
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json)
Hash identifier: +WxLz42EnIOe65zSb4EwmCwFIv7Y142QkqnqEfsBwmA=
Subject key identifier: A3:70:42:22:12:98:3E:91:D2:07:3C:0D:C0:55:B1:00:F3:F6:5A:9B
Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Certificate serial: 0812
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
Manifest number: 0809
Signing time: Fri 06 Mar 2026 15:50:30 +0000
Manifest this update: Fri 06 Mar 2026 15:50:29 +0000
Manifest next update: Fri 13 Mar 2026 15:50:29 +0000
Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: os0+cMQJzdWsH+f+DnsMKfkAUANV4uhAaVwoA2BwCEc=)
2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: MdKj745wIJAm1a/+fD8XVUD4Xm85NkWf5HLxKsTPL9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Validity
Not Before: Mar 6 15:50:29 2026 GMT
Not After : Mar 13 15:50:29 2026 GMT
Subject: CN=69aaf7c6-97f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:87:3b:3c:f9:33:e9:ba:89:51:32:b3:62:
35:ec:cc:d4:ff:8e:95:89:d9:f2:43:18:d5:2a:3b:
db:b8:93:cc:8c:16:8a:f5:20:c9:b2:73:0d:48:a4:
a4:5e:b9:33:67:a4:af:5c:40:5b:58:f0:88:84:1b:
f7:30:8e:2b:7e:ee:e6:e1:ca:5b:16:db:ec:ca:b5:
62:99:83:03:a7:7d:b2:72:bc:5f:0c:01:b3:6b:bb:
eb:bb:8e:76:f9:4a:1c:e0:3d:a3:d9:4e:25:2b:7f:
2a:90:5c:d1:4a:08:a5:ef:50:86:71:1d:86:c3:d6:
ea:f9:cf:94:e4:a6:1d:a4:f4:4d:4c:fe:81:fc:fe:
35:85:16:ee:f1:84:bf:c2:3b:c3:0d:ce:0e:d6:ce:
f7:ef:e0:91:a1:82:c3:fd:4c:2b:59:fb:89:2c:0b:
f8:f1:90:12:50:82:24:59:4c:b5:1b:65:4e:82:0b:
11:14:d1:ba:03:06:d2:a5:56:d3:07:37:01:b4:fd:
20:38:7f:70:12:44:a4:83:70:d1:bf:81:0d:6a:ee:
64:77:5a:90:62:86:a9:d9:97:b3:1a:ed:5d:e1:82:
d0:c4:26:91:27:a6:a2:b8:e7:94:d6:36:c6:d7:df:
53:50:d1:e8:1f:8f:13:ff:74:2e:07:0d:af:5b:1d:
08:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:70:42:22:12:98:3E:91:D2:07:3C:0D:C0:55:B1:00:F3:F6:5A:9B
X509v3 Authority Key Identifier:
keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8f:63:b5:2f:47:b6:3f:b8:10:1d:01:18:7f:6f:68:32:0b:
f0:48:b2:f8:40:6f:06:3f:ce:af:71:6e:c2:9d:f6:00:e3:0d:
7a:b9:aa:72:06:97:2c:3d:18:37:89:87:a6:e5:fd:6c:d1:8c:
75:df:a4:dd:81:26:8a:9f:ea:10:8a:b6:59:bb:f1:ab:81:1c:
75:cf:4e:0d:02:04:a0:b7:05:8d:3f:7f:db:42:f9:fb:93:83:
4c:19:f2:d3:49:57:34:34:1b:6a:3c:4a:4a:44:70:32:e3:e8:
b7:36:db:fd:7d:c8:75:c9:66:b1:0b:b2:ec:84:f4:76:0b:3d:
1e:a6:98:4a:da:a7:0f:80:ee:b1:cd:8a:b0:41:8b:f1:77:fe:
ed:72:f6:c4:4f:c5:db:71:97:3f:39:f1:2e:26:4d:59:1b:70:
84:49:a4:32:6b:cf:28:45:3a:76:33:5c:22:31:56:9a:f3:44:
8a:28:66:b4:ac:f2:ea:72:dc:2c:2b:67:e1:cd:b6:a2:6f:bc:
b9:f0:18:26:5a:86:14:7b:01:a6:6c:4b:4a:04:c2:25:88:5f:
8b:95:b1:40:59:c7:90:9e:be:19:13:1d:87:42:4b:c3:49:e5:
0b:43:0c:63:3f:6b:e6:a2:11:45:9e:85:6b:2a:9a:87:e0:46:
af:a4:4e:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNCRkYxMTAvBgNVBAUTKEFGNEEzNTQ0Qzc0QjMxN0E3QzMyNkFGMEU4MzkzQ0I5
RDUyNjIwMzIwHhcNMjYwMzA2MTU1MDI5WhcNMjYwMzEzMTU1MDI5WjAYMRYwFAYD
VQQDEw02OWFhZjdjNi05N2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4oOHOzz5M+m6iVEys2I17MzU/46VidnyQxjVKjvbuJPMjBaK9SDJsnMNSKSk
XrkzZ6SvXEBbWPCIhBv3MI4rfu7m4cpbFtvsyrVimYMDp32ycrxfDAGza7vru452
+Uoc4D2j2U4lK38qkFzRSgil71CGcR2Gw9bq+c+U5KYdpPRNTP6B/P41hRbu8YS/
wjvDDc4O1s737+CRoYLD/UwrWfuJLAv48ZASUIIkWUy1G2VOggsRFNG6AwbSpVbT
BzcBtP0gOH9wEkSkg3DRv4ENau5kd1qQYoap2ZezGu1d4YLQxCaRJ6aiuOeU1jbG
199TUNHoH48T/3QuBw2vWx0IPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNwQiIS
mD6R0gc8DcBVsQDz9lqbMB8GA1UdIwQYMBaAFK9KNUTHSzF6fDJq8Og5PLnVJiAy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi8wRTJFRjUzNDFB
NkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1YcDhNbXJ3NkRrOHVkVW1J
REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3IwbzFSTWRMTVhwOE1tcnc2RGs4dWRVbUlESS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0JGRi8wRTJFRjUzNDFBNkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1Y
cDhNbXJ3NkRrOHVkVW1JREkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPY9jtS9Htj+4EB0BGH9vaDIL8Eiy+EBvBj/Or3Fuwp32AOMNermqcgaXLD0Y
N4mHpuX9bNGMdd+k3YEmip/qEIq2Wbvxq4Ecdc9ODQIEoLcFjT9/20L5+5ODTBny
00lXNDQbajxKSkRwMuPotzbb/X3IdclmsQuy7IT0dgs9HqaYStqnD4Dusc2KsEGL
8Xf+7XL2xE/F23GXPznxLiZNWRtwhEmkMmvPKEU6djNcIjFWmvNEiihmtKzy6nLc
LCtn4c22om+8ufAYJlqGFHsBpmxLSgTCJYhfi5WxQFnHkJ6+GRMdh0JLw0nlC0MM
Yz9r5qIRRZ6Fayqah+BGr6ROEw==
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:38:37 2026 by rpki-client