
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
File: o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft (raw, json)
Hash identifier: t5zgeLtu3B6BKD5DfeQb0HSDEFLS4iM3W4220A5fG60=
Subject key identifier: A6:86:5C:5F:61:19:90:BD:3D:F7:B8:8E:3E:78:1C:67:7E:CD:9C:7F
Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
Certificate issuer: /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Certificate serial: 02BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
Manifest number: 02B8
Signing time: Wed 19 Aug 2026 01:53:26 +0000
Manifest this update: Wed 19 Aug 2026 01:53:26 +0000
Manifest next update: Wed 26 Aug 2026 01:53:26 +0000
Files and hashes: 1: o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl (hash: xRmvJEsLYqlPmNddiNeqYtq37DxYldXsMbMhGKHzB40=)
2: CCCA3842714711EDBB61A87FC4F9AE02.roa (hash: dQes4cKEo3vqUyE4KHkW1L+GW6dnJAq7VF/ynzV3hTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F6AF, serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Validity
Not Before: Aug 19 01:53:26 2026 GMT
Not After : Aug 26 01:53:26 2026 GMT
Subject: CN=6a850c96-1c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:0b:ce:a0:7d:1e:34:c7:81:b8:eb:5a:8e:
6e:a7:ee:b0:81:e8:6c:d7:73:0d:d2:06:1c:a5:5e:
8f:b9:84:27:b8:6a:0b:55:6f:12:d2:af:42:00:39:
1f:f2:79:29:a2:4b:15:3b:16:d7:14:f0:6f:9f:0f:
69:75:8b:a8:f3:cb:b0:cb:5a:97:6e:24:06:70:bb:
e3:a2:ef:1c:28:4d:98:7d:02:3b:84:ae:d0:b1:0e:
7a:e0:5a:90:06:88:4e:1b:68:c3:4a:16:92:f4:33:
8e:2c:20:46:cc:49:b8:71:35:05:0c:fe:32:a0:02:
23:1e:03:0c:94:05:2f:6e:d9:6c:13:6b:d8:48:e3:
5b:48:7a:50:7a:3b:c6:60:52:a9:8c:cb:bd:a6:ca:
15:9f:80:a0:59:e0:d4:00:0e:4d:2b:e8:50:85:d3:
fd:71:8e:cc:51:e7:dd:a9:ef:07:ad:21:c3:05:3d:
5c:a3:2e:83:d0:e8:97:20:52:a6:26:db:b4:f4:4e:
18:62:84:66:11:0e:26:2d:60:4d:2c:d1:18:e0:96:
62:14:50:d6:9b:2b:76:18:53:df:fb:ce:88:e0:d4:
48:22:da:a4:eb:8f:87:b3:5d:6e:55:8c:43:67:20:
8f:8e:41:a6:ad:ac:aa:52:92:7f:22:33:21:5a:50:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:86:5C:5F:61:19:90:BD:3D:F7:B8:8E:3E:78:1C:67:7E:CD:9C:7F
X509v3 Authority Key Identifier:
keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ec:78:c4:73:0a:ef:a7:bc:04:d5:97:06:9e:28:a5:01:d8:
52:0e:c8:15:55:3d:71:40:65:f3:50:48:00:cc:65:6d:60:6a:
4f:7c:a8:5c:8a:f8:30:62:97:4f:5e:b7:b3:40:8f:ae:24:22:
dd:6d:dc:c8:25:5f:19:60:d3:b9:7d:c4:09:2b:90:ee:5f:25:
2c:4e:0c:75:e8:2b:0a:71:b5:92:8e:12:22:65:9c:76:6f:32:
93:c7:2c:ba:75:a7:5a:fc:89:c0:78:1d:bc:e4:ad:39:91:6b:
47:48:e1:68:1e:6c:67:5f:6b:b6:8a:53:68:76:6f:7c:c2:a9:
68:43:cd:bf:24:07:87:9f:98:14:64:c4:56:ef:1f:b0:30:02:
61:4c:62:e1:5c:6e:d9:a1:82:4f:b3:fd:87:c4:45:c9:03:2c:
18:3e:a5:cf:c2:70:3c:ed:01:d9:05:7a:a4:a7:5d:8c:7a:15:
bc:84:84:f1:d7:73:f2:19:c3:8b:19:c3:f7:94:5c:4b:ff:f8:
f7:70:ab:9c:2e:86:18:87:4b:d5:c0:5c:ea:e0:05:75:3d:4e:
a1:12:24:05:ff:2e:53:03:2a:03:de:c2:00:44:53:3e:a0:9b:
b5:8f:50:ea:ee:05:0a:f7:0a:d7:87:fc:71:39:a8:d7:ce:24:
c8:c9:d1:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY2QUYxMTAvBgNVBAUTKEEzRDI1MEM1RDUyQzVBOEFDNjdCQTAyMTg4NEQxOTFB
NUQ0QTcxODIwHhcNMjYwODE5MDE1MzI2WhcNMjYwODI2MDE1MzI2WjAYMRYwFAYD
VQQDEw02YTg1MGM5Ni0xYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmYULzqB9HjTHgbjrWo5up+6wgehs13MN0gYcpV6PuYQnuGoLVW8S0q9CADkf
8nkpoksVOxbXFPBvnw9pdYuo88uwy1qXbiQGcLvjou8cKE2YfQI7hK7QsQ564FqQ
BohOG2jDShaS9DOOLCBGzEm4cTUFDP4yoAIjHgMMlAUvbtlsE2vYSONbSHpQejvG
YFKpjMu9psoVn4CgWeDUAA5NK+hQhdP9cY7MUefdqe8HrSHDBT1coy6D0OiXIFKm
Jtu09E4YYoRmEQ4mLWBNLNEY4JZiFFDWmyt2GFPf+86I4NRIItqk64+Hs11uVYxD
ZyCPjkGmrayqUpJ/IjMhWlCC3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKaGXF9h
GZC9Pfe4jj54HGd+zZx/MB8GA1UdIwQYMBaAFKPSUMXVLFqKxnugIYhNGRpdSnGC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjZBRi9GNkQ4REE5Qzcx
NDQxMUVEOUZERjNEMTJDNEY5QUUwMi9vOUpReGRVc1dvckdlNkFoaUUwWkdsMUtj
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285SlF4ZFVzV29yR2U2QWhpRTBaR2wxS2NZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjZBRi9GNkQ4REE5QzcxNDQxMUVEOUZERjNEMTJDNEY5QUUwMi9vOUpReGRVc1dv
ckdlNkFoaUUwWkdsMUtjWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaux4xHMK76e8BNWXBp4opQHYUg7IFVU9cUBl81BIAMxlbWBqT3yoXIr4MGKX
T163s0CPriQi3W3cyCVfGWDTuX3ECSuQ7l8lLE4MdegrCnG1ko4SImWcdm8yk8cs
unWnWvyJwHgdvOStOZFrR0jhaB5sZ19rtopTaHZvfMKpaEPNvyQHh5+YFGTEVu8f
sDACYUxi4Vxu2aGCT7P9h8RFyQMsGD6lz8JwPO0B2QV6pKddjHoVvISE8ddz8hnD
ixnD95RcS//493CrnC6GGIdL1cBc6uAFdT1OoRIkBf8uUwMqA97CAERTPqCbtY9Q
6u4FCvcK14f8cTmo184kyMnR0Q==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:35 2026 by rpki-client