
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
File: 0MwJjruW320cXCjum1Xwqbgp_ak.mft (raw, json)
Hash identifier: bcfmVJ8l4fn1pYq1pYf/2UwITWIObxZaFjNIDy5fono=
Subject key identifier: 37:FD:11:D4:44:8B:7F:FC:C7:12:0E:BA:5C:AA:86:0F:EB:D7:66:BD
Authority key identifier: D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
Certificate issuer: /CN=A9142187/serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
Manifest number: 37
Signing time: Tue 03 Mar 2026 08:15:23 +0000
Manifest this update: Tue 03 Mar 2026 08:15:22 +0000
Manifest next update: Tue 10 Mar 2026 08:15:22 +0000
Files and hashes: 1: 0MwJjruW320cXCjum1Xwqbgp_ak.crl (hash: 1ESOSPuMEH7tK+8f01OqIcnsndifelwAncEEAgDvJqQ=)
2: 26CA159E0BB711F1A64B03C6263D8C67.roa (hash: P5tfx0ynD93bH16mM9zmJmGEUghyGxe1+aGIlNRSAJM=)
3: CCDDC90CCA5911F0B5ABC06CC4F9AE02.roa (hash: pzoy5b4jAK7WNQHs94s/PsJ8rZ83uQ8ezld7Xwjun4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142187, serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Validity
Not Before: Mar 3 08:15:22 2026 GMT
Not After : Mar 10 08:15:22 2026 GMT
Subject: CN=69a6989b-5722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:ea:90:5b:a7:03:62:64:af:8c:78:25:39:
86:d1:f9:62:65:a3:81:82:3e:8b:b1:50:db:34:04:
c4:0b:38:f1:23:1b:cb:73:47:c2:d0:55:0f:a1:6f:
d7:39:d6:f2:db:15:c4:7d:a0:d3:b6:76:bc:17:8e:
21:98:9d:a3:54:d6:7c:44:80:6f:35:fd:31:27:d0:
40:c1:61:d2:b2:3e:0a:6b:42:56:96:0c:4f:8a:50:
d8:77:67:07:0e:7a:50:e9:bc:5f:d6:35:ec:94:ef:
e6:9d:b5:62:d7:58:d5:d3:9e:ba:db:73:06:b3:b2:
4f:d2:5f:8e:fc:13:15:c7:c2:d1:e3:2a:b4:b0:e8:
3c:a2:06:91:d8:a3:d8:62:ff:60:f3:2b:65:61:2b:
6a:8b:7d:e4:72:1c:70:ed:a5:ec:62:4c:7c:11:34:
6d:00:58:74:ca:77:89:fe:cd:5f:f3:99:a7:e0:b5:
8f:2e:0c:26:93:f1:e1:de:cf:3a:1b:c6:85:53:90:
89:f3:cc:14:7e:00:d4:4e:51:8c:e4:a9:0e:76:79:
e4:7a:ec:04:2c:0a:19:ca:8b:13:b5:17:d5:da:33:
2b:f4:53:41:7a:04:b0:07:0d:56:be:6b:64:3f:cd:
e0:41:0b:34:29:5d:a6:a9:e5:20:72:f9:2c:b0:a7:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FD:11:D4:44:8B:7F:FC:C7:12:0E:BA:5C:AA:86:0F:EB:D7:66:BD
X509v3 Authority Key Identifier:
keyid:D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8b:ab:02:0e:b7:a3:65:0b:d6:68:7e:1a:0d:ce:79:b5:71:
e4:a6:d2:10:56:6c:04:27:79:84:26:54:b8:76:30:70:07:37:
6b:d0:74:be:34:71:05:89:25:03:8c:cb:96:39:b4:a2:2f:82:
ea:a6:a2:51:90:84:b1:58:db:42:67:8e:49:2b:2b:4b:da:61:
6b:87:10:a8:6f:4b:1c:85:df:3d:2f:3c:85:4e:98:32:66:e0:
4d:8f:f9:79:67:11:9f:98:64:b8:17:73:47:e8:25:e0:bc:10:
7f:db:48:83:39:94:1d:84:86:6f:cc:20:f5:ef:09:cf:86:ce:
8f:fd:a3:5c:bf:06:23:2e:03:56:44:3c:e1:38:66:0a:ba:f8:
3e:a0:07:e7:db:e8:cb:e9:ca:c9:a3:27:32:9d:8e:81:ec:b9:
4b:35:d4:7e:8b:75:ea:cb:5e:6d:8a:88:e3:b7:92:56:44:1a:
b9:94:66:97:24:5f:cb:6a:46:23:fe:ca:2e:11:ea:26:49:56:
02:9d:08:3b:94:f1:b3:64:fc:b8:10:0b:53:10:36:d4:c8:04:
21:f7:e4:11:73:07:2f:e7:7e:70:e6:6c:11:2e:cb:49:60:6c:
a5:da:28:60:2c:ca:d2:4e:57:9c:1e:89:30:44:8f:e2:d0:6f:
60:05:1c:34
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MjE4NzExMC8GA1UEBRMoRDBDQzA5OEVCQjk2REY2RDFDNUMyOEVFOUI1NUYwQTlC
ODI5RkRBOTAeFw0yNjAzMDMwODE1MjJaFw0yNjAzMTAwODE1MjJaMBgxFjAUBgNV
BAMTDTY5YTY5ODliLTU3MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCouuqQW6cDYmSvjHglOYbR+WJlo4GCPouxUNs0BMQLOPEjG8tzR8LQVQ+hb9c5
1vLbFcR9oNO2drwXjiGYnaNU1nxEgG81/TEn0EDBYdKyPgprQlaWDE+KUNh3ZwcO
elDpvF/WNeyU7+adtWLXWNXTnrrbcwazsk/SX478ExXHwtHjKrSw6DyiBpHYo9hi
/2DzK2VhK2qLfeRyHHDtpexiTHwRNG0AWHTKd4n+zV/zmafgtY8uDCaT8eHezzob
xoVTkInzzBR+ANROUYzkqQ52eeR67AQsChnKixO1F9XaMyv0U0F6BLAHDVa+a2Q/
zeBBCzQpXaap5SBy+Sywpxo1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUN/0R1ESL
f/zHEg66XKqGD+vXZr0wHwYDVR0jBBgwFoAU0MwJjruW320cXCjum1Xwqbgp/akw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTg3LzMwM0U3NzJDQ0E1
OTExRjA4Mzk5ODQ2QkM0RjlBRTAyLzBNd0pqcnVXMzIwY1hDanVtMVh3cWJncF9h
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvME13SmpydVczMjBjWENqdW0xWHdxYmdwX2FrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy
MTg3LzMwM0U3NzJDQ0E1OTExRjA4Mzk5ODQ2QkM0RjlBRTAyLzBNd0pqcnVXMzIw
Y1hDanVtMVh3cWJncF9hay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAOi6sCDrejZQvWaH4aDc55tXHkptIQVmwEJ3mEJlS4djBwBzdr0HS+NHEFiSUD
jMuWObSiL4LqpqJRkISxWNtCZ45JKytL2mFrhxCob0schd89LzyFTpgyZuBNj/l5
ZxGfmGS4F3NH6CXgvBB/20iDOZQdhIZvzCD17wnPhs6P/aNcvwYjLgNWRDzhOGYK
uvg+oAfn2+jL6crJoycynY6B7LlLNdR+i3Xqy15tiojjt5JWRBq5lGaXJF/LakYj
/souEeomSVYCnQg7lPGzZPy4EAtTEDbUyAQh9+QRcwcv535w5mwRLstJYGyl2ihg
LMrSTlecHokwRI/i0G9gBRw0
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:19 2026 by rpki-client