
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json)
Hash identifier: pnPS28bqCL8nRmTBBbBXjAYvsT7qoe6yFbsnudqFpJs=
Subject key identifier: 6D:B2:DF:82:76:00:F0:80:0A:95:90:5F:97:55:52:65:FC:AF:FF:C6
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
Manifest number: 90
Signing time: Fri 17 Apr 2026 07:12:33 +0000
Manifest this update: Fri 17 Apr 2026 07:12:32 +0000
Manifest next update: Fri 24 Apr 2026 07:12:32 +0000
Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: fjK03lxf8R4QD3ZwAvg/vBMTjw73OdRuzfzn/juZLZg=)
2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: rWKDZcXDRvxkeevoTmv1zvdbGFQP1gVAwd/TCsKJ1Qk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Validity
Not Before: Apr 17 07:12:32 2026 GMT
Not After : Apr 24 07:12:32 2026 GMT
Subject: CN=69e1dd60-3ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:9f:28:19:63:37:5e:63:3e:78:45:f1:8a:
5a:43:6d:47:82:26:56:cd:fb:72:f0:7b:8d:14:16:
48:12:3a:0d:fa:2a:d4:07:90:a1:31:f8:b4:55:b7:
93:68:f2:c9:eb:d5:34:82:77:e8:06:54:cf:4d:93:
62:68:d5:9a:70:75:1a:be:9b:ec:30:61:15:75:cc:
a0:56:33:ea:fa:1f:fe:aa:f6:cf:36:2c:86:00:7e:
93:f4:30:d2:0c:07:8e:de:8e:e4:12:7b:07:fe:15:
f8:57:ce:5c:33:78:44:97:70:67:96:27:7a:54:50:
f4:b2:e6:c7:3e:2a:b9:ef:05:c0:34:42:d5:65:fb:
56:90:71:b0:04:f8:95:88:56:1e:23:7d:50:16:0b:
82:be:4f:06:80:72:5b:d7:93:f2:80:95:fe:54:27:
27:19:90:07:0a:fa:b3:49:f9:04:4e:c5:d1:8e:0f:
9c:2a:24:be:a5:99:cd:d4:31:0d:7c:04:97:29:cb:
4f:8a:a0:61:26:4d:62:2e:b7:df:54:02:75:49:c1:
d6:94:b6:a0:d6:e6:e3:09:91:dd:b8:84:5b:df:ae:
30:e4:56:b9:99:a2:58:47:98:19:26:02:c2:e8:e6:
ee:06:9e:46:95:6d:4a:56:9e:14:c8:33:2d:7d:cd:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B2:DF:82:76:00:F0:80:0A:95:90:5F:97:55:52:65:FC:AF:FF:C6
X509v3 Authority Key Identifier:
keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c8:e4:2f:01:d8:14:1a:72:8c:0a:ff:9f:ae:c4:2b:3c:d2:
51:a6:45:dd:05:10:f8:89:25:7d:8b:cc:96:0f:5f:0f:76:c5:
25:6c:d9:f0:b1:7f:48:1d:00:32:eb:3d:36:3a:b1:9f:f7:b1:
7b:f6:1a:0e:36:d6:15:af:a1:c8:0f:6f:03:fa:8c:a4:74:6c:
74:d1:f2:ea:41:b2:f8:6e:1d:63:d8:ca:3b:e9:21:f1:22:83:
1d:23:b8:e2:a0:47:83:5f:22:16:55:83:df:c1:76:b0:4d:cb:
4a:1c:f0:7e:78:d0:14:5c:87:04:e4:86:c8:23:0c:89:7f:1d:
ed:79:c3:d0:cd:7c:38:09:90:05:79:6f:66:5a:c1:40:b5:86:
fb:df:b0:15:66:af:d5:aa:95:fa:f7:5a:4d:f8:a2:53:74:15:
bd:4e:41:9d:51:e7:5b:c7:1e:aa:1d:f9:a9:7c:a2:56:7d:90:
90:b7:36:58:e9:6a:88:c4:8d:20:81:19:d1:81:66:3a:50:c0:
cd:78:0e:35:15:b9:cb:af:c2:2e:46:e6:12:4a:48:0a:92:4e:
d2:82:19:11:47:38:fc:4a:01:f3:54:08:4a:01:1e:8f:6d:ff:
ad:9b:ed:7d:49:d9:09:9e:26:40:4b:f0:b0:94:72:4e:57:ef:
5a:eb:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:23:45 2026 by rpki-client