
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json)
Hash identifier: twrhVCDSaCqxAKb79Q8g2DDFfOoJPfVJKJVqDME9fBc=
Subject key identifier: 4A:B1:01:0F:C5:93:29:43:6C:8B:CA:5B:28:B3:AB:4B:9D:C1:10:9A
Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Certificate serial: 09E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
Manifest number: 09D8
Signing time: Mon 02 Mar 2026 02:58:23 +0000
Manifest this update: Mon 02 Mar 2026 02:58:22 +0000
Manifest next update: Mon 09 Mar 2026 02:58:22 +0000
Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: UKrLdXIO9T1KTY5XJRJ5GuZq2qSIf323QHXIRg851b8=)
2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: uCqwfowHtQ8vPR+sncnEXEdldLZsVFqnmIJTdvUAfsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl
rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2531 (0x9e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Validity
Not Before: Mar 2 02:58:22 2026 GMT
Not After : Mar 9 02:58:22 2026 GMT
Subject: CN=69a4fccf-91ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:2c:e3:15:5f:42:67:ee:3b:9f:a2:83:9b:
ec:ef:c5:56:b3:7a:2b:79:55:e9:35:6d:7c:e6:bc:
55:2a:cd:03:44:86:b4:97:23:46:20:7b:1d:79:72:
80:e7:1e:0d:48:75:d9:ea:c1:29:77:b3:fa:da:cf:
d5:df:42:75:d2:cf:51:b3:9b:e2:8a:14:77:7f:f4:
33:7b:ec:34:c2:53:78:cf:84:2a:fb:d5:7a:52:b4:
1b:a1:34:a6:45:a8:86:80:87:f0:a8:b1:a4:86:0b:
8e:9e:f5:0c:b0:f4:d7:3e:24:44:3d:d5:8c:5a:4f:
47:b7:60:e2:05:89:e2:8e:5f:34:af:be:33:d4:0a:
dc:91:d2:b5:87:b8:45:fe:52:39:e9:8a:af:8a:a3:
90:de:80:73:e3:ce:f1:da:2e:61:b6:46:91:73:f9:
fd:8d:d0:34:1e:c1:7b:13:87:a4:b1:1c:f4:48:d5:
0c:bf:73:3b:4f:26:be:c8:1f:45:7b:40:10:72:43:
d8:f8:37:39:6b:a8:5a:86:83:eb:50:2f:97:14:18:
4a:55:eb:82:07:f5:07:a8:52:df:f7:7f:44:9f:36:
f2:18:3a:80:46:45:8a:f6:d6:35:f1:b4:6b:62:b1:
d1:15:2d:e0:5c:bf:be:db:83:11:e6:07:9d:78:ee:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:01:0F:C5:93:29:43:6C:8B:CA:5B:28:B3:AB:4B:9D:C1:10:9A
X509v3 Authority Key Identifier:
keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7e:5c:72:22:33:3e:f6:24:22:22:f3:f3:20:3f:d7:7e:ff:
a5:8c:e4:49:87:9a:6e:72:ad:82:1e:d9:c2:93:b3:0f:dc:93:
1e:c3:9b:40:f1:19:06:80:39:c4:9a:38:5c:7a:5e:17:ba:cd:
97:1e:63:2d:1c:20:ad:5b:8f:05:92:7a:09:a0:4c:8c:29:ca:
17:c0:4f:72:fd:b5:66:3b:17:19:12:cd:58:2a:56:76:37:dc:
05:f3:da:06:3a:9d:34:78:9b:d9:a7:eb:73:f4:63:b4:ce:4e:
0f:9b:5f:87:9c:ae:df:f5:a4:ee:d9:01:83:3e:93:e3:57:00:
27:cd:8c:9a:16:49:d7:5f:13:05:25:4c:7d:cd:78:40:0f:a4:
23:e2:0f:92:af:1d:9d:dd:b0:af:cf:c5:d3:43:a7:a7:60:1a:
38:13:86:12:3b:1f:b4:52:af:d7:aa:1c:2e:63:53:7b:17:08:
14:fe:89:63:48:a3:d0:67:d0:fc:4c:2e:9c:b0:6e:d2:7e:9e:
85:ef:2d:0d:ea:64:92:54:c6:c3:b2:84:76:c4:ce:71:b1:fa:
34:54:b3:1a:65:0f:2f:97:df:7a:c9:2d:06:89:f6:3a:3e:af:
2f:74:bc:d4:b4:9a:ba:12:6f:9d:02:57:23:06:48:6f:64:3b:
c1:8c:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:02 2026 by rpki-client