
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json)
Hash identifier: w0rvXhVApCVQJdQzhdXdXsYF3WUiJ0LVsoUksSM7WbY=
Subject key identifier: 72:03:A3:09:C5:8C:05:52:9B:BC:56:22:5D:71:48:87:C2:52:F1:1A
Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Certificate serial: 05E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
Manifest number: 05E0
Signing time: Sat 04 Apr 2026 22:44:36 +0000
Manifest this update: Sat 04 Apr 2026 22:44:36 +0000
Manifest next update: Sat 11 Apr 2026 22:44:36 +0000
Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: LQY030VOcRogDZUHYYOrFv2bJlVNMxr9RWvEZ/9Hx7E=)
2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: y1fQwZPgOu336Lbyq8hEAWUDlZTJlYYK8G8/vltz1rM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1511 (0x5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Validity
Not Before: Apr 4 22:44:36 2026 GMT
Not After : Apr 11 22:44:36 2026 GMT
Subject: CN=69d19454-7f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:7f:79:00:a8:64:77:84:28:68:4b:2c:a7:
aa:c7:8e:a0:6f:d7:ca:4c:44:cb:a8:fe:13:56:b6:
27:5d:6c:1d:7a:2f:b0:4c:04:8b:7d:bd:e4:33:48:
7d:36:07:a9:2d:4b:ec:60:21:0a:46:3d:27:90:b3:
59:71:ca:b4:ae:2a:1a:ef:cc:a4:ea:c8:89:06:34:
d4:fe:33:4d:1e:d8:30:af:77:55:cc:15:34:fa:d8:
3a:1d:ca:95:13:0c:c0:c9:f6:c0:d0:65:d4:fc:cb:
62:30:6b:93:b5:ba:19:66:b0:ae:47:dc:f1:74:e6:
d3:44:56:1d:3c:01:92:75:d9:dc:38:c8:3e:a5:c0:
43:fa:a5:7a:10:65:bf:6f:9a:28:42:ed:20:e2:6c:
7e:23:52:cc:51:85:be:a7:fc:1d:fd:02:02:ea:d2:
0b:90:b2:ca:f2:27:ed:14:b9:20:25:86:6d:b0:35:
f0:5a:d8:6f:12:5f:07:5d:7d:c0:5f:2c:c3:d4:ec:
59:5d:28:f7:15:54:ca:70:27:40:2a:f5:e7:d0:c1:
62:60:4d:be:e0:70:bc:d6:a9:25:c4:61:87:12:aa:
05:3e:63:2b:93:ec:c0:1a:ce:49:2a:50:ce:16:33:
fa:ce:97:96:7b:53:56:79:f9:fc:23:88:b5:e2:25:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:03:A3:09:C5:8C:05:52:9B:BC:56:22:5D:71:48:87:C2:52:F1:1A
X509v3 Authority Key Identifier:
keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:90:81:70:df:b9:b7:f0:67:b4:95:24:39:af:7e:ac:18:dd:
9f:8e:2c:21:49:b6:01:3b:00:36:87:02:a8:55:ee:96:d3:25:
7e:f6:90:bd:07:6f:ed:6c:4f:54:71:00:bb:6c:bb:10:cf:3c:
06:95:d7:82:66:e7:53:db:a2:ef:96:73:b1:fb:ea:85:7f:b1:
32:68:ce:2f:ec:57:1e:73:a4:ab:a6:64:a0:a5:52:99:a5:6c:
59:f4:29:ee:f6:ea:0a:0a:b7:1f:9b:5d:c0:7d:b7:f0:46:4c:
32:95:e9:e9:cb:67:58:8f:f5:9f:7a:ab:00:5b:50:2b:42:e5:
2f:6d:c0:ab:55:1b:0b:9b:cb:5a:9d:49:cb:ff:c1:3c:d4:ad:
3d:70:34:f0:89:12:35:ce:16:f0:c4:ef:d0:c1:5a:5e:7f:43:
27:23:b8:65:91:2a:8e:82:6c:f2:51:aa:02:7e:3c:b6:3f:57:
85:02:e2:af:ca:93:6d:e6:28:2b:74:a2:2f:ab:a7:83:02:da:
23:3e:22:42:a0:ca:48:65:e6:1a:53:84:a0:13:28:1e:db:b6:
05:70:17:bb:a2:40:0d:09:ba:f1:ed:09:be:fa:0f:ea:e1:ba:
6f:5a:70:22:16:e2:c2:34:92:03:81:5e:23:d2:aa:6c:16:21:
9b:77:f9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:29 2026 by rpki-client