
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
File: -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json)
Hash identifier: 8nTWOxugFk2bPvmlV/3Vm/t5DfhR96b6ucb2X3R8gow=
Subject key identifier: 66:B6:F2:CD:11:F0:C1:60:A4:FD:16:96:A2:BB:75:94:99:14:96:22
Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
Certificate issuer: /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Certificate serial: 0308
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
Manifest number: 0302
Signing time: Fri 17 Apr 2026 01:09:17 +0000
Manifest this update: Fri 17 Apr 2026 01:09:16 +0000
Manifest next update: Fri 24 Apr 2026 01:09:16 +0000
Files and hashes: 1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: Ia4F8NJn9JXXfI18EATladw5pYeeOfNTWBlSBi0xOIQ=)
2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: EI6GzHfnkWqNaMVXOSJiD8mcwGEHnHoi3RAZSaS8pSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 776 (0x308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Validity
Not Before: Apr 17 01:09:16 2026 GMT
Not After : Apr 24 01:09:16 2026 GMT
Subject: CN=69e1883d-ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:c1:cd:3a:f2:4b:dd:85:e2:24:f3:7b:47:
d5:b6:49:47:ba:99:f8:f4:05:6d:ef:94:85:b7:02:
a5:f6:4c:7d:e6:72:45:20:fe:7d:68:6e:87:c8:4f:
ee:da:dd:f8:c7:95:13:58:1e:13:f2:e4:68:41:97:
b3:6d:12:8d:af:15:05:55:7f:c1:95:f2:67:13:2c:
ed:6b:25:15:ea:bf:ad:fd:cd:6d:29:19:07:c7:e6:
86:13:0a:a7:58:be:df:d7:6d:68:3f:be:c5:36:e1:
ca:77:84:66:0b:d6:39:bb:0c:4d:54:d9:95:75:e4:
90:e1:25:70:4d:ef:9b:77:48:c7:d0:cf:82:6a:74:
7e:e9:0b:d4:24:e8:9a:09:ce:59:bd:5e:fa:6f:4d:
f3:91:e1:81:30:da:94:68:49:f2:63:02:10:aa:48:
cc:17:80:fb:d5:c9:20:cb:b6:2a:b8:e7:40:1a:cd:
22:46:29:53:ed:1d:29:17:5e:f6:12:92:cc:f2:f2:
18:8a:75:9e:a1:0e:a4:17:3d:bc:a1:ef:5f:93:fb:
50:d6:a5:1a:96:11:bc:d3:2b:40:ba:fb:a5:33:04:
88:09:c4:61:8a:eb:84:7b:9e:3d:43:50:fe:52:b7:
1b:02:35:94:cc:84:26:dc:06:71:25:40:21:e1:b6:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B6:F2:CD:11:F0:C1:60:A4:FD:16:96:A2:BB:75:94:99:14:96:22
X509v3 Authority Key Identifier:
keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:06:4f:9d:31:f2:41:4e:5c:db:6f:b9:b9:ac:f5:c8:30:c5:
38:9f:7d:48:c9:cc:23:55:29:39:9c:49:28:21:ec:b0:b9:88:
70:81:8d:80:72:ea:c5:af:91:a1:b0:e6:b4:9d:b8:aa:38:79:
4d:58:3f:c0:13:b3:b0:9a:c1:bc:ea:56:b4:e6:ec:6f:a3:cc:
79:f2:ba:e7:7b:41:a3:f0:ee:5b:0e:6e:e4:54:82:eb:1c:e8:
9d:29:d7:a5:b9:e0:b8:75:5c:cb:c7:4f:80:e8:41:d1:e6:39:
65:1a:d7:56:d5:fe:30:1a:bf:22:51:fe:9a:6d:f3:3e:bb:d1:
85:ee:ae:68:18:eb:10:f6:bf:9f:2b:5e:fa:76:67:98:8a:56:
d8:ed:f9:ce:13:9d:e2:3d:19:a9:ac:e2:14:ab:d4:8b:77:44:
8d:67:ed:3c:95:52:f0:d0:a8:76:9b:78:9d:60:6d:b6:5a:47:
99:63:89:4d:32:db:b9:23:8e:ee:e7:4e:46:73:9d:a6:b0:cf:
44:e0:7a:62:05:1b:85:d6:f5:6f:76:0b:d3:a9:54:bf:d8:24:
42:0b:44:15:29:39:37:ad:18:b6:d0:da:19:c2:4f:09:e6:dd:
5d:2f:ea:f6:05:12:a9:13:61:25:d4:14:1c:49:04:70:de:0f:
ea:9f:16:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:48:32 2026 by rpki-client