
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json)
Hash identifier: 9K0uco63Y6bV1xYeW16u/dCMHiNbIVCZan1QLEt3nMA=
Subject key identifier: 86:DE:CF:23:CC:30:0C:09:96:B2:09:BF:22:F2:B1:BA:91:96:C4:66
Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Certificate serial: 0484
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
Manifest number: 047D
Signing time: Thu 16 Apr 2026 23:58:31 +0000
Manifest this update: Thu 16 Apr 2026 23:58:31 +0000
Manifest next update: Thu 23 Apr 2026 23:58:31 +0000
Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: lxIBYBeos6q9qEJXPYbW58bQ1nqRZ4ZIBGJmDHPnOfI=)
2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: d5iSZj62C8juxE8auMNyD5ksUnuDKMjscM3w2qSQY9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156 (0x484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Validity
Not Before: Apr 16 23:58:31 2026 GMT
Not After : Apr 23 23:58:31 2026 GMT
Subject: CN=69e177a7-7572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:91:3d:f2:9e:41:40:e3:d2:20:d1:b3:d8:
c1:2e:b5:46:22:02:e1:1a:ae:0f:39:fd:6c:7d:42:
a5:0c:b5:40:15:1c:81:96:fe:cd:41:c1:52:bb:34:
19:ac:e5:3c:2f:59:58:e0:4c:70:3a:ac:15:ce:e4:
98:84:08:79:9f:93:25:b2:4e:5b:02:2d:cb:3b:11:
52:32:7a:75:db:15:26:92:24:e0:9e:22:23:66:0c:
b1:fc:a5:03:68:cf:5b:68:39:36:dd:c8:1e:d5:2d:
a4:d0:7a:cb:29:45:a1:f9:64:a9:50:50:de:fe:68:
84:ad:3f:c0:21:a5:c2:e7:58:4c:13:a3:34:25:55:
92:3c:f4:2d:da:78:2a:8d:0f:39:ee:a3:85:7c:d6:
d9:00:c6:9f:35:a5:62:92:00:b0:18:f7:d1:ae:b4:
ed:3f:0d:1b:6d:66:81:0e:15:76:75:8f:31:7b:b4:
61:5d:20:fd:1a:9c:4c:a6:c2:77:1f:70:0b:2d:a4:
85:35:c7:2a:81:70:36:e0:49:3a:2e:ff:c3:2c:77:
ab:34:71:6f:79:dc:c4:7c:32:9b:dd:35:45:2b:8e:
95:b0:98:d5:6d:6a:5e:76:09:84:12:77:a0:43:23:
75:e1:c5:b5:08:16:c8:71:d6:12:8f:75:56:dd:f6:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:CF:23:CC:30:0C:09:96:B2:09:BF:22:F2:B1:BA:91:96:C4:66
X509v3 Authority Key Identifier:
keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:a5:cd:3e:23:c0:de:3a:ee:60:e1:a6:88:b6:df:db:af:df:
54:06:9a:a0:64:62:72:4b:26:b8:76:d3:34:aa:14:30:7d:af:
8f:ad:8d:13:b6:52:68:80:c8:f0:a6:94:8a:c0:ef:74:29:e6:
3f:27:0e:10:54:73:e5:13:80:be:d0:70:d5:59:9f:e3:18:95:
37:c2:ca:05:92:5c:0c:ee:a9:53:08:af:45:42:a3:63:cf:6a:
c9:44:f4:19:7d:33:54:a1:0a:18:07:62:2c:d3:91:23:d8:f5:
28:c2:36:b0:22:dd:ad:53:03:aa:a4:9b:63:92:82:56:8a:ae:
51:f7:ac:33:9a:4e:f3:01:99:dc:4d:87:80:79:28:66:dd:92:
7a:84:13:1a:f4:25:d2:cb:0b:df:11:1d:8e:b1:61:3f:28:69:
14:95:02:82:b1:07:df:07:f8:aa:ed:44:01:99:55:c7:c0:6e:
d7:4f:ce:5e:0b:1b:e6:37:25:7b:03:61:5d:97:7d:88:97:78:
7b:37:5c:ef:3c:52:f6:02:d9:8c:66:f6:b5:f2:b7:44:86:24:
04:f1:74:74:ae:e9:94:41:9c:93:f5:c2:e3:ec:79:c1:c9:99:
59:f7:03:62:dd:66:56:13:72:d1:89:1c:0b:89:c0:63:21:eb:
59:d1:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:54 2026 by rpki-client