
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
File: o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft (raw, json)
Hash identifier: Tkg7Gjql0rozaQou5ZD1/6X69aRZ+HTQHB4LhCRUOAY=
Subject key identifier: 9F:44:D5:9E:72:71:65:B1:D5:8E:99:40:64:7B:BD:5C:D4:0B:A5:58
Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
Certificate issuer: /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
Manifest number: 028B
Signing time: Thu 21 May 2026 01:48:04 +0000
Manifest this update: Thu 21 May 2026 01:48:03 +0000
Manifest next update: Thu 28 May 2026 01:48:03 +0000
Files and hashes: 1: o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl (hash: vE6oYRkunczGhQFclxIsRCYaEihqBZqiyddIvOKcgWE=)
2: CCCA3842714711EDBB61A87FC4F9AE02.roa (hash: dQes4cKEo3vqUyE4KHkW1L+GW6dnJAq7VF/ynzV3hTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F6AF, serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Validity
Not Before: May 21 01:48:03 2026 GMT
Not After : May 28 01:48:03 2026 GMT
Subject: CN=6a0e6454-f696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:5f:8b:ba:3e:49:ae:92:b2:94:14:82:95:
8f:ea:8f:91:aa:a0:97:3c:82:b5:e8:f3:ba:6c:41:
ff:68:72:3e:90:ae:c3:89:f3:6f:47:41:03:44:15:
ac:50:47:6b:f6:8e:44:e2:06:95:9b:8a:d5:c0:1c:
1a:ff:ac:e1:e9:b7:ca:7e:74:c3:3f:e4:55:06:04:
84:6a:a9:b1:f0:2d:ac:1d:1c:3c:9c:e9:01:0b:12:
9a:1d:d1:39:2e:4a:22:2e:ae:ce:21:90:6f:d2:f0:
f5:75:d8:de:71:aa:7e:60:1b:3c:2e:e5:fb:b3:21:
a6:e4:d7:c4:c3:cd:ef:a3:2f:f4:58:ad:37:08:ca:
2d:98:b2:8d:b1:3a:37:28:eb:fa:b7:d0:b8:0c:ae:
ff:fe:74:f1:20:f3:70:22:33:b5:3b:4e:b7:e8:16:
35:36:fc:e5:54:81:d3:e1:92:0b:e5:b1:5e:55:cb:
7e:7d:ec:b0:21:73:f7:e6:c4:96:da:42:73:37:6c:
7c:35:b1:66:fb:d8:3a:10:a3:9b:c1:38:f0:f2:98:
99:e9:f6:1a:27:b6:d0:fd:46:1c:c9:19:68:d9:a1:
99:12:45:6f:f6:f1:e1:f0:48:f6:69:a1:5f:69:17:
9b:55:6d:b3:c7:e6:f2:08:c3:3a:44:f9:57:b0:01:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:44:D5:9E:72:71:65:B1:D5:8E:99:40:64:7B:BD:5C:D4:0B:A5:58
X509v3 Authority Key Identifier:
keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:36:dd:2f:0c:b5:45:ab:1b:fa:90:81:cc:7c:c6:b0:fb:35:
79:36:be:34:e0:70:39:2b:92:80:60:bc:e3:22:b7:50:89:14:
34:99:5c:22:0b:f3:d0:41:7c:6f:c2:80:d1:ae:b7:a6:a2:00:
a4:4c:2e:fc:1a:72:70:b7:33:cf:1c:41:7a:c9:b7:4a:05:8f:
fb:2f:56:59:4b:f4:e6:ec:0f:1c:e5:fe:98:68:4e:00:ff:e8:
a2:04:8f:da:88:83:25:fb:8d:b9:be:9e:13:66:4a:a4:cc:0a:
16:9e:16:9b:6a:f5:1e:0c:d8:45:da:38:b5:dd:2e:84:df:70:
ae:1b:9a:63:31:47:d5:e3:3a:99:f7:ef:4a:2b:a3:0e:25:a8:
90:c8:ee:9e:56:d9:da:92:0d:1d:e6:ae:ff:dc:9f:a4:fa:77:
e5:e5:71:b3:8b:5e:41:bc:a6:1d:b2:90:7f:1b:cf:ec:50:85:
ef:9b:98:18:c4:99:a5:90:9a:62:7a:97:ca:c2:f1:cc:24:2a:
8a:83:27:d1:2a:82:f0:f8:74:43:de:5e:4a:43:8d:3b:ec:69:
55:55:83:24:89:ec:6a:f3:47:73:e0:14:3e:98:92:f7:8d:41:
14:31:32:d7:0d:75:7d:9f:d2:e2:38:27:0e:a1:d7:4b:09:32:
43:9c:d6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:36:38 2026 by rpki-client