
$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json)
Hash identifier: 4/D3QySmPKWad2mV6bRbsvnwikk3zCrr6oPupmaHJJg=
Subject key identifier: 39:61:01:D4:BB:23:31:B5:FC:21:C3:F5:34:BD:E9:37:96:DD:C1:F1
Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
Manifest number: 0245
Signing time: Wed 19 Aug 2026 03:00:03 +0000
Manifest this update: Wed 19 Aug 2026 03:00:02 +0000
Manifest next update: Wed 26 Aug 2026 03:00:02 +0000
Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: bL7F6oTr++WI/n4yImmVPGl5Ax2HVoT8Kv2mJIWFjU0=)
2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: hX2Iw++PK9Y+cjSdv5iifugQbVGCyctU8mKlkkvrChc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Validity
Not Before: Aug 19 03:00:02 2026 GMT
Not After : Aug 26 03:00:02 2026 GMT
Subject: CN=6a851c32-9155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:9a:8d:8e:d0:8e:00:c6:d5:5a:27:08:52:
1d:70:a8:9b:34:0c:89:73:28:02:94:d4:e9:b5:51:
eb:e5:d4:94:15:6c:22:99:36:8d:31:0f:db:c8:f3:
26:d1:c1:72:93:0a:84:20:06:13:af:d2:af:a4:ac:
54:24:16:4c:d3:e2:cb:f9:0f:2b:3b:27:1f:2c:ee:
a0:a2:c7:c4:e6:fe:39:4e:8a:18:f6:a6:c3:7b:6d:
9a:ea:ef:d7:b9:b0:83:f7:c4:a3:1d:fc:e1:db:2d:
b2:17:c5:f0:ad:bb:27:0f:8e:bb:8f:15:c3:fd:79:
8a:36:11:4d:09:77:4e:69:35:76:8e:c9:4a:2d:42:
11:17:6d:b5:41:99:92:d8:3c:e1:e8:02:51:97:d7:
4a:8a:f0:4e:01:4a:6d:82:3e:09:c4:0a:62:48:65:
c2:14:c8:1f:61:49:2b:a5:07:75:1a:e4:5c:33:98:
37:b5:99:94:7d:85:bf:4c:2c:cd:9a:c1:a4:cf:03:
22:23:f6:28:ff:a2:d0:94:4d:29:b6:9c:ff:97:e7:
7b:02:e9:74:87:83:5e:12:13:ad:aa:89:5b:66:a7:
43:53:31:25:49:0a:87:62:10:5b:ae:83:42:41:e8:
16:05:0e:f4:56:39:97:b1:de:67:44:ca:a2:8f:f8:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:61:01:D4:BB:23:31:B5:FC:21:C3:F5:34:BD:E9:37:96:DD:C1:F1
X509v3 Authority Key Identifier:
keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:0e:11:eb:a3:e5:24:24:06:43:20:1e:26:43:1b:f1:c8:f4:
e0:49:4c:b2:95:57:d3:ac:53:0a:47:ea:49:73:5c:4d:a1:37:
3d:97:b8:2c:51:b4:c2:69:20:71:bf:fc:9a:b0:d9:a3:35:e7:
e5:21:22:c0:41:07:d3:f4:6b:46:f1:58:4d:bd:b4:66:88:55:
ff:ef:90:ba:2d:6c:8b:44:a0:ba:8d:b2:e7:a7:9e:58:e6:f5:
24:0b:86:3d:c6:a4:ce:62:50:79:a3:7d:e7:da:b1:f1:d1:7d:
63:ef:be:56:54:3b:1c:ee:fa:5e:b6:94:e8:06:76:5b:e1:f4:
ff:19:64:9a:48:87:13:0e:a8:c2:bd:cc:5d:57:92:f5:f0:87:
90:12:70:42:f1:1d:94:02:d4:4b:28:40:3b:a0:ab:f1:b6:c9:
42:14:e2:3a:cc:76:ac:a8:d3:ae:5f:db:d1:f2:86:73:6e:d3:
58:9e:f3:d4:5e:aa:f5:34:7e:40:ff:8c:d9:4c:57:b4:c8:68:
4d:b6:a5:f1:30:4a:51:cb:18:4e:2b:f2:58:a4:84:62:81:c9:
8f:0a:0d:d4:94:d1:b6:7a:b4:c6:b3:a0:11:92:b4:8d:86:f4:
8d:11:5f:e3:24:df:f8:de:ef:5f:22:cb:d7:63:d0:11:e7:81:
2f:2c:ba:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:18 2026 by rpki-client