
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json)
Hash identifier: OBoqvXT9v9E13E1YfPmPUDM8XhBEbygEyVGDhuXk1z0=
Subject key identifier: 43:76:FD:3E:3F:EE:5C:2D:51:2C:57:9E:65:45:0D:92:FE:D8:9A:D6
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
Manifest number: C2
Signing time: Mon 27 Jul 2026 09:01:48 +0000
Manifest this update: Mon 27 Jul 2026 09:01:47 +0000
Manifest next update: Mon 03 Aug 2026 09:01:47 +0000
Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: ZhLa7cohhOmS1JLJb1kWsoieeDyksG/gyZtWvpo1mCU=)
2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: rWKDZcXDRvxkeevoTmv1zvdbGFQP1gVAwd/TCsKJ1Qk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Validity
Not Before: Jul 27 09:01:47 2026 GMT
Not After : Aug 3 09:01:47 2026 GMT
Subject: CN=6a671e7c-d202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:71:5b:dd:b1:5e:e2:0d:33:1a:b4:1a:49:
35:77:70:39:ea:49:cf:cf:a7:ec:79:3f:5f:50:a8:
3a:c5:4a:50:25:70:5b:ac:40:4e:4f:f2:2b:12:64:
60:aa:f4:18:fa:9e:d8:02:60:a0:9c:0e:52:41:9d:
f6:a0:6e:90:e2:cf:9e:2b:aa:06:1b:5d:7a:07:b2:
67:23:a4:21:47:db:b6:49:86:e9:d7:f4:af:6b:5e:
e2:2e:77:dd:1f:ca:5d:ab:1b:d9:fd:a3:2d:1b:c8:
24:3d:f4:f8:be:42:f8:d1:63:71:02:91:13:a6:26:
d0:e2:03:bd:72:ce:19:1b:0f:2e:e8:5a:95:90:41:
e7:25:07:23:35:af:57:82:cf:a0:d1:79:32:df:3c:
86:3b:e0:0e:98:88:ac:08:ca:6a:9d:41:c4:1c:bf:
e2:b3:33:2b:94:26:87:d7:18:4a:dd:68:1a:e6:fb:
fe:b8:cb:ac:8e:8a:9a:b3:1d:e0:d4:d3:1e:bb:6a:
5a:f7:fa:a2:0f:ef:d5:d8:93:58:d9:52:c6:53:b7:
50:2f:15:8b:95:16:40:87:19:35:6e:30:d2:68:6a:
16:47:f9:f6:0b:4f:da:8e:a6:27:ea:2d:b3:b6:4f:
e3:41:ba:15:d8:c0:cf:ea:12:84:62:7e:37:6a:a8:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:76:FD:3E:3F:EE:5C:2D:51:2C:57:9E:65:45:0D:92:FE:D8:9A:D6
X509v3 Authority Key Identifier:
keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1b:51:07:fb:7a:d8:16:7b:b9:c5:77:b1:01:9a:3e:5f:67:
d7:ab:38:2d:7c:7f:80:a9:53:a1:59:28:e2:98:f9:a5:32:f9:
cf:05:57:91:95:15:89:3e:2c:b7:39:44:8e:44:b8:e0:a4:6c:
81:2c:a3:a3:6f:ab:34:22:da:8e:81:b8:c9:57:c9:63:31:95:
cf:32:bc:6a:ad:6d:f3:9c:73:6c:07:1c:3c:44:b7:51:ef:10:
7a:ba:6d:3b:ff:4b:56:bc:b0:27:70:f0:92:94:03:ad:25:53:
ca:4c:4b:bd:c3:0f:b2:5f:00:7d:58:3f:7b:31:a3:e7:48:5c:
58:da:6b:6d:1c:f3:14:d9:bd:21:51:50:e8:81:63:d3:ab:67:
e8:10:6a:c6:c0:83:53:6a:84:3c:46:9c:4b:e6:58:cb:0f:bc:
2e:ad:e0:ed:1c:50:58:f4:9f:85:71:a0:6c:2e:9e:4e:a6:ad:
b8:42:14:ad:ce:97:74:f9:cd:57:83:16:38:1c:46:7e:37:e0:
a8:80:90:06:68:d4:63:d4:1c:a7:cc:66:34:92:f3:c7:90:7b:
73:83:0b:db:23:7b:f7:0e:a0:63:e8:0b:e1:a2:ab:10:45:f1:
c5:74:a1:07:23:1d:07:4a:87:67:bd:08:9a:7b:6f:5d:37:b3:
54:bd:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:03 2026 by rpki-client