
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft
File: O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft (raw, json)
Hash identifier: CNnEnsCW+XfDe6CZrdk1DwuBY4xq+KPVWOY31QQlcYM=
Subject key identifier: 8D:DB:D6:F7:D7:4B:EC:A1:A7:2C:30:66:98:BD:43:38:19:86:A9:62
Authority key identifier: 3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8
Certificate issuer: /CN=A91A3ED9/serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft
Manifest number: 09
Signing time: Fri 17 Jul 2026 10:30:57 +0000
Manifest this update: Fri 17 Jul 2026 10:30:56 +0000
Manifest next update: Fri 24 Jul 2026 10:30:56 +0000
Files and hashes: 1: O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl (hash: 4mkemw/ekeOq/KvDv3nZUkdVDE7Ny+DEL4k6TxV6yTo=)
2: BFA8061876AB11F1AAE01A3C6EA30FBC.roa (hash: 9EIg/lWcSvk9v2gRzJROOuHZdpxkm+Aa8Ro0+T1ph54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl
rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3ED9, serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8
Validity
Not Before: Jul 17 10:30:56 2026 GMT
Not After : Jul 24 10:30:56 2026 GMT
Subject: CN=6a5a0460-a760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:d7:d3:98:ce:7b:b0:a2:59:f6:c2:50:26:
a0:4f:1d:7d:7c:29:2c:d4:58:b4:38:f9:7f:00:c9:
13:c6:84:a4:d1:52:78:a2:a4:92:7a:a2:fc:f7:f0:
63:c0:46:9c:cf:95:a7:aa:f9:f6:10:23:a2:46:3e:
bb:b6:b9:02:36:30:21:69:60:bc:42:0f:f7:df:50:
15:ae:38:a4:26:71:1a:54:bb:f9:a2:15:98:c5:56:
5a:35:71:a5:7d:a2:5c:37:01:84:96:a1:0e:cd:9e:
18:87:49:c2:96:d3:bc:6d:9b:f2:9f:dc:47:7a:c2:
1a:d6:7f:f9:d3:f3:40:84:ad:5e:c2:99:0d:30:4a:
34:b3:2c:7f:9b:cb:7c:2e:f3:e3:76:01:17:f0:9b:
92:d6:4e:04:8a:78:98:fb:82:e7:67:4b:ef:4d:0d:
b3:3d:c7:d0:a1:29:51:fc:dd:a5:87:bc:6b:a3:16:
59:ec:22:17:3e:1e:9d:ad:61:8b:03:3e:17:44:aa:
07:1f:32:23:7c:fa:52:ec:6c:48:10:e8:96:8d:ce:
0b:19:9b:5e:2c:47:de:ea:1b:e8:c8:92:a2:b4:40:
65:dc:05:16:43:fb:e6:36:47:d1:62:6d:5a:7d:21:
0d:f8:76:8a:28:91:37:9c:02:07:2e:50:53:6f:8d:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DB:D6:F7:D7:4B:EC:A1:A7:2C:30:66:98:BD:43:38:19:86:A9:62
X509v3 Authority Key Identifier:
keyid:3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:be:c4:dc:43:60:dc:24:43:e9:26:9f:6c:59:79:a2:28:db:
7e:da:48:77:a3:e0:2f:ff:82:bd:ae:f7:c8:e4:2f:67:9e:6d:
88:06:72:a1:87:b2:0f:f0:12:e9:0d:b5:1e:a9:9e:07:96:af:
73:29:84:1e:89:4b:f8:d3:22:ac:7a:5b:2d:8c:b7:4c:8c:c4:
7f:0a:e1:21:76:bf:5d:8a:0a:d5:3a:ae:b6:18:6f:3d:0e:69:
b1:3d:12:77:91:ef:56:f8:6b:22:31:80:12:53:11:64:d7:81:
5d:a2:3b:61:69:d2:a8:64:08:c5:6a:2b:bc:b6:e3:f0:e6:b4:
ed:7d:d6:fe:74:1c:bd:4d:cd:e1:06:ba:e8:c5:33:89:90:85:
31:28:f2:e8:25:60:bb:3b:d1:47:f4:4c:91:9f:21:4c:76:54:
5f:58:77:da:f0:97:58:01:09:79:f1:ca:fe:c2:51:51:0c:85:
26:d8:c4:a0:e7:e5:d8:2a:56:03:67:88:4a:51:17:4d:43:0e:
b9:f2:20:75:33:36:0c:0b:3e:ac:1c:56:37:fd:24:65:20:a8:
cf:23:0e:6a:30:62:6a:f1:f4:d9:0b:95:78:41:46:6a:b9:31:
63:d1:4a:20:b4:8e:33:64:ba:8b:7e:ff:fb:ea:1e:34:81:08:
41:30:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:23 2026 by rpki-client