
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.mft
File: POwBojpouGUmd4W7YIfAna3JWkI.mft (raw, json)
Hash identifier: KBKy1LmHxA1tWxxV1VvVz3CMrlWu1p2SGcny6kCBDpI=
Subject key identifier: 23:BC:AC:8C:3F:91:D7:12:76:FD:EA:DD:55:0B:64:55:B4:F9:A0:60
Authority key identifier: 3C:EC:01:A2:3A:68:B8:65:26:77:85:BB:60:87:C0:9D:AD:C9:5A:42
Certificate issuer: /CN=A9150291/serialNumber=3CEC01A23A68B865267785BB6087C09DADC95A42
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.mft
Manifest number: 15
Signing time: Wed 07 Oct 2026 09:44:43 +0000
Manifest this update: Wed 07 Oct 2026 09:44:42 +0000
Manifest next update: Wed 14 Oct 2026 09:44:42 +0000
Files and hashes: 1: POwBojpouGUmd4W7YIfAna3JWkI.crl (hash: q/YJL9+iC6uFi/cTvg2VHur5bPj8z8KGexF+lA9sn9Y=)
2: 6C972D86AC1C11F1B31E0A3B3411F970.roa (hash: n1CRUyDZguF1Oqp4ARd64HpB4SMYX+Mnn5zg/em3u8g=)
3: 2B4C31BEAC1C11F188F54D123411F970.roa (hash: gwwobKaEiehWlvo2lzNMzGg+0baEAyvc96ounKXLUf8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.crl
rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150291, serialNumber=3CEC01A23A68B865267785BB6087C09DADC95A42
Validity
Not Before: Oct 7 09:44:42 2026 GMT
Not After : Oct 14 09:44:42 2026 GMT
Subject: CN=6ac6148b-28ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:8c:c7:1d:da:95:02:22:ab:7a:14:80:d4:
47:de:4b:f9:2e:e3:db:18:09:ad:b3:b7:1c:32:6c:
f8:d5:78:e1:79:04:85:25:b5:32:2c:bb:99:8f:c7:
d4:98:2c:36:04:a2:04:89:a1:11:61:2f:72:9a:d3:
18:02:04:34:22:d5:9d:16:b9:c1:3c:a4:71:a3:14:
43:6a:84:87:61:b6:30:2d:23:50:6f:21:66:2e:1f:
42:9a:ac:fb:1b:7d:eb:49:aa:14:a2:1e:09:d2:08:
24:03:8b:6a:d3:20:3d:bd:27:c3:84:62:fe:5a:f5:
a2:49:55:ea:cc:ff:f0:ed:2d:96:a1:ca:27:d6:28:
3c:60:25:ad:df:35:d0:33:d4:27:7c:5b:6b:aa:60:
7f:52:74:7c:50:fd:9c:3c:8b:50:6d:eb:aa:75:fe:
fa:5e:14:13:c3:07:46:64:fc:c2:e8:1a:fc:44:b4:
0c:0d:e9:04:25:28:e2:9c:01:a4:e2:ee:8f:dd:52:
5c:00:7b:09:f4:9c:7b:36:34:c2:5a:9e:fd:b5:68:
b6:d5:f8:87:05:e1:ca:c7:ef:25:a7:11:9f:42:e4:
2d:87:51:99:8a:9d:7d:ea:4b:d4:9c:15:30:cb:37:
dd:0c:67:4f:f0:36:0b:5a:fb:25:54:38:5d:3a:48:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BC:AC:8C:3F:91:D7:12:76:FD:EA:DD:55:0B:64:55:B4:F9:A0:60
X509v3 Authority Key Identifier:
keyid:3C:EC:01:A2:3A:68:B8:65:26:77:85:BB:60:87:C0:9D:AD:C9:5A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:85:78:88:b6:ae:bb:31:08:ad:42:42:d5:c6:d1:0d:63:5e:
9a:99:d0:42:b5:c3:1a:81:aa:36:20:4f:0c:61:d6:24:06:f2:
3a:be:2c:05:1f:d7:b5:fd:32:b8:04:2b:33:4f:3d:1b:d6:d2:
6d:cb:73:fd:e5:ab:79:84:b5:75:a8:ed:b0:e9:12:b9:85:40:
33:0a:65:d1:f0:8d:70:d6:99:70:26:a0:ee:3e:22:f3:ff:74:
23:43:91:e2:99:56:c6:6e:52:6e:96:82:e3:1d:8b:3d:64:51:
c0:f5:64:91:35:42:bf:cb:41:14:97:62:9c:90:b4:74:3c:63:
a1:91:2c:b4:21:cd:32:24:0d:73:ac:65:c7:4a:27:b6:b4:4a:
03:a9:6d:f5:70:bf:62:40:ff:ef:fc:ad:a6:87:0e:b0:52:fe:
c0:85:87:9d:84:f7:be:a1:c6:72:97:fd:c1:80:e6:f8:a2:79:
e2:3e:bc:1b:08:17:81:eb:40:36:80:d3:70:7f:e0:99:55:e4:
77:4e:86:30:cb:f3:79:51:75:7e:a1:cb:73:e7:98:09:d6:56:
39:0d:29:91:4b:00:e2:ef:fb:a2:38:3a:4c:26:88:3e:06:54:
df:30:fc:4c:f9:40:16:25:fd:f0:b7:5a:96:8e:a9:79:5a:9b:
ac:a7:42:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:47:36 2026 by rpki-client