
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
File: -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json)
Hash identifier: GOLI2lD8lGC19pyLXCDgmcghyN+GocReixR4Y0YOUsA=
Subject key identifier: 68:73:C6:8E:4F:78:5B:DA:BC:15:D7:63:2F:7D:84:45:89:3D:C1:6F
Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
Certificate issuer: /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Certificate serial: 0325
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
Manifest number: 031F
Signing time: Sat 13 Jun 2026 01:10:30 +0000
Manifest this update: Sat 13 Jun 2026 01:10:30 +0000
Manifest next update: Sat 20 Jun 2026 01:10:30 +0000
Files and hashes: 1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: nRIItweWSPMKtbXnF8Lv1s8/T9LvLUgERmT8fnRrpBw=)
2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: EI6GzHfnkWqNaMVXOSJiD8mcwGEHnHoi3RAZSaS8pSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805 (0x325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Validity
Not Before: Jun 13 01:10:30 2026 GMT
Not After : Jun 20 01:10:30 2026 GMT
Subject: CN=6a2cae06-c22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:22:f7:e2:32:09:fa:4b:03:f8:04:b3:45:
95:94:52:32:e4:db:8d:ac:39:30:4a:bb:9e:36:66:
18:b6:96:26:a3:cf:be:8c:10:49:16:35:d1:df:54:
d6:6c:b8:e0:d1:67:7a:f3:4a:ed:80:01:e8:96:c5:
4d:48:34:4b:ec:c6:89:4c:b2:ec:01:ed:2e:6a:79:
a9:a0:12:7c:d4:bb:ef:d6:79:17:61:2a:e5:35:d5:
1a:6e:9e:a3:a2:53:b6:b1:ce:8e:fd:03:cc:7c:a8:
e5:4a:1a:6a:95:2c:35:cc:66:73:f2:da:42:de:42:
28:56:3b:8f:07:68:d5:0f:cd:cf:2f:8f:c7:0e:cd:
5e:b0:e1:3b:0a:6a:b2:7d:95:35:b9:e8:87:73:72:
84:d5:26:c6:6f:30:cb:32:1c:f7:7c:fe:cd:94:b9:
98:db:92:a6:9b:54:87:0a:f9:db:2d:43:41:8b:84:
b2:e6:0f:c7:62:a5:0a:3a:d1:e9:70:6c:55:d7:de:
1d:06:64:3e:8c:fe:b4:db:9a:a0:54:5b:be:ed:62:
7d:78:7e:28:38:2c:2d:9a:e7:96:6b:4b:3a:6a:14:
ac:6e:ca:d9:1c:e0:4a:f1:bd:85:38:1b:f9:44:43:
0c:d7:72:8a:9e:88:c0:23:dd:2a:42:09:76:a6:a9:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:73:C6:8E:4F:78:5B:DA:BC:15:D7:63:2F:7D:84:45:89:3D:C1:6F
X509v3 Authority Key Identifier:
keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:3e:1e:64:53:3b:1b:c5:61:54:ac:9a:b8:75:eb:00:d4:50:
2b:36:cd:02:6c:6e:5d:65:65:0e:dd:18:53:e7:c9:de:26:7e:
13:f7:e0:b4:b8:3b:b7:48:ee:6a:aa:09:ad:5c:ba:d3:86:53:
29:32:96:33:ef:d1:92:23:cc:3a:27:db:3f:3b:09:d1:2a:7a:
1d:26:83:88:44:3f:1c:0a:20:4f:3d:53:50:ac:af:d8:eb:62:
5e:b4:cd:eb:40:48:05:ee:2b:d3:7f:20:64:d1:9e:c0:96:8a:
28:6e:f0:5a:87:3a:50:f6:fc:09:66:63:07:97:6a:60:57:b3:
a5:91:70:0a:74:80:cb:4c:5d:86:e2:80:b0:8c:75:7e:3f:33:
72:06:84:86:2c:a0:3d:46:63:f1:2e:ea:e5:21:12:10:fd:30:
26:7e:da:e6:9c:35:27:5c:c3:e5:af:6b:f7:f4:de:1a:96:2d:
b1:93:2f:40:7a:f8:e9:c9:f3:fc:81:df:b0:2f:4e:52:19:76:
d1:48:d2:cf:82:57:48:d3:83:8c:db:b1:58:2b:c5:ec:86:22:
1b:5c:25:46:9e:7a:e3:e2:67:b0:6b:cc:0b:21:8c:64:5a:e0:
73:72:d5:ff:d6:d9:31:89:87:80:bf:be:0a:f9:9d:cf:83:17:
67:a5:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:19:12 2026 by rpki-client