
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json)
Hash identifier: bx3azc3kdtepwy9vgVfx/0PQd3g1xauXVtlLWnsKxpA=
Subject key identifier: E8:9B:F0:19:76:1E:D3:18:71:04:A4:76:F2:A2:DE:8A:D3:EF:0F:99
Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
Manifest number: 0230
Signing time: Sun 05 Apr 2026 02:12:20 +0000
Manifest this update: Sun 05 Apr 2026 02:12:19 +0000
Manifest next update: Sun 12 Apr 2026 02:12:19 +0000
Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: kWf1fBStUr5BDQ3RE6xRsLZUVZf96yc1VWvc3D8lPWI=)
2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: HLxpBgf2BiS9RoMk9148N++nqSRKey+SFnFlfYeHOnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Validity
Not Before: Apr 5 02:12:19 2026 GMT
Not After : Apr 12 02:12:19 2026 GMT
Subject: CN=69d1c504-9a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:91:48:77:9c:32:af:40:8a:47:d5:5a:73:
b5:93:58:bf:25:9f:73:00:85:a0:87:90:2f:d9:b8:
81:ac:58:32:a9:45:a2:6e:05:dc:ce:74:5d:8e:1c:
2d:f0:2d:c2:cf:02:cd:21:97:5a:19:38:11:d4:c7:
a4:64:72:c3:60:33:fc:7e:60:da:8e:4f:92:ac:90:
08:0c:10:e4:89:fa:e3:f4:5d:66:25:43:b5:d2:0a:
6d:d3:0e:48:f0:c2:97:1a:66:4b:6b:20:e2:7b:54:
1d:55:d4:7f:90:d3:64:1a:35:ca:99:5c:df:9b:89:
b1:ca:06:8e:f1:bb:3b:53:b3:9a:e4:f3:c6:8a:40:
16:6b:58:38:0b:5a:80:21:28:09:28:0e:6b:f0:68:
da:f1:73:5f:89:67:ce:38:a2:86:67:89:a8:cb:e5:
82:d5:4e:41:b5:f7:ea:c6:68:3b:f5:2f:a6:6d:50:
fe:59:91:a6:64:28:a1:75:1e:b9:bd:75:50:34:9b:
0f:e7:f7:fe:86:b0:c4:2f:39:50:ba:fe:48:b7:17:
cd:92:cf:fa:06:fb:3e:ca:36:21:cd:7d:fb:e9:22:
cf:73:a2:03:83:84:83:55:98:6f:13:b4:e7:f2:35:
be:1d:05:c3:ba:73:ff:ae:db:5f:56:a6:c5:8a:ce:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9B:F0:19:76:1E:D3:18:71:04:A4:76:F2:A2:DE:8A:D3:EF:0F:99
X509v3 Authority Key Identifier:
keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ae:23:54:3f:f9:4a:9b:e0:4c:1a:60:99:16:9a:a5:c6:f7:
53:bd:b0:e3:5b:e8:d4:cf:b8:f8:3d:c5:c3:e9:83:d5:06:d1:
e8:f3:bf:f7:bd:da:8c:99:cd:8d:09:02:7d:2e:52:5c:74:c5:
d8:43:c2:9d:c1:1f:2c:2d:0c:4c:31:95:5f:88:66:98:3e:12:
a8:72:74:83:be:07:94:9d:41:84:1b:86:53:e0:7e:ed:a0:6d:
73:05:e9:5f:48:c7:0e:01:e8:fe:d0:ca:e3:ef:6a:f2:9e:4f:
d4:8d:f2:2b:d8:51:53:bd:d6:97:57:d3:76:5c:55:1f:e4:80:
3f:58:0f:05:f8:a5:28:6a:8d:7f:7c:24:44:f4:2a:9a:9c:bd:
98:74:33:bf:07:1a:3b:61:8d:bc:ec:9d:3f:b0:70:f4:46:c5:
d0:ba:2d:65:93:99:38:1c:42:2d:ba:2a:48:1e:2f:72:c6:27:
7d:e2:a9:b6:9c:dd:98:9f:02:43:9d:af:1a:52:23:0f:3a:84:
26:98:be:3b:71:23:4a:fe:b5:2e:51:25:89:17:94:45:8a:15:
67:04:d9:1c:03:10:cc:e3:f4:33:17:e2:50:90:8c:25:c8:04:
54:e8:63:dc:60:eb:0e:79:53:8b:c9:51:35:a5:13:a7:1a:4f:
76:81:3f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:20 2026 by rpki-client