
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json)
Hash identifier: D+blEPojMnGEQJwFN0aI7n0zFYhrMXJ62yt3jw0xsLA=
Subject key identifier: B6:05:3D:15:D3:86:0C:D1:AE:39:A4:BC:DF:50:EC:7D:CB:B4:90:43
Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Certificate serial: 0A23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
Manifest number: 0A1B
Signing time: Mon 26 Oct 2026 19:43:48 +0000
Manifest this update: Mon 26 Oct 2026 19:43:47 +0000
Manifest next update: Mon 02 Nov 2026 19:43:47 +0000
Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: D3IqRt3JE78rrdGqCDsylHzRzI+eUoMyg21gcpQJYjI=)
2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: w0Mg38kqxU56tToSKDuvE9izP1apCE3Ik6yrPGcnebw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2595 (0xa23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Validity
Not Before: Oct 26 19:43:47 2026 GMT
Not After : Nov 2 19:43:47 2026 GMT
Subject: CN=6adfad74-89cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:aa:b8:53:d0:e2:4a:94:c8:8b:5b:af:36:
2c:a1:86:8a:90:05:ef:e9:7f:cd:bf:38:f5:2e:41:
40:42:0e:98:ea:fb:46:c0:35:69:d7:d3:b6:07:b7:
9f:37:dc:a6:a8:65:f4:3d:bf:8e:5d:0e:3e:ce:6d:
6f:cf:c0:24:09:e0:c9:78:b4:ec:fb:94:a3:c6:c3:
2b:61:a5:5c:28:a5:bc:36:dd:6a:b9:57:f6:89:1c:
b2:c7:86:b3:14:0c:13:01:94:3b:c1:74:57:3a:67:
3c:8b:32:8b:35:ec:fb:bc:16:99:27:ca:16:b7:dd:
db:27:b0:3e:73:e6:3c:16:1e:2e:90:00:f9:04:ba:
1a:4d:0f:6a:a7:11:5a:81:b7:d6:db:8a:ae:e0:a4:
2d:2a:b1:85:4c:16:16:50:af:01:aa:72:75:5f:e9:
17:c5:15:fb:9e:53:d8:03:b7:85:07:23:0e:59:50:
7a:c3:f6:13:4d:8a:d0:ec:af:16:69:41:b7:fc:22:
83:97:7e:e4:15:73:3c:ad:19:84:37:93:31:2e:2e:
02:e6:6a:7f:8a:15:9e:c0:7c:0f:13:5c:b5:8e:74:
45:2f:c5:7e:f6:1d:1a:41:ff:85:0b:0a:9e:8c:8d:
fe:34:81:f7:f2:71:07:43:56:c0:2c:56:2d:3a:26:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:05:3D:15:D3:86:0C:D1:AE:39:A4:BC:DF:50:EC:7D:CB:B4:90:43
X509v3 Authority Key Identifier:
keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6c:b2:83:78:8c:23:d6:2c:af:7a:49:95:91:cb:6e:36:00:
e2:a8:01:6c:8f:7f:a2:64:13:d9:35:0e:56:8a:6a:c5:d5:73:
91:e8:82:7f:fb:06:9b:bb:ba:91:ea:e9:56:fb:0a:38:94:00:
7d:97:c0:93:1d:31:5d:72:e1:ef:45:02:3c:24:6f:94:8a:80:
92:6c:94:6a:e7:30:14:4e:9a:ff:4b:d5:58:9f:f1:cf:68:f4:
c6:9b:03:bc:9d:04:be:de:3a:ec:54:81:b4:af:44:cd:a7:f3:
d7:e3:fc:12:12:f2:f4:ab:6d:20:84:98:a4:28:44:f0:6a:42:
e6:aa:89:1a:af:a8:07:e3:9e:f8:6a:0c:f7:d5:2a:85:10:79:
ff:60:f7:07:f4:08:91:8c:da:d2:dd:3f:e8:d5:34:f1:e1:a4:
84:7d:aa:97:10:e9:29:ae:ba:50:25:60:00:08:7e:68:72:9c:
59:68:5a:13:68:3e:50:1b:d1:fb:9a:95:e9:35:97:2f:35:e0:
91:98:62:50:40:37:44:36:b5:ff:e7:9b:f0:46:e8:cb:45:df:
84:9c:60:98:06:fe:85:6a:f5:c1:5f:bb:bf:b9:b1:b4:70:c4:
99:58:9d:1c:a6:e2:ce:5f:9f:07:61:fa:17:d0:f8:d0:c6:e5:
b7:14:16:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:21:26 2026 by rpki-client