
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
File: 0pm8o5yZPbgNETe5mbIhhGrPVWs.mft (raw, json)
Hash identifier: OZGs5kdfleMEdLp+PXSxOeRJ8e/l0Yxqak2SYsCy2Ek=
Subject key identifier: B1:D4:78:1B:2B:D9:FD:34:85:8D:3D:97:7A:3A:D6:58:5E:1D:2A:57
Authority key identifier: D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
Certificate issuer: /CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Certificate serial: 05CD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
Manifest number: 05C5
Signing time: Sun 20 Sep 2026 19:24:51 +0000
Manifest this update: Sun 20 Sep 2026 19:24:51 +0000
Manifest next update: Sun 27 Sep 2026 19:24:51 +0000
Files and hashes: 1: 0pm8o5yZPbgNETe5mbIhhGrPVWs.crl (hash: cuLCdU3/a7IZ5CYmgkQ7BfXbVMIoG1kic3UTpXk/0Gs=)
2: F490AE2431D811ECA3C4CE3EC4F9AE02.roa (hash: y/RhPkVawSLf+7/JutT935tMP9izv7b3n4uLlLkmRJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1485 (0x5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115C2E, serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Validity
Not Before: Sep 20 19:24:51 2026 GMT
Not After : Sep 27 19:24:51 2026 GMT
Subject: CN=6ab03303-194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:a9:68:e4:44:17:1d:87:f6:7f:e2:de:94:
a3:55:9b:ef:4d:5c:6e:f7:bd:8f:89:06:27:b9:0a:
ae:28:5c:1b:fe:99:05:2e:de:7e:f3:e4:e5:74:f8:
b4:49:12:27:de:91:9b:6f:96:42:eb:f9:71:aa:34:
6c:e5:4f:e1:84:9e:46:1f:8b:aa:db:2e:e3:52:ed:
ca:f2:23:06:be:58:cb:d6:44:62:f7:2d:87:a0:ea:
8e:11:ee:1a:69:b8:dd:28:07:9b:d8:0f:6e:51:ec:
dd:b5:47:48:cf:1f:7b:37:b0:9c:bf:9e:41:a7:11:
65:5a:02:4d:d1:d7:ec:da:c9:2a:fd:bb:94:68:0f:
db:94:e7:76:0d:df:c0:50:41:04:ac:9b:73:bf:9b:
f8:f1:9c:89:8d:a7:79:aa:f8:44:c4:09:a0:b7:22:
7b:a5:fe:c1:ae:3a:f9:40:a0:db:ed:7c:09:6b:bb:
1e:ea:c8:7b:c4:78:ca:6f:7d:79:cd:4e:4c:d7:47:
79:f1:9f:4e:53:4b:8a:b6:17:78:95:50:0f:fe:1e:
31:d5:30:e0:4e:8a:8f:fe:6e:f7:e8:0a:72:b0:9c:
e1:de:09:1a:74:56:43:46:b5:73:9b:a7:cf:02:a8:
25:c7:13:81:1b:5a:f4:99:e3:89:f0:a1:ad:74:90:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D4:78:1B:2B:D9:FD:34:85:8D:3D:97:7A:3A:D6:58:5E:1D:2A:57
X509v3 Authority Key Identifier:
keyid:D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:0d:1b:ce:bc:29:bd:d0:4f:71:9f:ff:37:b6:0a:99:2d:01:
21:33:4c:f8:0c:10:f0:a0:e3:4c:d2:e0:e3:6d:d7:1d:3f:31:
04:e4:4d:1f:61:b7:27:0a:28:ac:ae:c3:ad:d2:45:fe:e0:b8:
64:de:b7:39:85:b9:bd:d1:1d:c3:a7:b0:84:52:0c:8a:b6:b0:
67:80:da:32:0e:d0:47:5a:42:21:9a:87:96:81:94:8a:50:3f:
83:c4:15:6a:93:75:4b:63:21:f9:9b:4b:fa:3b:15:0a:56:a4:
8f:6f:90:e4:8f:6f:8b:50:f3:f1:f3:4f:5b:fc:78:57:a5:47:
99:2b:25:e4:96:95:3a:4d:54:4f:9d:bf:18:39:36:fc:15:ec:
87:9a:9d:97:cc:93:ba:73:8b:58:47:ad:6b:64:ae:6d:b5:01:
bc:00:50:0d:ec:4a:74:dc:d6:53:a5:20:05:28:ae:db:b7:73:
e5:ce:dd:15:25:64:c6:4e:46:98:02:64:65:49:a9:2c:18:11:
b9:0d:28:92:96:b8:e6:2a:e1:60:01:d6:cc:fd:93:20:77:4a:
f9:97:ca:fc:14:aa:ca:ab:bd:59:bb:30:5b:54:28:b8:32:fe:
d7:f0:97:bc:c3:da:48:44:73:8a:6b:96:32:e1:38:e6:d2:3a:
f1:a6:3a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:15:48 2026 by rpki-client