
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
File: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft (raw, json)
Hash identifier: vSs3XWk8mpyenpxf9E93qRvc5+P7wVkruFJF7+2YF+M=
Subject key identifier: E9:B2:84:8A:EE:0F:D9:16:29:64:66:88:15:16:87:C5:AC:B3:09:DF
Authority key identifier: E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7
Certificate issuer: /CN=A9189D79/serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
Manifest number: 75
Signing time: Wed 21 Oct 2026 08:31:53 +0000
Manifest this update: Wed 21 Oct 2026 08:31:53 +0000
Manifest next update: Wed 28 Oct 2026 08:31:53 +0000
Files and hashes: 1: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl (hash: S0A6cgcWjkhoa+EWdkfBFbXuugpLMZFy5/VbXsfYkak=)
2: 192C64F2252311F18B88524DC4833773.roa (hash: 7vrnXHB3qUyKbQqkedi+hisuqsIblcG1yBKlH+P3Y3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl
rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 08:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D79, serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
Validity
Not Before: Oct 21 08:31:53 2026 GMT
Not After : Oct 28 08:31:53 2026 GMT
Subject: CN=6ad87879-633f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:f4:30:47:d0:23:50:6c:0d:d3:2f:e6:3f:
03:5c:43:f2:cf:6f:ff:e6:5a:93:ce:4c:c9:c0:8d:
98:30:b2:b0:90:aa:6e:61:61:36:d7:b4:a3:4f:56:
8f:5a:57:05:e0:2d:d0:3a:6e:97:cf:d3:4c:2f:49:
b1:bb:69:fa:db:00:7a:50:fc:fc:0f:57:76:6d:bb:
23:d3:99:72:0b:a8:d1:8b:59:62:76:13:ca:c4:72:
24:f2:0e:6d:c3:d1:1c:56:ce:a8:a1:19:28:a6:c7:
78:ef:08:83:81:4f:28:7c:29:c8:a1:29:f4:60:84:
a0:cb:85:17:2a:30:77:32:cd:dc:ee:9c:0f:ac:4d:
37:94:9c:a5:24:4b:1c:a6:e8:65:4d:43:c5:04:ec:
76:31:38:0c:ea:d3:0c:7e:7d:26:15:b0:8f:7c:d1:
c5:cc:ce:42:10:78:2e:93:a9:92:bb:69:54:cc:f3:
37:71:d7:32:6e:47:20:d4:d2:f0:8a:0a:f3:8f:2e:
ed:97:49:d9:66:73:1d:5d:37:f6:42:52:a0:43:e6:
19:31:ec:dd:dd:97:26:33:fe:63:56:d8:8e:32:87:
74:b2:f0:eb:b9:cd:cc:88:ed:34:05:95:c1:2b:0d:
dd:eb:6c:da:32:ea:c4:02:ec:48:2d:43:e2:cd:60:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B2:84:8A:EE:0F:D9:16:29:64:66:88:15:16:87:C5:AC:B3:09:DF
X509v3 Authority Key Identifier:
keyid:E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6b:79:93:b9:d3:ea:ba:0d:de:c4:01:7b:02:a4:f9:08:b6:
f0:25:85:7f:2c:a9:65:ca:99:cf:e1:e6:be:03:40:3d:53:b4:
7e:49:10:f3:0d:1b:90:38:42:f6:8e:3a:63:a0:3b:1e:ac:89:
a5:14:bd:92:d7:1c:db:2b:25:d1:bd:80:b3:75:fe:16:d2:ae:
a6:61:51:bc:36:3a:1a:7e:2e:e7:e0:62:e9:a9:c4:c1:35:7a:
db:a5:26:43:24:3c:d0:57:08:10:0b:f9:33:43:24:69:8e:28:
4b:ba:15:19:5e:af:ee:a5:43:05:5a:f6:91:dd:6b:ea:26:4c:
a8:4c:7b:39:ba:17:fc:d2:86:9d:a4:dd:10:d6:4c:20:91:e1:
8e:39:f2:d7:ad:64:b8:f2:f5:1d:02:68:46:ca:ed:8d:4d:e1:
42:98:85:09:d5:70:f9:15:c0:c4:c8:7a:96:7a:3d:ab:a3:a3:
cf:b7:2e:b9:c6:ca:f5:9b:4d:bc:39:0b:2c:3b:0e:a3:48:be:
3c:02:67:2a:66:d5:03:06:e6:bc:0d:98:2a:56:7d:a7:72:4f:
ae:54:9b:90:9f:64:6c:94:7b:ef:16:94:32:39:3c:8a:74:d3:
e9:3e:b6:98:95:d2:e8:fb:8e:9e:65:57:bc:2b:0e:b6:7d:8b:
ee:60:f2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:58:06 2026 by rpki-client