
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
File: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json)
Hash identifier: 2fU3Te53cRRcupvdxWOD1S/MfWbHGJU/09J3cOAGV6w=
Subject key identifier: 0B:53:74:E7:C8:19:49:4A:3C:B4:1B:D7:3C:7D:21:E6:78:9E:0F:49
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Certificate issuer: /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial: 08C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
Manifest number: 08B8
Signing time: Mon 02 Mar 2026 01:44:14 +0000
Manifest this update: Mon 02 Mar 2026 01:44:13 +0000
Manifest next update: Mon 09 Mar 2026 01:44:13 +0000
Files and hashes: 1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: NghDilbecpzns3ZMV5hR8T3ZH5N+69cCFOsE9XzXowY=)
2: 56AD05C0D8F711F09DAB56B975D3641D.roa (hash: Es9bPgKp0v64OSjryiyNquzU+E6CkZKyI4jVnPkxwNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Validity
Not Before: Mar 2 01:44:13 2026 GMT
Not After : Mar 9 01:44:13 2026 GMT
Subject: CN=69a4eb6e-a0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:3a:0d:75:54:6d:5c:30:73:8b:c3:ef:a8:
8d:bb:92:d0:fb:61:d4:c3:64:b1:e7:ad:c5:7e:aa:
92:f6:64:b6:41:49:3d:58:bd:f7:cd:0d:fe:98:48:
3d:78:e3:0a:d6:6b:b2:75:5f:cf:ec:64:2b:8a:e0:
7c:92:70:b9:16:45:1d:e8:15:ef:91:d1:84:09:44:
44:a9:8b:7c:c1:c3:ba:8d:57:47:26:de:cb:d3:34:
66:ac:a2:cd:d2:10:11:d9:f0:25:6d:51:2e:d1:f1:
16:16:c5:31:d2:e9:56:aa:d7:2b:45:0f:aa:7d:0d:
fc:1c:6f:8d:f7:c6:9b:e8:19:dd:e6:06:c7:d4:cd:
78:f8:3f:ff:d6:4c:6d:92:96:d2:9b:15:b2:d5:50:
b3:0a:d3:96:78:d4:ed:35:1d:14:d5:5d:91:ef:f6:
0a:9a:6a:58:0b:97:5b:14:f0:57:7f:b1:ce:e1:77:
b4:5c:79:84:37:17:ed:cd:c5:db:99:5b:07:c7:c1:
90:31:a7:4d:b5:35:fd:07:da:eb:f3:d5:13:a5:8c:
c8:cc:06:a9:ea:aa:d1:02:28:30:0e:55:54:fe:94:
c6:08:c1:b2:b3:ef:32:26:cc:0a:b5:bb:ba:9f:98:
11:ce:34:03:c2:e9:ec:56:27:b8:1e:a2:9a:31:37:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:53:74:E7:C8:19:49:4A:3C:B4:1B:D7:3C:7D:21:E6:78:9E:0F:49
X509v3 Authority Key Identifier:
keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:9c:4c:cb:4d:12:96:60:c5:93:92:51:06:bd:af:22:8f:00:
c3:ca:5b:29:26:3c:61:c2:ac:42:bc:90:a7:03:33:fa:0d:c6:
0e:a4:bd:c8:ce:88:b8:92:90:89:ba:e9:f8:48:86:e8:05:86:
e1:d8:64:b5:cd:1a:5f:d3:bd:79:2b:6c:b5:ce:33:0a:e5:4a:
16:85:c6:20:2e:31:cc:c4:42:2f:e4:49:f7:4a:1a:ad:d0:4f:
d7:e0:59:cc:cb:f9:ab:f5:d0:a7:d9:9e:e2:81:66:ea:04:33:
b4:5d:f1:65:47:ba:9c:55:0f:66:1e:2a:d2:4e:51:06:55:8a:
e1:ab:a9:d8:73:7f:7a:83:54:f2:c3:95:0a:84:cf:eb:c8:07:
f9:03:37:1e:3d:0d:88:cc:a1:63:b1:17:76:db:c7:2a:f2:3d:
06:2b:2c:a0:1e:53:e4:af:aa:75:3e:e8:76:2b:53:ca:c1:e9:
e5:a1:97:38:8a:d8:d0:c1:b3:77:a5:6e:57:c5:dd:bb:03:f1:
ec:3b:a4:fb:a4:60:58:8b:f4:b5:53:c1:14:90:a9:e5:1b:82:
4a:fe:ab:04:0c:ba:fd:f1:f0:9f:8e:ad:15:35:3b:0f:82:33:
cb:0c:36:f1:97:1c:cc:dc:a1:ce:fc:54:99:92:92:15:ec:e6:
a5:72:1b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:18 2026 by rpki-client