
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json)
Hash identifier: 6/36Xdp9365Dlj1gY90uEwTGKc7940g6A7wTnidOd8U=
Subject key identifier: 4E:D9:D1:AB:A7:2A:99:0A:09:57:2A:8C:79:E1:32:DE:C1:9E:F1:B1
Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
Manifest number: 01EE
Signing time: Sun 19 Apr 2026 03:33:47 +0000
Manifest this update: Sun 19 Apr 2026 03:33:47 +0000
Manifest next update: Sun 26 Apr 2026 03:33:47 +0000
Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: y/3zaC6TLrAM3pHk66Ye0crV6EmSRW/RAp5Xf1CesZM=)
2: 5FDFEE6033CD11F18CFC5AA3AF833773.roa (hash: hPRC5eKlupFjxAtp9eK2Lne1uh3zhXawnd3i0sfrxSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 03:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Validity
Not Before: Apr 19 03:33:47 2026 GMT
Not After : Apr 26 03:33:47 2026 GMT
Subject: CN=69e44d1b-55c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:05:61:f1:77:bb:16:23:a8:d6:21:f4:ab:
bf:07:5b:8d:f5:76:0f:f7:fa:14:c8:ec:66:61:0b:
52:bf:36:b1:77:3f:c0:0a:a8:ca:41:60:39:7e:1d:
a1:41:9f:d9:bb:2a:41:ef:68:23:2c:0a:4a:c8:ab:
5b:20:84:2b:50:81:2d:e5:26:6e:d2:2e:9f:42:f5:
29:a4:78:2e:97:81:57:45:3e:0a:2b:42:20:8a:8d:
6a:40:82:3e:d3:ca:1e:10:6f:2e:bd:85:bb:eb:05:
dd:93:0a:8b:27:28:9b:73:1e:dc:35:10:9d:e5:8f:
79:ec:eb:09:35:fd:07:af:17:ea:75:ae:a2:66:e5:
03:93:61:de:1b:be:d9:37:19:ee:c1:a1:ba:1b:34:
ea:29:37:40:d9:dd:6a:e3:ed:91:1a:27:4b:6f:1b:
88:7e:7b:7c:1d:28:39:b7:26:7e:d9:47:e5:c6:2a:
e0:48:5e:c0:79:d0:60:18:e1:fd:1b:de:ef:79:24:
e7:83:ff:5f:2f:11:91:62:d0:2b:49:5d:89:a5:08:
aa:53:3f:79:1f:51:57:72:f8:91:b5:31:57:6c:ec:
2e:88:81:e6:76:91:1d:a2:9c:93:15:24:c5:9b:39:
f1:77:1d:27:f9:a9:7b:f8:4c:5b:b8:83:6c:3a:83:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D9:D1:AB:A7:2A:99:0A:09:57:2A:8C:79:E1:32:DE:C1:9E:F1:B1
X509v3 Authority Key Identifier:
keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:d2:9a:cb:a7:f0:9f:14:cc:8d:f1:ec:fe:f7:c2:6e:ae:f2:
07:6f:d0:44:7a:63:25:5b:ef:4a:02:45:87:9b:5d:cf:84:cc:
2a:19:ce:71:26:43:cd:4a:d9:fa:c0:b4:db:78:66:59:ed:b3:
2a:4d:ed:d9:dc:7f:c2:83:64:03:81:52:5c:f6:fd:e5:d1:97:
0d:16:3f:8f:18:fa:09:74:b7:3c:cd:1e:0d:88:fc:75:0a:67:
34:d6:c5:45:53:2e:3c:f0:7e:c8:cc:3c:ed:66:c4:c6:34:2e:
3a:28:6c:84:28:06:af:a0:72:15:2c:03:5e:d9:a4:44:73:63:
9c:9b:db:38:b5:aa:be:04:53:63:dd:fc:c2:84:f7:2a:47:58:
f0:f4:8d:c9:98:ca:6d:b1:a1:f0:e1:01:ef:a9:74:48:4b:e3:
d0:94:7b:f3:46:86:a3:02:09:07:c4:6c:d3:84:e7:c4:3e:8d:
ec:26:60:b7:0d:c9:06:bf:06:f6:0b:dc:bb:a9:a0:f0:07:f2:
e1:cd:20:48:67:ae:e3:b8:fb:15:07:0a:7f:bc:24:68:53:9a:
91:c8:f5:6b:d8:58:67:93:2a:7f:68:04:50:ad:10:b4:83:c8:
63:81:22:6b:77:e5:4d:66:af:1a:01:09:44:32:92:98:a0:41:
8b:f7:61:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3QUNBODgwRjg3
OEExNEZFNDgwHhcNMjYwNDE5MDMzMzQ3WhcNMjYwNDI2MDMzMzQ3WjAYMRYwFAYD
VQQDEw02OWU0NGQxYi01NWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAug4FYfF3uxYjqNYh9Ku/B1uN9XYP9/oUyOxmYQtSvzaxdz/ACqjKQWA5fh2h
QZ/ZuypB72gjLApKyKtbIIQrUIEt5SZu0i6fQvUppHgul4FXRT4KK0Igio1qQII+
08oeEG8uvYW76wXdkwqLJyibcx7cNRCd5Y957OsJNf0Hrxfqda6iZuUDk2HeG77Z
NxnuwaG6GzTqKTdA2d1q4+2RGidLbxuIfnt8HSg5tyZ+2UflxirgSF7AedBgGOH9
G97veSTng/9fLxGRYtArSV2JpQiqUz95H1FXcviRtTFXbOwuiIHmdpEdopyTFSTF
mznxdx0n+al7+ExbuINsOoO78QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7Z0aun
KpkKCVcqjHnhMt7BnvGxMB8GA1UdIwQYMBaAFDkY2AvLcC7Kz4TLesqID4eKFP5I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyNC9CNDczQzRCRTkz
MzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xzclBoTXQ2eW9nUGg0b1Vf
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09SallDOHR3THNyUGhNdDZ5b2dQaDRvVV9rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkIyNC9CNDczQzRCRTkzMzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xz
clBoTXQ2eW9nUGg0b1Vfa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdNKay6fwnxTMjfHs/vfCbq7yB2/QRHpjJVvvSgJFh5tdz4TMKhnOcSZDzUrZ
+sC023hmWe2zKk3t2dx/woNkA4FSXPb95dGXDRY/jxj6CXS3PM0eDYj8dQpnNNbF
RVMuPPB+yMw87WbExjQuOihshCgGr6ByFSwDXtmkRHNjnJvbOLWqvgRTY938woT3
KkdY8PSNyZjKbbGh8OEB76l0SEvj0JR780aGowIJB8Rs04TnxD6N7CZgtw3JBr8G
9gvcu6mg8Afy4c0gSGeu47j7FQcKf7wkaFOakcj1a9hYZ5Mqf2gEUK0QtIPIY4Ei
a3flTWavGgEJRDKSmKBBi/dhCA==
-----END CERTIFICATE-----
Generated at Mon Apr 20 08:28:27 2026 by rpki-client