
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
File: -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json)
Hash identifier: a+tAS5YRW9ms3kENw8PLm8YuROvL39StE0ZIaw28DMI=
Subject key identifier: D4:BB:2E:D1:E7:B6:F2:C7:D0:C7:78:D7:6C:1C:2F:AE:83:EA:B4:DD
Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
Certificate issuer: /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Certificate serial: 034F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
Manifest number: 0348
Signing time: Sat 29 Aug 2026 00:49:55 +0000
Manifest this update: Sat 29 Aug 2026 00:49:54 +0000
Manifest next update: Sat 05 Sep 2026 00:49:54 +0000
Files and hashes: 1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: 9b/zi4HrFtcctRBhMDEI+ecx79lR5rC1QyNOCpT8PYk=)
2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: Be6od45jLeada4bxpuPeqCUQhUOB88eDEOcvjcAauYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 00:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847 (0x34f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Validity
Not Before: Aug 29 00:49:54 2026 GMT
Not After : Sep 5 00:49:54 2026 GMT
Subject: CN=6a922cb2-96d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:a2:93:24:f5:4f:37:23:cc:f7:b7:76:27:
84:c0:3e:34:f3:fa:79:c0:83:cf:42:91:db:06:bf:
c6:2a:fd:25:72:82:c3:f0:08:30:d2:61:32:a4:ea:
63:4d:5e:96:b4:66:bf:c9:b8:71:b7:f0:19:a8:ba:
20:bc:97:fe:0b:f4:29:28:9e:a7:ed:c1:5a:fd:91:
a8:1e:73:eb:48:16:85:69:68:2b:0f:42:25:8e:86:
f4:f4:0c:25:ed:61:2e:56:fa:e5:47:6d:80:91:2d:
c6:b9:29:b4:59:d9:1c:43:11:42:72:b4:ad:d0:0f:
d7:3d:81:22:91:27:0d:d3:1e:bf:46:b6:c7:40:94:
7e:b6:92:19:23:9f:57:1e:2a:0a:31:f4:5f:74:e1:
0e:91:15:c6:75:ac:21:c3:de:10:82:a9:69:b3:71:
7e:d1:77:ac:3b:76:55:85:6d:40:72:9a:8f:28:43:
ae:f1:5d:40:f7:23:85:df:36:9e:b1:2c:71:4b:2f:
99:a6:10:e6:1c:7d:65:4b:05:78:a7:74:8d:41:c9:
7a:79:45:4d:66:a9:04:34:b1:2b:2c:e4:be:f9:e7:
7b:84:81:2f:65:dd:e4:69:ad:1c:9a:37:a6:9a:e4:
da:d7:50:5c:60:19:c0:b0:37:ce:3a:50:56:16:5b:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:2E:D1:E7:B6:F2:C7:D0:C7:78:D7:6C:1C:2F:AE:83:EA:B4:DD
X509v3 Authority Key Identifier:
keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:4f:b0:94:63:4d:63:e6:78:29:df:66:b7:22:5a:1f:11:08:
23:2c:df:40:d5:d0:1d:eb:ae:b1:4b:9f:6d:93:dc:f1:59:c7:
a3:5c:79:ea:ed:af:4d:dc:99:b4:26:44:32:dd:3a:6c:20:c7:
53:89:fe:84:3c:a5:e9:19:11:f7:ef:0d:c5:ff:51:1c:15:1c:
1b:2b:53:c7:2b:11:98:23:b6:b5:ed:ae:8a:13:4b:de:2b:39:
61:e3:7f:59:88:d2:aa:8f:aa:9f:c3:fe:81:d6:09:50:ba:ea:
9b:a1:05:56:25:ee:0b:82:76:07:58:d8:78:48:81:95:b0:fb:
eb:69:3f:5c:65:ea:1d:35:e7:5c:0b:b1:85:e4:36:56:9f:3c:
ff:d8:b3:3a:97:e8:5d:0a:c0:e2:62:b1:1f:13:02:5e:ca:4f:
0b:57:53:d5:55:3f:d2:c3:67:d5:82:85:4c:13:aa:29:2d:92:
40:42:63:9c:e7:40:3c:d6:b4:e1:c3:65:4f:17:27:f1:be:7a:
28:d3:40:62:8c:80:b8:a1:b2:22:70:5e:59:8a:38:37:76:ab:
97:5a:c4:1d:2a:79:42:9c:af:9f:e4:2e:a8:f0:f4:df:3f:44:
43:7a:4c:91:77:e2:0d:cf:e9:8e:9f:22:e5:fb:54:47:4d:21:
f6:b0:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 09:39:19 2026 by rpki-client