
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json)
Hash identifier: qh0CeGQwx8nLEb8LMnteBhxgJJXT8k2FTvAKLdZi9aI=
Subject key identifier: EF:16:CA:5B:49:35:DC:51:A1:BE:70:B2:1F:10:19:A4:AB:4A:57:74
Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Certificate serial: 0495
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
Manifest number: 048E
Signing time: Thu 21 May 2026 00:05:51 +0000
Manifest this update: Thu 21 May 2026 00:05:51 +0000
Manifest next update: Thu 28 May 2026 00:05:51 +0000
Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: 3Xvyz87HIWBVJko/C65bzPNLx7p8H43Qjh8mh6LyDlM=)
2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: d5iSZj62C8juxE8auMNyD5ksUnuDKMjscM3w2qSQY9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Validity
Not Before: May 21 00:05:51 2026 GMT
Not After : May 28 00:05:51 2026 GMT
Subject: CN=6a0e4c5f-90ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:d2:e9:14:2f:56:73:5d:23:0a:5b:5b:8b:
4c:92:a0:bb:68:11:c7:8a:60:2f:c0:8c:cd:11:d6:
14:bb:c5:2a:47:dc:b1:7d:a5:91:7f:22:b1:49:f0:
35:de:ee:7e:c3:1e:d0:5f:85:da:0c:c5:3b:55:75:
31:34:10:73:78:63:bc:f5:56:0d:84:bc:95:d1:55:
a3:08:79:a6:e8:62:a8:48:24:4b:01:7e:7b:7a:2d:
9d:b8:ac:a4:74:e2:f9:f5:78:4d:6c:a1:99:3e:51:
63:23:21:fd:8a:04:cd:ed:57:92:bf:ef:17:79:31:
5d:d2:b9:aa:fb:c3:57:cd:e1:06:9b:99:39:10:f2:
14:18:76:8a:b7:8b:71:60:3f:b7:6d:9c:0f:1e:23:
84:2f:a9:cf:3a:12:70:ac:91:3f:43:1f:bc:ab:45:
61:65:c0:dc:f2:60:39:7b:92:bb:13:33:f3:c0:d2:
45:e0:90:4f:3e:49:88:d0:94:ae:88:e3:50:de:70:
a3:ed:6b:07:88:4b:c1:ed:a4:a7:9b:f0:61:e7:03:
c0:ef:a5:51:6f:59:af:7e:92:b2:bc:13:51:43:9b:
84:a2:5a:e9:5b:26:a3:ea:00:e1:f9:b7:7c:b8:42:
da:ed:2e:db:5c:a5:7b:2c:f9:4b:c9:63:fd:ce:90:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:16:CA:5B:49:35:DC:51:A1:BE:70:B2:1F:10:19:A4:AB:4A:57:74
X509v3 Authority Key Identifier:
keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:6c:59:1f:c3:f3:7f:ef:c7:83:e4:d9:f2:e2:3e:7c:a4:03:
e3:c5:e7:41:02:93:cc:37:ad:e5:68:78:8f:d7:e0:de:88:4c:
5c:ea:12:a9:d7:b9:3e:be:68:0b:91:d4:02:7c:1f:ee:f9:e3:
18:8f:49:ee:27:21:35:d7:93:6b:fc:15:68:07:fb:aa:3b:93:
5a:6b:3f:36:c1:11:a6:5d:a2:11:21:2e:95:4f:69:50:41:8a:
98:a5:02:c6:8f:28:8f:bd:fe:d1:92:f0:0d:1b:48:52:9b:65:
33:2f:dd:8e:3d:0e:d6:c4:8e:6c:38:95:20:11:00:1b:bb:a9:
ab:9c:9e:66:d1:ed:fc:42:45:67:1f:e1:77:7f:08:2b:68:99:
ca:15:ff:a1:1f:06:e0:32:73:c2:be:6b:b5:19:b5:6c:2d:72:
64:53:1d:99:1f:a0:57:da:cb:06:44:cf:31:fe:2f:c0:1a:a4:
94:41:6c:54:5e:aa:d4:7e:e1:81:d6:5a:16:75:fe:f6:74:d4:
a9:c5:98:f9:2c:4f:ae:e7:cb:84:db:dc:96:8f:ab:17:9c:57:
6f:ed:86:d6:b4:b1:72:b8:7b:6c:76:3b:69:a6:5e:e5:ce:e0:
2d:9b:4f:ab:c5:af:ff:dd:c3:4d:07:f4:49:62:4c:a9:12:e6:
f3:04:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:50 2026 by rpki-client