
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json)
Hash identifier: kgXGkNLACMbozJfYjfGuiHVx1GPLuTsvBmTMeLgSRf8=
Subject key identifier: B7:EB:34:8F:6B:AB:8E:48:67:BA:54:10:BE:4F:B5:18:15:11:2D:F7
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial: 06C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
Manifest number: 069A
Signing time: Wed 20 May 2026 22:41:25 +0000
Manifest this update: Wed 20 May 2026 22:41:24 +0000
Manifest next update: Wed 27 May 2026 22:41:24 +0000
Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: uoV2Uhiy+j3iWfl9R1yQBnK+N9v8IREB1niezb7FvxI=)
2: 05646F7C268211F19B4B306BB2833773.roa (hash: HZzicft3bos6w7OuWhMV24pkNyMhlarAtyII9OEKTS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Validity
Not Before: May 20 22:41:24 2026 GMT
Not After : May 27 22:41:24 2026 GMT
Subject: CN=6a0e3894-7e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:7e:a3:2f:6f:5d:44:ff:a6:5b:69:08:e2:
48:5b:05:a1:23:d8:7f:9a:6d:93:86:da:03:30:47:
bd:9e:fd:6b:f3:64:83:c0:c2:e1:35:96:09:9a:24:
9c:4b:95:8d:16:35:df:bd:fe:0d:72:b4:2a:cd:e4:
a3:91:10:0e:a6:11:00:ba:ba:bc:be:d4:1a:5a:5f:
56:8c:00:1c:68:60:07:af:28:31:de:fd:3b:f1:1f:
7f:09:80:42:83:29:ef:e9:7d:40:39:81:3f:24:0a:
4a:46:4a:e0:d0:85:01:79:a4:c5:e4:ad:7d:6b:25:
cb:b1:c9:16:5e:80:3e:d6:d3:db:5a:6c:f7:3f:43:
25:58:ac:62:37:f0:c3:92:a1:57:3e:38:24:c2:5c:
00:28:3d:fd:0e:7f:c0:69:f3:94:96:00:4a:21:5e:
25:ac:c4:26:51:b4:ad:67:78:02:8f:5d:18:1a:c7:
65:ec:65:ac:0e:54:0e:de:e6:7a:b3:32:4d:35:57:
b8:1b:cd:49:c5:66:c8:08:ae:90:9f:c9:0d:93:7e:
92:9c:67:61:c2:3d:b2:9e:b1:b5:93:f5:72:00:59:
60:72:aa:18:3c:e6:d6:3b:d1:c9:04:22:ec:33:08:
7c:cd:ab:18:fa:5b:0a:ab:9b:8b:16:ff:dd:cf:6b:
80:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EB:34:8F:6B:AB:8E:48:67:BA:54:10:BE:4F:B5:18:15:11:2D:F7
X509v3 Authority Key Identifier:
keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bf:74:49:4d:d6:f9:48:df:70:8c:9e:c2:0a:d7:8c:f2:f3:
4c:f6:77:71:93:c4:e5:54:3b:cb:df:41:02:cf:41:4c:4b:0f:
38:84:32:3f:42:e4:58:91:f7:8b:9b:dc:81:d7:dd:74:b1:1b:
2c:7b:7b:01:7c:9f:55:b5:dd:0e:a0:cd:db:85:b9:4c:0c:cd:
d6:0d:a9:8e:c0:b0:dd:a8:51:1c:b6:25:8d:a5:ca:92:d3:f0:
30:cc:0e:3b:ba:68:4b:5e:73:72:01:0a:cb:5c:72:09:9a:56:
06:e8:48:11:44:bc:8a:2c:ae:5d:b3:7e:7b:c6:6b:69:cb:8a:
55:2d:82:23:48:b6:f7:aa:20:41:10:82:42:50:74:bd:79:b4:
8a:98:29:06:db:b5:35:32:50:fd:6d:f8:ae:88:1d:72:e1:d5:
73:35:85:00:4d:85:0b:7a:38:1a:97:57:38:95:e4:ec:37:7f:
76:8b:5b:02:82:ac:cc:5b:a3:6f:0e:f7:72:de:9b:a3:24:71:
e9:4f:dc:3b:9f:63:7f:d8:6e:ef:eb:06:a4:dd:4e:13:40:84:
2f:6d:0b:f2:55:b3:27:3f:3c:08:07:8f:ac:c2:1a:09:46:e6:
6e:99:8b:31:9a:a0:36:4e:05:8e:79:02:40:e1:08:f1:36:1a:
98:47:64:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:08 2026 by rpki-client