun 12 Apr 2026 06:45:20 +0000
Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: /St/vPeNUKoTee+vWWXVIueeRsPMNFIVLedMoiSF9S8=)
2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: 5L0n0AuaZsG9RN1VkF1qu4foHDeiS87d8mBxLuyWIUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Validity
Not Before: Apr 5 06:45:20 2026 GMT
Not After : Apr 12 06:45:20 2026 GMT
Subject: CN=69d20500-bba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:a1:ad:fe:7c:9e:b9:d7:32:81:51:29:b8:
a7:71:67:1c:18:27:7c:cb:c1:fd:a2:d9:6e:e7:ee:
02:fa:3c:3b:c2:94:2f:a3:ab:02:0d:f9:67:89:ba:
12:37:8d:c3:5c:c7:1b:59:5e:d9:84:68:48:8c:42:
9b:5d:3e:3f:90:53:dc:29:99:44:21:ee:d4:1f:04:
d1:95:ea:94:81:11:d4:86:fd:fd:4f:57:5e:58:1a:
ac:6f:f8:4b:d0:8d:cb:3a:6a:81:36:30:d6:13:40:
65:57:6b:bb:46:07:a6:85:46:af:81:42:d7:0d:34:
1f:a4:5a:d7:8f:9d:8f:01:1f:62:80:3a:6e:f1:26:
3f:e8:24:29:63:40:6d:2b:b4:2b:ff:f5:fa:d2:f1:
44:48:56:13:b3:dd:52:ae:15:68:98:77:7f:17:00:
04:ed:05:5b:94:df:f7:d0:87:6a:22:fa:c2:fe:f9:
25:72:48:e9:15:f2:ac:d9:14:a4:43:00:44:8f:62:
39:77:98:8e:29:bd:99:93:49:12:b5:88:85:30:d4:
82:4d:89:e3:11:4e:b7:d0:e1:f7:9a:ea:9c:48:c4:
41:ed:d0:6c:cb:c6:b8:85:95:54:47:b2:6e:6e:46:
c4:3d:0b:72:1f:5e:d2:a2:9a:ca:e8:12:9a:48:5f:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F9:7E:9D:F1:18:74:5D:9D:F1:03:E3:FA:24:5A:3C:50:5A:F2:CE
X509v3 Authority Key Identifier:
keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:40:83:bb:3d:8a:cd:f5:57:fe:6c:af:38:99:02:d0:86:3f:
41:c3:7b:20:d7:39:28:1a:59:d5:0c:a2:80:0b:b2:73:07:0d:
b3:fc:cf:ba:8e:68:a9:c7:5c:1a:c0:79:41:c1:cd:e1:ab:01:
4d:28:be:b7:8d:5c:70:6d:d0:24:55:b5:37:bc:b6:0e:a4:20:
e4:80:2f:7c:5b:8e:41:2f:6a:11:3e:c6:28:36:2b:31:11:5f:
a8:6e:2c:fa:7d:d0:a5:47:bb:c9:c2:9f:dd:63:91:ad:7d:a2:
b1:05:1e:d4:69:cb:3a:fc:92:0b:a3:ee:ec:f0:08:7a:29:ba:
c3:f5:fd:a7:4d:24:c9:8d:28:ab:c7:88:3c:02:48:e2:ab:60:
b9:90:73:af:56:cc:c5:cd:dd:9b:62:7e:a7:15:f6:85:64:45:
56:0a:96:68:1e:0f:fa:2c:1e:3b:7d:bc:e0:43:af:eb:55:95:
b2:b8:be:1b:a7:29:47:8c:a9:10:93:4d:f3:b5:f7:ec:5e:b8:
f9:8f:fa:8f:68:92:a6:2b:c5:59:ac:ce:19:fb:6e:16:66:7b:
1b:f7:b5:40:5a:11:7a:7e:be:6d:de:f3:9e:85:61:05:93:b0:
df:66:98:e5:41:86:9a:29:7f:1d:7c:5e:bf:48:45:64:5f:db:
5f:2c:f9:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc1MEIxMTAvBgNVBAUTKDNCODM1ODUzNUJDNjI4NTY0QUY1NkYzMUQ4NzU4NjQ4
RTFEMDQzMDQwHhcNMjYwNDA1MDY0NTIwWhcNMjYwNDEyMDY0NTIwWjAYMRYwFAYD
VQQDEw02OWQyMDUwMC1iYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlMKhrf58nrnXMoFRKbincWccGCd8y8H9otlu5+4C+jw7wpQvo6sCDflniboS
N43DXMcbWV7ZhGhIjEKbXT4/kFPcKZlEIe7UHwTRleqUgRHUhv39T1deWBqsb/hL
0I3LOmqBNjDWE0BlV2u7RgemhUavgULXDTQfpFrXj52PAR9igDpu8SY/6CQpY0Bt
K7Qr//X60vFESFYTs91SrhVomHd/FwAE7QVblN/30IdqIvrC/vklckjpFfKs2RSk
QwBEj2I5d5iOKb2Zk0kStYiFMNSCTYnjEU630OH3muqcSMRB7dBsy8a4hZVUR7Ju
bkbEPQtyH17SoprK6BKaSF8VXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPH5fp3x
GHRdnfED4/okWjxQWvLOMB8GA1UdIwQYMBaAFDuDWFNbxihWSvVvMdh1hkjh0EME
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzUwQi82NEQwNzc0ODQ2
OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9PNE5ZVTF2R0tGWks5Vzh4MkhXR1NPSFFR
d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL080TllVMXZHS0ZaSzlXOHgySFdHU09IUVF3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzUwQi82NEQwNzc0ODQ2OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9PNE5ZVTF2R0tG
Wks5Vzh4MkhXR1NPSFFRd1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp0CDuz2KzfVX/myvOJkC0IY/QcN7INc5KBpZ1QyigAuycwcNs/zPuo5oqcdc
GsB5QcHN4asBTSi+t41ccG3QJFW1N7y2DqQg5IAvfFuOQS9qET7GKDYrMRFfqG4s
+n3QpUe7ycKf3WORrX2isQUe1GnLOvySC6Pu7PAIeim6w/X9p00kyY0oq8eIPAJI
4qtguZBzr1bMxc3dm2J+pxX2hWRFVgqWaB4P+iweO3284EOv61WVsri+G6cpR4yp
EJNN87X37F64+Y/6j2iSpivFWazOGftuFmZ7G/e1QFoRen6+bd7znoVhBZOw32aY
5UGGmil/HXxev0hFZF/bXyz54Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:30:37 2026 by rpki-client