
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json)
Hash identifier: Q3ZemYz5R77r6vT7qXWAmdRjlDl6k58IpC4PtjncvB8=
Subject key identifier: 44:22:FB:B3:FA:96:42:9E:55:50:D4:88:CA:72:60:65:E7:DA:42:AD
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
Manifest number: E9
Signing time: Wed 07 Oct 2026 06:57:23 +0000
Manifest this update: Wed 07 Oct 2026 06:57:22 +0000
Manifest next update: Wed 14 Oct 2026 06:57:22 +0000
Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: Dg7nB64vvYzivTw+nvkYHAKxz/Tu1OCZNRYyzfHh+z8=)
2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: WRz1Amhg1eLxzvJe34a5Oo/mdHZDgY00iZZMnOor6VE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Validity
Not Before: Oct 7 06:57:22 2026 GMT
Not After : Oct 14 06:57:22 2026 GMT
Subject: CN=6ac5ed53-564e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:57:a2:6f:0c:fe:48:df:09:f1:d2:c3:0c:
97:2a:dc:13:88:62:aa:4b:1f:ca:b4:ca:55:19:9b:
74:6f:d9:1e:2f:90:cf:c2:d7:77:b8:45:0b:54:ae:
96:e4:9e:67:75:02:fc:f8:ce:f7:82:8c:7d:f8:8d:
21:3b:67:06:93:1f:f7:8c:ad:bb:71:6a:31:6a:64:
bb:0e:10:b1:67:02:dd:eb:dd:9e:ea:9d:5e:7d:fc:
5a:38:d8:96:cb:4b:2c:db:b7:6c:78:88:49:df:da:
27:8d:a9:b8:22:94:d2:85:88:fc:f9:dc:24:cc:e0:
14:f5:70:a2:14:3c:bf:28:e2:21:2a:75:3f:1b:50:
67:4c:05:d1:63:d1:96:83:85:4c:13:d5:96:46:49:
a8:4e:99:df:b2:f5:7b:5e:44:81:8f:53:b7:e8:45:
7b:bf:b2:6b:1e:93:94:2d:0d:3b:81:02:a1:26:d2:
fe:5c:cd:93:88:78:2e:71:6b:01:58:b0:6c:e2:ec:
0d:fb:7a:df:9a:96:ee:95:d1:4d:ec:26:31:b6:78:
e1:06:cd:f5:38:4d:82:ba:65:87:90:36:d0:47:d3:
26:ba:b7:4e:d2:75:9a:ef:2e:a4:2a:45:f4:c3:f1:
5e:f4:6b:8b:ff:e7:7a:87:19:5a:4e:a4:eb:e9:12:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:22:FB:B3:FA:96:42:9E:55:50:D4:88:CA:72:60:65:E7:DA:42:AD
X509v3 Authority Key Identifier:
keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:fe:5e:97:f0:98:17:7b:c6:fc:71:07:37:a0:5b:b9:f1:f5:
3f:bf:85:fa:c0:0f:e5:79:2b:c4:95:fc:4d:2e:90:92:ff:46:
be:20:2a:4d:76:c3:d0:e7:26:a5:8f:56:3f:15:11:73:ed:74:
ef:d8:95:16:ee:42:da:53:15:83:3e:22:2a:09:c6:94:6a:08:
37:af:6d:c1:b4:05:df:a8:e1:b0:ec:a9:ff:29:16:ae:35:ed:
59:81:7b:fd:cf:b6:43:cf:87:ae:be:34:db:3f:d5:d2:53:3e:
3d:3a:78:da:8f:f4:24:2c:b5:d9:c8:a9:22:86:0e:5a:59:f6:
ee:a0:29:ae:9c:93:e4:70:38:ce:1b:98:8a:5c:88:c3:8e:f3:
7c:54:2e:d9:16:f1:09:b8:7f:06:5d:c1:6c:ff:fc:a2:05:76:
16:c1:0f:77:3d:33:44:1c:6c:9c:0d:27:64:4d:4c:91:db:4d:
ca:a1:7a:b9:92:aa:6d:e7:41:fc:ab:63:45:1b:ce:58:e9:b1:
33:51:7e:57:73:e5:ee:23:b1:d0:ed:ca:f8:0e:6d:05:95:37:
17:f8:11:9d:ef:98:22:1a:9c:4e:36:3d:a7:ab:a0:8f:52:72:
95:87:0c:e5:36:4d:2f:69:6a:30:3a:c3:8d:99:a4:11:09:90:
e5:78:50:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:42 2026 by rpki-client