
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
File: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft (raw, json)
Hash identifier: W9tMdvwLFArGcygBhXlKKSYDs1rvWqWgCHKnWA2JU7U=
Subject key identifier: DC:CD:36:CF:E8:8C:C1:62:1E:A1:29:83:19:AB:2F:A7:53:09:72:6E
Authority key identifier: D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93
Certificate issuer: /CN=A9132667/serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
Manifest number: AD
Signing time: Sat 03 Oct 2026 07:48:17 +0000
Manifest this update: Sat 03 Oct 2026 07:48:17 +0000
Manifest next update: Sat 10 Oct 2026 07:48:17 +0000
Files and hashes: 1: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl (hash: 92wyTE++OMnxsDL//M0SdTSfwSGi2xRHoezwSHdK/AE=)
2: 4FFB27E2BDBE11F0999C417DC4F9AE02.roa (hash: SUT7Sext2CBmlq2r+uIBNlenhXwwgBzoi2hOww2+R8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl
rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132667, serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
Validity
Not Before: Oct 3 07:48:17 2026 GMT
Not After : Oct 10 07:48:17 2026 GMT
Subject: CN=6ac0b341-4c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:00:68:25:df:a2:5b:2b:7d:cf:38:69:70:
24:8e:aa:1c:ed:87:12:79:64:fb:30:64:d3:99:6c:
35:f0:6f:11:22:27:22:89:49:26:df:24:47:4a:0e:
51:ca:bc:24:49:da:61:93:22:06:55:6e:ed:de:37:
82:fa:06:0a:9e:e0:b6:8f:de:19:75:03:63:d2:97:
7a:c9:da:82:cb:e0:39:7b:58:d1:ce:46:85:0e:b9:
4c:f1:b5:ea:c1:77:68:47:48:e5:79:d7:02:2c:d3:
b6:bf:94:fb:55:c5:6c:e8:71:3d:1f:a0:67:7b:f1:
0d:1f:7e:ec:3a:e9:d5:8f:2e:dc:33:ab:0c:d7:c9:
6c:59:e3:cb:03:3c:9a:d5:56:2d:0e:3c:63:29:c0:
f5:d7:3c:a5:ba:6d:41:c6:25:58:97:dc:3e:4a:62:
ac:a1:db:db:2b:15:71:a5:56:9b:4a:0a:5a:fc:ac:
13:e3:07:87:a9:d0:4b:4d:61:87:05:8b:ed:13:bd:
5b:e8:41:d8:ae:08:ba:36:36:48:fd:31:f1:03:02:
1a:81:30:93:a6:83:31:74:bd:95:2d:92:77:cb:ae:
16:dd:31:30:48:e8:70:74:fc:72:a1:a1:f2:af:76:
45:20:9e:49:c1:e8:37:86:3e:3c:d2:50:06:46:5b:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CD:36:CF:E8:8C:C1:62:1E:A1:29:83:19:AB:2F:A7:53:09:72:6E
X509v3 Authority Key Identifier:
keyid:D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:89:b0:43:60:89:2a:be:51:92:5a:57:f1:da:07:56:b9:1a:
1f:3c:13:a0:84:4f:0f:2d:fa:8b:11:51:c4:18:93:a3:1e:72:
ba:b0:60:6c:31:39:55:e0:d4:54:21:94:b9:a8:3c:7f:da:01:
13:ec:3b:39:4e:1e:6c:7b:59:db:7c:21:79:59:ea:e7:46:0d:
23:41:2f:9a:54:98:83:6d:4a:b7:22:ed:3b:ba:c5:b2:97:81:
4a:1b:3c:08:62:bf:73:fe:c5:a5:aa:84:c8:e0:38:63:88:57:
55:f3:b1:76:ea:7d:ea:5a:32:7b:35:18:75:ac:da:fc:f8:04:
d9:bb:a4:02:d1:dd:fb:42:ee:c8:ce:21:09:6e:0e:f9:bc:48:
83:7a:bb:0d:b1:ce:d6:27:ee:17:16:2e:e1:7d:da:eb:a8:e5:
16:1d:20:ab:3b:f2:38:0a:ff:b6:81:0f:ac:86:da:ef:5b:e4:
fe:4e:08:2d:69:23:fb:3f:e9:9e:e9:7e:9a:7c:45:eb:7b:57:
6e:c8:71:fc:fb:6b:4e:fe:b9:71:da:1e:7d:7a:b8:ec:40:3a:
1e:1f:85:9e:80:24:69:af:cc:a5:24:e3:d6:a6:5c:73:3e:c4:
0a:dd:1f:20:0b:fd:af:a5:5d:74:a0:80:c6:b2:90:69:8d:02:
3a:3c:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:37:41 2026 by rpki-client