
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json)
Hash identifier: WgcgG8e8IfujHD4IHe9u1AqocPW62JwY4BTcs9xeTCc=
Subject key identifier: A9:CB:25:48:C7:7D:B2:D3:DA:B3:0F:33:63:85:3D:41:47:2E:A8:CE
Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Certificate serial: 0A09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
Manifest number: 0A01
Signing time: Fri 04 Sep 2026 19:40:45 +0000
Manifest this update: Fri 04 Sep 2026 19:40:44 +0000
Manifest next update: Fri 11 Sep 2026 19:40:44 +0000
Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: CFXf2wKh4CH3uG7Bm8N+QjHzyjD+RcfGegAxQmHB79I=)
2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: w0Mg38kqxU56tToSKDuvE9izP1apCE3Ik6yrPGcnebw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2569 (0xa09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Validity
Not Before: Sep 4 19:40:44 2026 GMT
Not After : Sep 11 19:40:44 2026 GMT
Subject: CN=6a9b1ebd-a0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:c6:cb:fc:cf:cf:28:d6:b2:53:28:4b:18:
02:16:5f:d0:94:3b:77:f0:ce:6d:f8:45:64:f2:20:
af:7b:8b:03:2f:5d:ef:df:c4:15:05:ed:0d:6e:61:
04:49:52:2d:e1:5c:7b:0a:02:28:21:7d:c8:f0:eb:
5f:af:44:62:8a:05:8e:32:90:96:9a:74:ac:49:9c:
58:e0:48:38:29:5e:f0:be:ee:2c:b9:8d:fe:42:da:
63:22:86:86:46:ad:53:8c:18:bc:c1:69:3b:a3:ea:
69:f2:88:68:f4:71:ee:b3:94:0a:ed:96:2b:4e:6f:
05:6e:71:33:67:a2:3c:b7:6f:fb:0c:65:ed:b9:a3:
c1:54:88:da:54:5a:35:f5:1d:6a:b4:ad:63:2b:7d:
79:df:e4:70:9a:de:5f:36:a3:34:0a:97:e0:c5:c1:
54:d9:a0:52:b8:d6:5b:f7:b0:e6:f0:5b:bc:79:2a:
60:24:5b:37:46:7f:28:ab:18:f8:97:2d:b0:aa:31:
c9:88:bc:5e:79:a5:71:e1:53:64:2f:65:6c:83:0b:
e5:a2:88:44:ca:b8:fa:50:0a:42:dc:f9:85:5c:33:
94:8f:95:e5:bf:20:a5:e4:3c:f5:6c:38:c7:f3:b9:
4e:44:16:27:b1:a8:64:3f:ba:9e:82:d2:0d:c2:24:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:25:48:C7:7D:B2:D3:DA:B3:0F:33:63:85:3D:41:47:2E:A8:CE
X509v3 Authority Key Identifier:
keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:70:46:c7:ab:33:da:b8:96:66:1e:1b:82:84:22:09:b3:a3:
77:e6:c4:f4:17:15:26:68:2c:56:66:c9:1b:e6:ff:2c:4d:97:
87:be:98:4b:96:de:7b:c3:17:b5:e6:28:06:da:ce:47:60:e1:
52:04:0a:a8:2c:04:85:a9:85:b1:be:d4:75:6f:ca:ab:1f:43:
ca:ae:6d:f4:56:e4:28:b4:6e:89:f9:91:5c:eb:4d:ce:81:94:
3a:62:67:85:9a:e8:33:ad:08:16:2e:d4:3f:51:77:9a:45:82:
11:1e:90:91:52:0b:c4:53:83:b3:d2:cd:51:99:46:e6:ea:8a:
2a:a2:bd:b6:c3:b4:37:77:13:b9:db:af:59:26:55:c7:f9:16:
b0:bd:d2:cb:cb:05:0b:79:ff:b3:dd:cd:99:df:b8:d2:9e:70:
5b:0b:a8:1a:ca:8f:63:96:48:a6:5e:ce:67:b7:62:d1:a8:a2:
32:22:29:e7:33:97:f8:78:24:97:a5:4c:d4:2c:3c:c5:c0:af:
24:5a:52:32:45:c5:b9:cb:b2:45:af:77:8e:97:0c:66:71:19:
02:c0:ea:45:30:d5:ab:92:73:83:f7:f3:0a:2d:66:0f:1e:b4:
27:92:81:24:33:8f:c9:75:3d:e8:d8:34:0a:31:0d:71:f8:dd:
bc:a2:19:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU2MDQxMTAvBgNVBAUTKEEzREZCRTExQUY4QTc4RTU2MkNGQjQ1NzkwMENDQUI5
MDkwQzJCNTkwHhcNMjYwOTA0MTk0MDQ0WhcNMjYwOTExMTk0MDQ0WjAYMRYwFAYD
VQQDEw02YTliMWViZC1hMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmFXGy/zPzyjWslMoSxgCFl/QlDt38M5t+EVk8iCve4sDL13v38QVBe0NbmEE
SVIt4Vx7CgIoIX3I8Otfr0RiigWOMpCWmnSsSZxY4Eg4KV7wvu4suY3+QtpjIoaG
Rq1TjBi8wWk7o+pp8oho9HHus5QK7ZYrTm8FbnEzZ6I8t2/7DGXtuaPBVIjaVFo1
9R1qtK1jK3153+Rwmt5fNqM0CpfgxcFU2aBSuNZb97Dm8Fu8eSpgJFs3Rn8oqxj4
ly2wqjHJiLxeeaVx4VNkL2VsgwvloohEyrj6UApC3PmFXDOUj5XlvyCl5Dz1bDjH
87lORBYnsahkP7qegtINwiRBGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnLJUjH
fbLT2rMPM2OFPUFHLqjOMB8GA1UdIwQYMBaAFKPfvhGvinjlYs+0V5AMyrkJDCtZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTYwNC9CQ0VDNkM1RUE0
QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VPVml6N1JYa0F6S3VRa01L
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285LS1FYS1LZU9WaXo3UlhrQXpLdVFrTUsxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTYwNC9CQ0VDNkM1RUE0QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VP
Vml6N1JYa0F6S3VRa01LMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1nBGx6sz2riWZh4bgoQiCbOjd+bE9BcVJmgsVmbJG+b/LE2Xh76YS5bee8MX
teYoBtrOR2DhUgQKqCwEhamFsb7UdW/Kqx9Dyq5t9FbkKLRuifmRXOtNzoGUOmJn
hZroM60IFi7UP1F3mkWCER6QkVILxFODs9LNUZlG5uqKKqK9tsO0N3cTuduvWSZV
x/kWsL3Sy8sFC3n/s93Nmd+40p5wWwuoGsqPY5ZIpl7OZ7di0aiiMiIp5zOX+Hgk
l6VM1Cw8xcCvJFpSMkXFucuyRa93jpcMZnEZAsDqRTDVq5Jzg/fzCi1mDx60J5KB
JDOPyXU96Ng0CjENcfjdvKIZmg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:36:32 2026 by rpki-client