
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json)
Hash identifier: iBt9NTUO0V3xM0qcwNonH4Gwe65y5JJFhSGDnWPTzYE=
Subject key identifier: 78:C5:DD:F1:CD:5B:82:7D:34:F8:30:3A:E3:C6:FA:4E:A1:1C:9D:59
Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
Manifest number: 01B7
Signing time: Sun 01 Mar 2026 04:43:35 +0000
Manifest this update: Sun 01 Mar 2026 04:43:34 +0000
Manifest next update: Sun 08 Mar 2026 04:43:34 +0000
Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: vXGtknTI0TO+liTxhO0KbNgPohHj3tp9Z4SV75s0q+U=)
2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: pB1reIfyHdxeUfXs+919CuRxWhrieVaoumr+2A452aM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Validity
Not Before: Mar 1 04:43:34 2026 GMT
Not After : Mar 8 04:43:34 2026 GMT
Subject: CN=69a3c3f7-4930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:a9:fc:7d:05:ef:81:69:f1:db:e2:a9:6d:
29:dd:9a:82:57:69:7b:ff:25:5f:f3:d3:59:a0:ac:
7d:cd:77:52:01:6d:0d:15:7c:33:bf:98:c8:1b:96:
74:23:0d:85:02:62:ca:8b:41:d7:65:8b:17:b2:1b:
1c:d6:9a:bb:a0:16:b3:8a:07:00:29:94:d3:4d:e2:
68:8f:7c:c9:1f:e9:79:01:32:5c:73:a3:6c:8f:71:
4a:91:58:9d:96:0f:4d:df:ed:65:9f:b2:e4:b2:aa:
16:74:1e:f9:74:50:d3:63:72:7f:b2:86:8a:79:f7:
10:69:3f:e0:5d:0d:9c:1f:6f:60:63:b0:70:43:7a:
63:31:85:46:c4:c7:9e:2a:2c:22:81:09:c1:86:ce:
9b:41:fb:1e:95:11:93:3c:1c:7c:ea:20:5e:62:8a:
3c:13:af:4b:01:43:48:ab:e0:27:94:cd:04:60:df:
49:a7:7b:e4:25:82:be:5e:73:20:40:b9:0a:b1:c8:
e1:f7:96:10:c8:8c:c4:99:11:0c:43:bf:8a:e5:df:
73:61:a2:f2:8d:27:2d:0c:d3:27:7f:b5:b7:06:87:
ad:e9:c6:ae:fb:d6:34:a6:dc:8a:af:4f:cd:45:49:
ca:6f:15:c3:04:98:b7:93:ab:b4:81:56:b6:d0:c8:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C5:DD:F1:CD:5B:82:7D:34:F8:30:3A:E3:C6:FA:4E:A1:1C:9D:59
X509v3 Authority Key Identifier:
keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f4:8d:42:cc:83:5a:ae:c5:9b:11:78:13:33:cc:2e:db:bb:
6e:ec:5b:b3:11:39:3c:47:fe:e1:a0:67:ce:d4:63:59:79:de:
34:d8:26:f8:28:7e:da:e7:2f:6f:e7:2e:1c:83:33:15:27:75:
63:85:b3:df:36:3d:bf:5b:9f:53:5f:9c:fd:cd:aa:83:d5:d0:
d9:10:4d:6b:5b:47:11:e0:ef:c3:ef:ba:49:cc:af:b6:07:70:
b9:64:02:db:49:6e:3f:03:eb:59:9a:f3:ab:4a:2f:a4:d2:40:
89:ae:e8:24:75:02:47:4c:c9:66:60:93:25:07:a2:5f:b7:68:
ad:00:28:c6:c1:9c:23:40:d9:61:e9:88:f5:df:56:6a:62:38:
4d:13:50:17:dd:a4:6a:93:0f:cd:1e:45:94:bf:f8:17:f1:17:
10:94:8e:9c:36:4a:e7:dc:38:51:e6:ec:36:76:90:ee:3a:fe:
f9:46:cc:31:ad:bd:0e:f1:40:7a:74:00:37:60:b5:2d:d0:1c:
9d:b6:5c:32:48:09:f8:af:bf:2b:c3:dd:04:93:6b:30:a6:eb:
37:f4:48:3e:8f:2d:14:20:7d:c5:74:4b:20:5f:1e:79:e1:c0:
b7:37:03:f3:31:9e:b1:6a:97:98:d0:f9:cf:ef:9a:04:45:ae:
11:92:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:35 2026 by rpki-client