
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json)
Hash identifier: qcAWQ+x5Ys79sLRYoFQthJedUr+DdyT5+kVb09IGXeM=
Subject key identifier: C4:B8:70:07:69:FD:9A:23:2B:A5:29:49:43:99:8C:03:A8:64:0E:F8
Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Certificate serial: 0925
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
Manifest number: 091C
Signing time: Sat 04 Apr 2026 20:02:58 +0000
Manifest this update: Sat 04 Apr 2026 20:02:58 +0000
Manifest next update: Sat 11 Apr 2026 20:02:58 +0000
Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: mONylQ3Ar2fXu/28V+bhskmlreMRANL0DdBzBizclxE=)
2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: PcM9VvZwEtkWziWmDAYLmLOnlkBtxqnyiAkGfpwesWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2341 (0x925)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Validity
Not Before: Apr 4 20:02:58 2026 GMT
Not After : Apr 11 20:02:58 2026 GMT
Subject: CN=69d16e72-e2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:4a:cf:fd:19:9b:4e:f1:0d:04:17:3e:33:
a5:c0:cf:e8:08:48:12:50:e7:ce:ca:de:bf:28:65:
5a:65:bb:64:18:9b:d2:f8:37:97:d8:4c:02:e9:32:
67:1a:fd:83:b1:1e:1d:5e:25:ef:dc:55:8f:fd:1d:
d6:ff:05:11:73:92:25:c0:18:4c:92:04:08:33:b0:
fc:8f:21:53:16:22:51:1b:d2:e1:ce:09:98:52:bd:
b0:30:6b:2b:4e:66:55:1e:44:73:f8:2b:be:55:86:
47:62:82:4a:f1:36:65:44:f0:5e:41:e6:ed:5b:46:
04:cd:76:81:97:fe:ed:fe:29:c9:04:d3:d7:b1:7d:
07:4a:f0:56:12:16:3c:80:a9:ef:12:f7:53:de:ba:
36:22:c0:c3:cc:8f:73:a1:78:7a:d4:a2:13:76:ba:
be:9e:25:81:ac:ea:0f:7d:af:dc:8b:bf:55:67:db:
d3:4d:5b:37:15:54:7a:56:04:47:24:cc:e2:48:9c:
5e:b8:25:ea:8f:39:e5:45:56:69:b2:bd:95:64:d9:
74:38:bb:e4:79:48:88:2e:ec:3c:cb:7b:3e:f8:f2:
f3:8b:59:1d:db:ba:72:e6:f8:5d:08:81:f2:35:9f:
6f:c9:02:df:d2:1c:43:8d:48:17:46:26:94:83:17:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B8:70:07:69:FD:9A:23:2B:A5:29:49:43:99:8C:03:A8:64:0E:F8
X509v3 Authority Key Identifier:
keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:55:33:01:08:b4:78:20:a5:0d:7f:48:d3:a1:87:c1:90:e7:
fb:1e:3b:3b:d1:5f:47:b0:dc:fe:24:2b:64:07:3c:1a:68:2c:
f5:9b:b2:ef:30:5f:9e:9d:1d:58:b1:6b:d2:2f:84:4e:2f:38:
af:d5:37:f8:d0:53:fc:25:c3:ed:59:d3:86:fc:ea:51:dc:f9:
96:74:f8:8c:5a:d2:0d:23:be:15:28:60:54:ef:dc:69:0c:56:
3c:1a:09:f4:fa:87:5e:a6:41:4c:d4:07:3d:61:0d:00:70:b4:
85:82:90:b3:26:ba:c0:e4:68:c0:d0:d6:6e:a6:95:28:a8:3a:
8f:25:61:57:71:71:ec:2e:3a:0f:b5:0e:24:e5:ef:e8:55:31:
fe:f8:87:d7:78:62:e8:b8:0f:f4:ef:1d:a4:28:e5:68:e5:2f:
f8:23:e7:32:c9:66:34:b4:c9:7d:a3:e2:70:76:06:99:27:3c:
67:e1:a2:e1:2d:2b:2b:7d:e0:e2:d1:31:a2:14:8d:ec:f9:7a:
47:cc:9b:f3:3d:b7:59:fc:59:1a:c3:43:3e:12:ac:dc:95:73:
c1:11:e5:65:a6:7c:b4:19:b6:11:ab:1d:cb:c9:6e:8a:5d:eb:
73:3b:c4:d2:d3:01:4f:26:a8:c9:b6:3b:81:af:75:79:ed:3c:
77:09:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:23:43 2026 by rpki-client