
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json)
Hash identifier: fFmunwYljDOvjv+eJ4cQuJKye8tc4njyslU2pehmPcM=
Subject key identifier: 5C:4A:70:F8:CE:76:9F:B4:29:FB:E8:D0:4A:15:3C:80:59:FB:B4:76
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial: 0376
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
Manifest number: 0342
Signing time: Mon 02 Mar 2026 13:55:18 +0000
Manifest this update: Mon 02 Mar 2026 13:55:18 +0000
Manifest next update: Mon 09 Mar 2026 13:55:18 +0000
Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: 2oNSipN96N9VWvuHVv2Gr+GRjQOY3M9QvWJ4j+1tia0=)
2: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: GQFU2SsTLAwSW2hwAuyStmN7C3ILGi9PMKMwLmksl+I=)
3: D84149CCEBAB11F090F576B05F6F56BC.roa (hash: 3GizWDTB/+ZAJYuEqA1GEBMiAzMJTBKziwTY9IY/fK0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886 (0x376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Validity
Not Before: Mar 2 13:55:18 2026 GMT
Not After : Mar 9 13:55:18 2026 GMT
Subject: CN=69a596c6-305f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:5f:e2:bb:ec:9a:b6:f3:86:2f:09:c0:c1:
2d:ee:b8:9f:34:94:1a:58:95:1d:de:25:c5:9c:67:
3a:cc:db:05:e0:1e:af:39:0b:8b:ae:97:9c:d3:39:
74:79:14:dd:ab:1a:1b:42:df:a5:48:b6:30:c1:90:
33:1d:13:73:58:5e:a7:32:75:ae:48:d9:06:f6:58:
71:2a:17:45:b9:4c:82:a8:88:8c:04:9b:2f:9d:08:
b8:20:4c:80:82:36:eb:8e:94:12:6d:42:15:19:b3:
fe:0b:4b:6e:3e:e4:be:7e:ce:51:04:ff:aa:50:b9:
92:8c:c4:be:1a:ec:e6:3c:2e:84:0f:4f:08:1d:e7:
84:57:b6:e7:00:d5:76:1d:04:19:1e:26:31:35:41:
84:71:9c:16:e5:ac:24:0f:12:09:66:9d:85:2f:64:
f0:ac:6e:15:7d:4a:bc:f5:8b:f8:76:88:a1:09:94:
68:aa:74:2f:d4:c7:8c:fc:b0:32:e7:8a:a7:57:82:
19:72:83:2e:3a:e8:48:db:56:06:4b:30:86:f8:00:
8a:a6:68:37:5d:cd:9e:db:cc:4e:5d:af:43:66:6e:
a8:3b:4e:9f:d1:37:6b:71:40:ed:f0:3e:0c:f0:79:
3c:1b:91:f8:96:bd:52:9f:4b:df:12:23:68:d0:ba:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:70:F8:CE:76:9F:B4:29:FB:E8:D0:4A:15:3C:80:59:FB:B4:76
X509v3 Authority Key Identifier:
keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:28:97:86:eb:3f:e9:21:f1:63:92:da:66:7b:f4:31:56:5d:
6d:6b:81:04:d2:80:50:b2:85:72:38:f9:3f:06:75:8d:5a:2c:
00:44:77:d9:86:14:62:67:4e:58:8c:aa:d5:ab:4b:9f:ab:e9:
bb:f3:c9:16:8a:3a:60:3b:48:17:f5:62:e5:01:41:96:ee:eb:
b2:a9:f8:32:15:2f:85:6a:05:4f:52:18:24:ad:e6:ea:67:fb:
08:b9:b4:0e:9f:71:94:3f:e1:ae:67:4a:e2:fa:63:09:2c:53:
be:88:87:85:d7:33:87:84:46:3a:38:4d:6e:6c:7f:b5:6b:19:
77:05:6f:b9:04:32:f5:3f:77:52:ca:7f:cf:a7:9d:5f:9a:4d:
62:83:ef:05:21:9c:65:79:34:2a:cb:4f:d3:77:73:7e:3b:dc:
1a:65:80:a4:e8:0a:07:64:f8:e7:2f:ec:cf:1b:b3:fa:62:73:
b0:22:95:f5:f9:a3:ab:32:56:4f:0b:46:1c:1a:f4:8e:0d:78:
13:ed:80:07:86:7a:50:65:92:d1:47:89:b6:56:c7:c3:46:46:
3d:02:5a:eb:04:ac:a7:29:53:a5:e2:db:0a:ed:34:96:ce:cc:
28:72:aa:74:35:7f:3d:cf:8a:b5:f6:e3:13:59:70:85:0d:8c:
a6:9c:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:40:46 2026 by rpki-client