
$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json)
Hash identifier: WknXYRsQF/llb4syQHUafe8FnLXsaT545HUBh6ytkIo=
Subject key identifier: 34:EF:DC:D0:96:A7:E1:B5:22:92:BF:74:7C:8B:B0:D0:02:2A:09:31
Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
Manifest number: 89
Signing time: Sun 01 Mar 2026 08:54:26 +0000
Manifest this update: Sun 01 Mar 2026 08:54:26 +0000
Manifest next update: Sun 08 Mar 2026 08:54:26 +0000
Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: mkgnJCz7WoJOC11LWIrehDNfp/5ikGTpMbkQGyhfkiU=)
2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: 5L0n0AuaZsG9RN1VkF1qu4foHDeiS87d8mBxLuyWIUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Validity
Not Before: Mar 1 08:54:26 2026 GMT
Not After : Mar 8 08:54:26 2026 GMT
Subject: CN=69a3fec2-0ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:d1:28:5a:2f:97:22:24:92:76:49:10:aa:
94:46:13:aa:65:e8:e7:fc:77:c3:e2:28:27:71:c5:
f4:db:c8:9e:5a:94:7e:a1:14:82:ac:4a:a4:21:c7:
89:d4:df:32:31:a0:1f:6d:b3:c9:64:a2:64:49:08:
df:19:bd:3f:0c:04:5b:78:ec:6a:64:e6:da:30:6e:
27:c3:bd:c0:71:b6:f3:bf:2e:59:6e:55:ce:b8:65:
68:3c:49:af:48:f0:24:e3:0f:c6:32:7f:ff:f3:09:
ad:52:af:ea:42:b9:2e:6b:51:be:0d:21:0a:2d:2a:
45:1e:bf:3f:fa:95:cb:68:e8:0d:89:d1:97:2b:96:
3e:f3:d0:c3:b7:b9:f9:44:b0:a5:07:f6:09:70:5b:
50:e7:cb:26:e3:e4:23:f0:33:f7:f4:e3:57:6e:fc:
84:8f:5c:15:eb:34:f4:a2:72:b2:a8:23:c7:2b:6e:
ef:98:1e:4f:5f:23:d4:65:80:1b:2c:82:9b:21:18:
26:e1:29:7c:17:86:68:70:1e:43:71:79:4f:cf:b2:
97:46:83:4b:23:01:dc:78:d2:b5:f9:d6:82:5b:42:
5c:88:bb:b2:c1:a1:3a:eb:18:5c:ce:4b:53:35:0c:
c1:60:80:2f:cb:3f:ef:83:1c:99:85:25:6b:49:78:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EF:DC:D0:96:A7:E1:B5:22:92:BF:74:7C:8B:B0:D0:02:2A:09:31
X509v3 Authority Key Identifier:
keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:50:c6:47:41:06:81:1c:06:b3:96:05:ea:f5:17:0c:93:90:
6b:3d:7f:e1:3e:24:af:2f:39:b0:f8:79:36:fe:1d:3c:7b:e1:
2e:e4:7d:45:e2:23:6d:7d:95:9e:f2:1d:a6:66:e0:93:d4:cc:
42:8b:90:54:9e:c2:f7:1f:38:96:f2:fd:53:19:f6:69:fb:e9:
be:c7:ec:ba:58:b9:7f:84:86:48:b9:01:b2:bc:bc:f3:99:15:
d7:b8:66:26:ce:f7:29:03:c1:7e:0b:ee:06:c5:26:0a:47:42:
01:32:1f:7a:fa:98:50:d8:6e:a0:57:02:57:00:1f:43:6c:b7:
9c:05:3b:05:e5:ad:57:98:ad:84:c9:4b:f0:5b:20:f6:30:66:
d7:ed:d8:87:b6:87:e7:c3:a4:eb:6a:d8:95:9c:fe:b3:73:68:
01:52:19:99:99:21:49:74:2e:7c:49:3e:b3:84:99:b5:44:23:
17:29:da:45:87:21:fa:8b:c0:cd:6d:cd:60:3a:fb:4c:eb:ac:
26:89:ed:e6:63:41:ca:a1:1f:df:14:46:5f:9f:b9:00:e8:e6:
10:3a:cb:ad:ee:65:80:8f:94:54:ee:6c:50:df:23:1a:ce:24:
f5:0d:26:71:40:c9:cb:1c:fb:ee:f5:fe:25:e7:89:49:8a:4a:
88:3a:ad:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:26 2026 by rpki-client