
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
File: o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json)
Hash identifier: Zj+WJKVQ7LbBQHQmvHCXnxNMimaU/58vS1nZMeDG23A=
Subject key identifier: 49:54:42:21:A4:C7:4E:41:FA:05:40:F8:6F:6C:5B:4B:0A:F4:24:F4
Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Certificate serial: 0497
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
Manifest number: 0490
Signing time: Wed 19 Aug 2026 00:20:55 +0000
Manifest this update: Wed 19 Aug 2026 00:20:55 +0000
Manifest next update: Wed 26 Aug 2026 00:20:55 +0000
Files and hashes: 1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: 61NBFCxcduBfR8Cub/dbBP7m8kFLYWjxDWyP8z9qot0=)
2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: fiTho/TerZpO+3DrMondjvawf8v6tA9SLzSvEGlCEZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl
rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Validity
Not Before: Aug 19 00:20:55 2026 GMT
Not After : Aug 26 00:20:55 2026 GMT
Subject: CN=6a84f6e7-e44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:36:91:cc:ce:da:22:7a:0f:e4:30:f0:42:14:
f2:1b:d5:2e:ad:2e:24:b3:26:e2:70:c8:0b:6d:9c:
31:d2:1f:6e:fe:8e:d3:a0:bf:83:92:5f:1b:84:e6:
08:59:e6:b5:fc:bf:06:9a:e5:c8:59:99:f3:c9:9f:
bc:61:06:3d:6b:23:d0:29:b2:ac:40:58:67:78:f4:
71:fc:07:d6:c7:36:54:7f:27:78:0a:18:ac:9b:24:
ea:cc:66:db:df:97:12:a6:e9:aa:1d:a2:b7:a8:56:
31:1f:a0:aa:7a:a4:36:4c:81:80:77:e0:6f:d1:b3:
91:83:d1:62:33:53:16:d6:d2:7b:ba:c5:ab:81:fc:
a6:56:de:4e:32:dd:15:14:ef:6b:15:1f:0f:4d:5b:
fe:57:90:e2:94:b9:38:77:9a:d5:d9:12:4d:eb:3e:
fe:8c:49:53:cf:7a:c3:53:79:62:0e:f6:d5:0f:32:
44:e1:61:af:73:66:03:9e:4a:f6:52:d4:2a:9c:43:
3c:ac:dc:7d:8c:7e:42:30:32:65:98:47:0f:8f:41:
0b:05:0e:c7:40:8a:69:cd:35:3a:4e:9f:5c:ed:fa:
b8:2f:df:57:4e:01:a0:b4:84:b5:38:d7:29:20:5c:
ab:d8:93:e8:11:fb:a5:3a:26:d4:11:85:5e:b1:9b:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:42:21:A4:C7:4E:41:FA:05:40:F8:6F:6C:5B:4B:0A:F4:24:F4
X509v3 Authority Key Identifier:
keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b9:aa:9a:ed:84:82:b6:ab:16:6f:fa:1d:f4:b1:50:08:1d:
a7:71:c0:87:65:e1:9d:cb:b8:c1:39:fc:e3:7d:a3:52:97:b9:
d0:6a:46:d9:f6:dd:b4:78:63:7b:5d:64:09:e2:77:ee:5e:29:
27:d8:17:95:a0:07:fa:45:62:5f:c7:48:d7:d2:db:32:83:cd:
00:72:cb:b5:65:63:cb:6b:6d:dc:27:fb:e3:d7:82:f2:fe:d9:
dd:44:c7:91:0e:d3:1c:61:d4:b9:09:27:b1:da:72:a3:cb:14:
1e:64:a3:d4:f9:9f:50:e3:8b:b6:51:48:41:5f:66:da:c9:e2:
3a:a5:23:d7:91:ca:d8:21:90:ee:26:be:32:24:c9:2a:78:95:
7d:aa:e5:e1:4a:6d:6b:f4:1f:b1:2b:3a:5e:df:a6:b6:8b:01:
2e:d7:d5:c6:2d:e1:74:20:a8:90:ec:08:09:93:a6:51:98:a6:
2d:97:f7:cb:83:4d:ba:29:39:af:62:6b:cf:34:94:9f:c5:6f:
36:6a:cd:93:4f:0c:f6:9f:be:8b:3e:3c:91:e5:61:a7:ec:63:
c6:80:58:9c:08:09:86:2a:8a:fa:72:31:94:90:ca:0a:63:9a:
29:ce:2f:5a:39:f8:c4:3c:ad:7a:99:6a:60:e1:bb:34:82:cd:
d6:94:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:23 2026 by rpki-client