
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
File: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json)
Hash identifier: /09VtdFg3LYr8/Ng+sctQWy8j6AUEjMOvjFwecmKeHM=
Subject key identifier: 70:D6:3E:C0:DE:CE:86:1D:6C:F7:0B:1A:D1:74:A8:A8:29:64:D1:A1
Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
Certificate issuer: /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Certificate serial: 04A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
Manifest number: 04A2
Signing time: Thu 16 Apr 2026 23:51:03 +0000
Manifest this update: Thu 16 Apr 2026 23:51:03 +0000
Manifest next update: Thu 23 Apr 2026 23:51:03 +0000
Files and hashes: 1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: jIM+ufWbWdg3Pint+qokQr66rh6lxvh+a2n/BZTytgI=)
2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: z7KyT6HnbJ6UMz7BQC748vvaSmuWe8c14BvsShCGtbY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Validity
Not Before: Apr 16 23:51:03 2026 GMT
Not After : Apr 23 23:51:03 2026 GMT
Subject: CN=69e175e7-1f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:33:6d:88:07:f2:b7:f7:2c:a9:42:1c:ce:
cd:33:7a:71:d1:a4:e2:96:32:e1:22:e6:8d:ba:a0:
2c:5d:8b:9e:b6:81:09:de:f6:36:09:8a:2a:a4:13:
7b:c8:0c:14:95:b2:da:0b:25:0c:8b:7e:94:06:46:
80:c6:15:55:7a:66:41:d3:1f:cd:8e:e3:71:bc:6f:
64:2e:1c:66:91:6e:5b:f6:bc:16:f0:b3:c4:dd:83:
6a:08:89:9a:f0:28:a6:00:36:96:7c:a5:cb:2d:29:
3f:68:e6:0f:3d:d5:7a:e8:fd:19:ff:71:4f:82:a4:
db:b8:dc:03:e1:43:8a:b4:ff:a1:e2:55:cf:99:95:
ea:7a:63:ce:c7:af:ba:6c:ad:8d:15:f7:3a:8b:75:
ed:22:d9:81:71:cc:31:b9:64:e4:bc:15:e2:f1:8a:
3d:ef:ae:48:38:4e:f2:11:cd:fb:38:fa:ac:97:f3:
58:68:36:bf:e1:95:22:23:ed:53:19:87:51:24:ce:
f3:c9:d3:24:22:62:e8:26:ed:16:7e:26:d3:75:4d:
6e:c7:70:c0:60:a1:02:b4:7c:7f:34:b1:27:d9:61:
b6:f6:13:45:73:dc:3d:52:e2:db:4d:91:0c:19:e1:
f7:44:f7:bc:8b:f3:2d:75:fc:ea:0b:4f:7e:24:72:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D6:3E:C0:DE:CE:86:1D:6C:F7:0B:1A:D1:74:A8:A8:29:64:D1:A1
X509v3 Authority Key Identifier:
keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:db:8e:fa:8b:aa:54:b3:44:14:02:c4:f1:94:ff:4c:ab:a1:
0c:d0:d6:d5:41:9c:f1:aa:3e:22:d3:ab:ba:e1:bf:0d:e1:f0:
55:27:89:88:fb:0b:68:ea:b2:da:4d:42:a5:22:39:6f:33:a8:
01:aa:8a:8c:cc:8f:c2:74:09:94:eb:11:0a:1b:83:88:e4:e7:
4b:11:e6:0e:68:39:fc:9d:af:00:cf:b9:84:b2:61:2b:9c:21:
08:ef:2a:63:69:34:f1:37:2e:21:15:79:30:d2:a9:12:cc:0b:
89:28:fa:00:82:6d:ea:f6:89:24:ea:bc:25:0c:ec:72:e8:53:
03:25:a9:52:e3:aa:35:a1:da:ff:f9:ab:b8:49:e2:96:11:d1:
73:52:03:fd:be:fc:f6:74:9f:6f:20:aa:c5:39:35:45:e9:6d:
fe:95:1a:ed:e0:dd:77:3d:3a:7c:a0:11:1e:8b:8f:83:45:de:
d1:9f:3d:55:93:a8:85:18:d5:3b:93:77:c4:bf:ef:0b:91:66:
5c:90:a7:7e:cb:16:a2:41:6a:ee:f0:9a:46:ea:28:12:ef:05:
25:50:4c:49:7d:90:1a:4b:5c:b5:ba:e3:96:e8:a1:2d:7e:25:
6b:27:ce:65:1d:8f:8d:e8:82:a1:2e:d2:2b:62:4a:d6:c9:bb:
10:18:55:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:14 2026 by rpki-client