
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json)
Hash identifier: gMLDO9Uh5aj+VfEC1DysNfDdjgbmGlg2e9KFsLVVBn0=
Subject key identifier: 30:6D:38:51:23:77:3B:A2:93:A8:F0:1B:50:51:C7:36:1F:B9:11:8A
Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
Certificate serial: 0BDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
Manifest number: 0BD2
Signing time: Thu 16 Apr 2026 18:50:21 +0000
Manifest this update: Thu 16 Apr 2026 18:50:20 +0000
Manifest next update: Thu 23 Apr 2026 18:50:20 +0000
Files and hashes: 1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: H4PyOV/7eUVZnj8yB5OUeivTBHrtWfxwTiS/C1DCKF4=)
2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: XKDSZPzMqa5QorcvgY8yeybuV/ov43f+onvjmQy64ko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl
rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3038 (0xbde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
Validity
Not Before: Apr 16 18:50:20 2026 GMT
Not After : Apr 23 18:50:20 2026 GMT
Subject: CN=69e12f6d-50a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:6a:0d:c9:2d:12:b0:49:13:4e:56:75:27:
7a:a9:6b:d2:74:8a:25:f7:99:de:3a:24:36:ca:ec:
80:65:be:17:6d:95:b3:e7:91:92:be:02:6c:d9:a7:
fa:f3:2e:b9:90:2b:dd:8b:8a:5d:c7:4d:50:59:7e:
26:56:10:8a:26:43:1c:68:46:8c:50:fd:70:ec:63:
3e:57:0d:14:2f:f5:ff:05:a1:1a:93:0c:d3:9c:51:
9e:31:dc:19:6a:84:fd:44:6b:6b:38:08:5b:c2:29:
a5:05:23:16:6a:6d:c8:8d:6b:30:45:72:bd:2f:19:
84:cd:d2:af:76:17:56:c4:82:e5:1d:0b:43:77:d3:
c6:77:a7:ee:65:70:a1:7f:bc:fe:25:f5:ba:e0:fc:
06:7c:4c:11:60:4b:fa:e8:1b:30:32:e8:5d:66:23:
e1:1c:8b:2c:9f:bd:e8:46:f6:06:6b:a1:00:bd:7c:
91:c6:cc:4e:59:00:60:7d:96:28:cf:16:67:21:79:
ed:db:62:53:6d:a6:24:36:63:3b:aa:3a:ff:ab:b8:
03:d1:97:f8:84:21:69:7c:88:f5:e8:a5:4a:bc:90:
62:3d:eb:8b:d8:d1:c3:cc:0c:3b:59:25:47:0d:b1:
b6:29:d8:89:89:5b:24:a4:3a:d0:a8:3d:31:30:bc:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6D:38:51:23:77:3B:A2:93:A8:F0:1B:50:51:C7:36:1F:B9:11:8A
X509v3 Authority Key Identifier:
keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:39:6c:f5:aa:5c:3a:49:65:b7:57:8b:d6:ce:f7:2f:41:31:
cf:1b:f5:93:b0:27:cd:07:21:05:db:13:40:b9:8c:e0:d6:f8:
72:25:9e:98:ab:37:f7:c0:97:65:02:37:3e:0a:36:81:65:81:
4f:c3:aa:02:70:f6:e1:90:cb:63:6b:32:25:07:b0:7c:d8:0a:
05:f9:00:68:99:fe:7d:ff:ab:ed:48:a1:7c:92:7e:97:0b:91:
5a:e9:0d:09:50:04:82:d1:a5:d4:a0:45:ae:78:27:1e:80:0a:
1c:90:e7:12:2c:8b:93:a1:e0:ca:f9:cc:19:91:2e:82:51:74:
6f:d0:b6:b6:1e:de:a6:9a:d9:55:7e:4f:cc:81:3c:76:33:4f:
42:39:08:db:49:38:6c:c2:a9:5c:af:84:60:fc:45:83:a4:e1:
18:47:e1:12:82:80:59:ff:d7:69:16:e1:8d:9d:0f:f6:9d:bd:
9c:36:05:09:8b:38:61:20:e0:85:8f:1c:53:eb:6d:c7:0f:e2:
75:3a:15:f7:37:89:c3:e8:f1:c5:80:c3:23:c1:d7:bf:71:fd:
01:89:49:8a:d7:88:a3:b1:d8:27:da:dc:d0:3f:23:d8:08:b5:
14:3d:7a:0b:0d:38:d0:aa:99:09:8b:9a:19:1d:f9:f5:3d:a2:
19:82:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:18 2026 by rpki-client