
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json)
Hash identifier: xsESrTbqfjg/8SikLHeDWZlwU/3734bPRj0qyR18+y8=
Subject key identifier: A1:8C:3B:0E:11:82:08:D2:AB:3C:0A:03:A4:DE:74:A1:CF:3B:A3:94
Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
Manifest number: 0247
Signing time: Thu 21 May 2026 02:28:38 +0000
Manifest this update: Thu 21 May 2026 02:28:37 +0000
Manifest next update: Thu 28 May 2026 02:28:37 +0000
Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: vnVbfGBStRrzNe6jW8r2AwADfW1ZJ8SpBEJYrmKNBuI=)
2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: HLxpBgf2BiS9RoMk9148N++nqSRKey+SFnFlfYeHOnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Validity
Not Before: May 21 02:28:37 2026 GMT
Not After : May 28 02:28:37 2026 GMT
Subject: CN=6a0e6dd6-ab21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:8a:85:ed:d8:57:09:7c:9c:98:7c:9d:9d:
66:b8:5b:d1:8f:17:cc:9e:b4:6c:15:dd:10:e3:48:
1a:34:18:70:df:66:48:f6:bd:e5:7a:8e:9d:1e:03:
5a:51:c3:9a:f5:4c:f9:0b:72:9d:31:fa:46:0d:c3:
f7:39:a3:c3:14:e4:33:88:a8:90:e5:7a:03:7c:1b:
0d:dd:3f:5e:21:67:aa:a9:d9:0a:8b:1f:0b:95:c1:
7d:c3:e3:c0:72:2c:e0:53:fd:18:9b:93:47:23:64:
d9:7b:85:64:e2:01:76:0e:ef:03:b3:39:57:92:24:
f9:7d:be:74:67:63:e6:75:08:e6:24:45:1e:b0:25:
8e:42:05:d1:ac:58:81:bf:7a:ac:22:de:51:38:6a:
86:e6:84:0f:2d:63:58:cf:2d:91:00:90:7c:c7:7d:
8a:7e:9f:bf:6c:59:97:40:b3:5b:94:29:8c:0b:a5:
df:11:64:b1:89:a4:ff:21:c1:d4:4b:97:b8:a0:ef:
a4:d2:83:5f:3f:17:04:5d:a1:29:71:a3:df:e5:6b:
5c:e9:92:03:a3:78:85:f8:33:f4:42:fe:a3:59:1b:
ee:cf:b0:f8:32:83:07:66:a4:db:33:f9:98:32:3a:
b9:7b:aa:36:50:e7:dd:6c:b4:ae:c9:d9:27:67:46:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8C:3B:0E:11:82:08:D2:AB:3C:0A:03:A4:DE:74:A1:CF:3B:A3:94
X509v3 Authority Key Identifier:
keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:28:2f:04:e9:0e:ec:ce:19:46:24:9c:16:ab:b4:9e:46:6f:
ae:d0:f4:90:1d:e0:0f:15:61:8d:7b:f3:55:99:54:6d:3a:b4:
2b:ac:5c:b7:76:1a:76:ba:2c:02:5d:5e:1d:9c:02:34:f4:c2:
59:89:fc:ab:03:f8:60:96:08:80:84:91:45:71:8b:55:a0:4f:
62:c8:ea:5c:ac:0d:92:88:ff:f8:4e:c3:af:f8:57:67:99:65:
29:ea:1f:86:ea:71:3c:0f:bb:a3:aa:92:eb:b5:b1:e7:3c:bc:
d8:30:d2:6b:10:9b:54:72:58:6b:0d:7b:81:56:52:38:43:20:
f2:bd:df:35:89:07:48:eb:3d:16:1b:3f:85:fa:a9:b8:0d:94:
e3:89:9b:56:32:27:98:0e:9f:c6:5c:7e:9a:1b:76:1e:92:06:
95:4d:c8:98:77:c0:5a:19:38:3b:c3:99:f9:00:fc:e4:96:95:
dd:48:f0:98:5c:c2:46:c8:ae:0c:45:55:fe:4e:31:dd:e9:b8:
d5:f9:38:7d:c8:7e:19:3e:b1:79:82:70:80:c1:39:a5:23:8b:
77:8b:8c:38:b7:35:6c:94:80:d4:ca:6f:f0:29:dd:43:10:fd:
2f:fe:c8:e0:96:61:08:0b:1e:83:33:cf:bd:b6:b0:34:06:eb:
ad:b3:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:14 2026 by rpki-client