
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json)
Hash identifier: Vj6o7wATeULEuEUKOvc5/29aHMTaxvaYzzwbdO1A4Ew=
Subject key identifier: F7:03:B4:2A:A9:F4:03:DE:65:B6:07:01:21:D1:4E:7E:24:0F:A9:12
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial: 06B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
Manifest number: 0683
Signing time: Sat 04 Apr 2026 22:29:55 +0000
Manifest this update: Sat 04 Apr 2026 22:29:54 +0000
Manifest next update: Sat 11 Apr 2026 22:29:54 +0000
Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: GhZsLPwn/qwTOMKFfjrFYZphBj6/R0klPeyxVnZAHn8=)
2: 05646F7C268211F19B4B306BB2833773.roa (hash: HZzicft3bos6w7OuWhMV24pkNyMhlarAtyII9OEKTS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714 (0x6b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Validity
Not Before: Apr 4 22:29:54 2026 GMT
Not After : Apr 11 22:29:54 2026 GMT
Subject: CN=69d190e3-96ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:62:a2:9e:b9:9d:99:5a:2f:c1:f3:09:22:
bc:b9:3d:b0:2c:b9:d0:64:3e:ca:a3:f8:5b:d3:ab:
2f:fc:7f:51:d7:d0:e1:da:51:78:f5:eb:b1:1c:09:
e1:6a:5a:cf:39:b0:e6:40:44:0f:ad:79:87:0f:c4:
60:f2:5c:00:7a:ee:d0:37:0c:ed:e8:09:84:a6:c2:
0d:63:5b:34:98:2c:5f:47:80:b0:83:8d:59:69:33:
09:db:51:b9:f6:30:1a:eb:0d:23:5d:ae:ca:f9:fb:
4c:7e:ae:89:60:87:5a:d2:7c:b8:fa:18:d8:0d:b2:
cb:2d:26:4a:2c:98:83:51:5c:6b:26:ce:f0:99:16:
5d:50:f6:2a:4c:41:f0:f0:4e:0a:8a:cc:4b:54:83:
5f:9c:eb:15:b7:37:b5:b9:74:f0:04:cf:51:07:7f:
5f:9d:f8:05:36:f1:52:d9:dd:1d:8f:84:7e:58:ec:
df:14:cb:fc:c4:b1:a5:c3:9d:f2:d3:b8:4d:ce:56:
eb:b6:95:97:48:7b:68:8b:c4:ef:4d:e4:5a:76:bf:
ee:af:f0:fe:d6:d9:64:11:b6:ec:bb:61:f2:9d:ad:
c3:42:38:54:96:de:82:93:fa:fb:76:40:ce:e3:39:
41:95:31:3d:cd:a1:b3:76:7e:bb:64:b7:59:42:8a:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:03:B4:2A:A9:F4:03:DE:65:B6:07:01:21:D1:4E:7E:24:0F:A9:12
X509v3 Authority Key Identifier:
keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:2f:b3:af:cf:b7:09:26:e9:36:73:67:d9:c5:68:06:3d:e0:
d2:e8:08:dc:d4:6e:66:29:8f:ae:f5:09:aa:d3:1b:ef:d3:b0:
75:ba:da:d3:6b:1a:ce:a6:e2:c4:2b:4f:57:81:83:88:09:c8:
25:65:2b:93:33:76:b4:fe:50:7a:9e:43:53:4b:98:a2:ee:ba:
4d:cf:7f:65:16:50:b6:3d:6e:c0:46:29:11:ba:da:32:43:95:
38:d4:e4:fd:36:c0:98:99:9c:95:0b:90:6d:53:7a:a1:75:d7:
2a:35:82:ec:21:ac:04:16:e1:aa:14:c5:df:7f:76:e9:70:0a:
16:66:e2:45:79:63:24:8c:7a:37:21:07:3c:b9:0f:1d:98:78:
78:7a:78:f6:f7:25:ca:a7:47:39:de:16:4c:1c:34:12:be:43:
96:74:a3:e0:12:96:36:92:48:9e:06:e5:46:f3:98:aa:9f:2b:
b7:5e:75:72:58:e9:04:44:80:ac:00:36:7b:f3:74:cf:2f:a5:
48:e7:6f:8d:17:4f:51:74:58:1d:20:ff:4b:13:3d:bf:a0:10:
28:08:4d:ad:b1:69:13:82:60:55:2c:97:ce:94:22:16:e5:6b:
14:ac:3f:cd:00:23:a3:bd:9d:24:87:90:03:70:5c:e6:fb:97:
e3:ff:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:54 2026 by rpki-client