
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json)
Hash identifier: wsFUN25yqIduT9B1PlrcSaT2IaDRcj3puKH+U33ZED8=
Subject key identifier: 47:BC:C9:E8:A6:BA:4E:C0:14:27:14:8E:75:26:A9:A0:88:E9:37:0A
Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73
Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
Manifest number: 0223
Signing time: Sun 01 Mar 2026 03:32:44 +0000
Manifest this update: Sun 01 Mar 2026 03:32:43 +0000
Manifest next update: Sun 08 Mar 2026 03:32:43 +0000
Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: TQ8kHHGGUQ8xIFlyDnwyV3h/giv1UQs9wYkuZACBvZU=)
2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: caa9vs5q3NzKdsCc37MTwoPPA4zep6D+Ht0arsk9wtA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl
rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
Validity
Not Before: Mar 1 03:32:43 2026 GMT
Not After : Mar 8 03:32:43 2026 GMT
Subject: CN=69a3b35c-3b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:fb:68:46:68:0c:f0:1f:b8:03:83:07:2a:
5d:e6:54:0c:13:d2:fa:43:ae:a3:07:54:ee:f4:88:
fc:54:b1:9e:dc:03:4f:bc:1a:fe:6c:26:0e:58:74:
fe:7d:ed:2e:0c:09:0a:73:00:6c:35:f4:f0:85:34:
71:f5:92:90:bc:72:0a:e5:90:0d:7f:f7:92:3d:7d:
f5:29:33:a9:e6:49:72:4b:06:88:3c:f2:67:ac:e0:
5f:8e:cc:80:77:da:87:b6:31:91:6e:2a:7d:ff:86:
c1:a5:ec:6a:63:f1:0f:71:9a:76:99:d9:d1:a4:6c:
70:86:3a:b7:1a:17:e2:8b:54:98:21:55:28:67:f7:
26:0c:8a:ef:79:08:6a:1f:24:07:a0:29:21:7f:e7:
ef:01:ef:c6:74:97:8a:11:2b:45:6c:03:86:bb:e8:
9d:cf:a4:d9:51:aa:e5:18:91:26:42:f6:16:27:97:
6b:78:fa:b9:c3:5a:ba:b0:15:6c:53:cf:ba:9f:04:
36:1f:00:f2:58:1a:a8:bc:14:84:58:eb:a3:71:40:
04:49:7e:c5:63:9d:04:8d:0d:5e:1b:52:49:17:e9:
f3:ef:87:ae:b7:80:48:aa:d1:72:18:53:e4:3b:62:
68:88:d1:cd:cc:bc:26:04:5e:05:18:df:c5:4a:b3:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:C9:E8:A6:BA:4E:C0:14:27:14:8E:75:26:A9:A0:88:E9:37:0A
X509v3 Authority Key Identifier:
keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:ff:3c:19:8a:26:90:5d:ec:63:a5:c2:f6:81:bd:1f:e3:ad:
b5:28:f8:c4:b7:46:80:f7:26:3b:e1:7a:30:cf:c9:4d:48:86:
84:f9:37:df:27:72:3c:65:4f:0b:54:fe:4f:91:b7:52:d4:df:
3f:f4:fd:86:9c:d3:a1:91:f9:17:ca:43:9d:fc:fb:dc:38:ec:
69:c3:e9:53:ce:cb:13:c9:38:fa:6d:53:6b:41:69:c0:9e:42:
80:ff:56:28:c5:1a:70:d7:4a:52:e8:72:6d:d7:f5:8e:ac:a8:
67:81:9c:21:31:89:7b:74:34:a0:7c:1f:c6:d6:bf:07:be:47:
f2:bf:a3:8d:cc:e9:1c:00:af:cc:83:f1:77:8c:69:a3:dc:02:
c8:10:cf:9c:d8:e1:57:a4:da:5f:fc:4b:b1:23:17:43:84:9b:
58:58:dd:73:82:9c:49:6a:f0:e1:c6:16:b6:11:d7:e1:4a:32:
cb:07:5a:3d:15:d6:df:2d:dd:b9:25:09:39:e3:8c:a3:8c:19:
fd:8f:02:f8:e0:6c:e7:14:25:95:1b:04:5e:a5:03:81:22:ea:
ab:75:a9:be:e6:59:6e:9d:d9:71:88:9f:71:de:b0:78:71:e0:
79:3d:1c:23:72:4c:bb:42:cd:d2:3e:1d:61:81:5e:ac:a8:2e:
38:b9:7b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:41:25 2026 by rpki-client