
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json)
Hash identifier: 0SY4h0UuM1i0OE135pGgA79pmCXbura9vNHkarzSZIQ=
Subject key identifier: AF:C7:A9:18:2B:23:22:EA:B0:29:9E:FC:2B:B8:46:5D:B1:0C:76:0D
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
Manifest number: 02B2
Signing time: Fri 15 May 2026 01:37:33 +0000
Manifest this update: Fri 15 May 2026 01:37:33 +0000
Manifest next update: Fri 22 May 2026 01:37:33 +0000
Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: Uhk+QDzULOfShaggBVrPzKl4UstKdhJ8+3e2S8tGFd0=)
2: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: ZAAc7Mnkor/okk5rhdONOcQdFtaHRUehKntnjNXP9g4=)
3: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: 4a9piE3zoyvSIfp92HY2+LDrMoD2lXfFwMPpviHmbTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 01:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Validity
Not Before: May 15 01:37:33 2026 GMT
Not After : May 22 01:37:33 2026 GMT
Subject: CN=6a0678dd-56cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:e7:83:05:73:c9:cd:af:fb:93:a2:c4:ff:
eb:31:9b:61:25:55:b7:71:12:12:71:c2:4a:e1:6d:
9d:e8:c5:79:2d:b2:57:ac:86:34:35:df:1e:e0:77:
14:ac:b4:fa:05:56:ed:37:e2:0b:2d:73:33:ab:d0:
cd:4f:8f:59:c3:25:66:70:5a:11:fc:40:35:0f:f1:
6e:95:c0:2a:0a:80:40:90:b4:1c:3e:06:c3:67:35:
4a:6e:b0:b8:36:4f:ce:27:a3:6c:f3:f0:3d:05:f3:
4e:c5:ae:92:5f:3a:aa:81:fd:69:53:8e:1c:73:6b:
52:3f:11:d9:73:af:c9:de:2b:df:e6:b6:9d:4b:6f:
cc:7f:ec:a6:aa:ec:ed:a8:f0:90:6f:04:d5:ed:88:
a4:b5:05:fa:cb:34:56:b4:01:e8:dc:75:9b:2a:9f:
d7:1f:91:d0:ea:89:42:d0:f9:19:e9:66:e5:93:c9:
4a:cf:bf:ec:f3:9e:0c:2d:3f:a7:a5:6a:d7:14:88:
aa:a5:a2:a7:d6:08:9b:34:f8:c3:11:93:ec:88:e9:
0e:f4:2d:9b:18:e1:43:da:c7:62:59:55:cb:03:68:
47:d6:3b:b0:64:ed:66:dd:83:d2:f5:7d:d9:89:e6:
93:27:f7:93:a2:42:77:b0:04:ba:8e:de:82:e0:fb:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:A9:18:2B:23:22:EA:B0:29:9E:FC:2B:B8:46:5D:B1:0C:76:0D
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:48:50:78:54:25:e4:3a:df:f1:41:30:5d:eb:2c:cb:55:da:
e6:dd:2d:3a:ba:0d:69:76:23:32:91:cb:2b:3e:9a:a0:6d:91:
26:4c:b5:21:dd:c6:c6:48:17:0d:1f:f7:7e:5c:9e:e0:09:68:
b9:11:ea:ae:91:d1:f0:81:a0:8f:6d:36:f3:de:97:e0:68:6d:
ce:0a:5e:d6:51:c1:c9:ab:84:0a:9a:62:01:77:c1:7b:1a:4d:
ce:af:02:90:02:59:dd:37:0b:66:8a:92:85:39:b8:02:b9:56:
9b:29:42:94:ef:b7:12:cc:55:00:73:1b:53:ba:9d:31:68:44:
fa:ff:7b:9e:0d:4c:35:48:08:e3:51:46:ed:be:64:b8:19:fe:
e8:64:33:12:a1:2f:51:ff:d7:1a:07:04:44:9e:1a:55:a3:70:
9a:83:25:3b:33:87:fe:34:76:48:a2:92:46:5b:c9:1e:1e:97:
70:47:73:7d:f8:91:15:cc:73:88:32:5a:5c:dc:21:f7:5a:6c:
a5:30:a4:4b:87:39:92:70:2a:72:27:e8:56:73:4a:b2:f0:03:
cd:91:cb:8d:f5:be:83:09:be:89:0f:92:61:d5:82:a3:fc:42:
97:51:bb:28:cd:87:25:5e:dc:66:59:83:12:81:7a:9e:98:26:
7b:4e:ca:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 01:21:07 2026 by rpki-client