
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
File: 0MwJjruW320cXCjum1Xwqbgp_ak.mft (raw, json)
Hash identifier: CXsLG5B5UKrPRMQuyk7xFHthTKcUyW7XYcoeW3q1BKM=
Subject key identifier: 3D:2A:6D:D7:47:A7:09:DF:A9:67:8E:21:D7:17:43:2D:17:21:09:77
Authority key identifier: D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
Certificate issuer: /CN=A9142187/serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
Manifest number: A7
Signing time: Sun 11 Oct 2026 07:50:07 +0000
Manifest this update: Sun 11 Oct 2026 07:50:07 +0000
Manifest next update: Sun 18 Oct 2026 07:50:07 +0000
Files and hashes: 1: 0MwJjruW320cXCjum1Xwqbgp_ak.crl (hash: P1NE7dAg73UOiWit7UZQlXP+r5gsHiluQkbzMP8Kp0g=)
2: 26CA159E0BB711F1A64B03C6263D8C67.roa (hash: P5tfx0ynD93bH16mM9zmJmGEUghyGxe1+aGIlNRSAJM=)
3: CCDDC90CCA5911F0B5ABC06CC4F9AE02.roa (hash: pzoy5b4jAK7WNQHs94s/PsJ8rZ83uQ8ezld7Xwjun4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 07:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142187, serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Validity
Not Before: Oct 11 07:50:07 2026 GMT
Not After : Oct 18 07:50:07 2026 GMT
Subject: CN=6acb3faf-b27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:7b:f0:49:33:c6:b3:c9:bb:e2:f9:e4:13:
a7:d7:70:e8:b7:b9:66:56:e4:88:a6:cc:8c:8a:68:
d8:4a:0a:62:68:06:ff:42:47:6e:29:80:ae:bd:09:
4a:4b:58:ab:c3:bf:ea:50:73:52:ce:91:92:02:94:
0b:25:62:10:71:11:eb:14:4d:b0:27:87:c2:54:39:
62:d3:53:3f:3f:ce:41:6b:27:fc:3f:9b:d2:81:b7:
ad:d8:05:7c:d4:c5:ec:bb:48:c6:d9:8f:89:d5:37:
c2:54:28:29:59:21:a4:d3:2a:5b:a4:c9:22:84:02:
50:e7:18:d5:65:32:04:2d:ff:2f:b4:e4:cf:49:56:
2d:39:d2:d9:78:ad:dc:07:21:84:b3:38:d9:40:ba:
2e:f1:bd:28:63:87:7d:00:90:18:e5:a4:e2:8f:51:
97:7d:68:b2:00:4c:ee:4d:34:36:ce:08:3d:c5:e6:
fa:95:c5:2c:53:0e:09:48:a5:05:a5:ef:27:8b:38:
97:de:d7:c0:0f:f4:bc:1a:a0:91:99:00:ff:93:a4:
c0:f8:40:46:26:b9:4a:eb:1c:cb:ae:39:ab:79:f6:
02:4d:02:02:ac:ca:83:51:32:63:4a:97:c8:55:2e:
33:b2:9f:51:c4:16:04:05:53:35:ff:85:ca:7d:70:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:6D:D7:47:A7:09:DF:A9:67:8E:21:D7:17:43:2D:17:21:09:77
X509v3 Authority Key Identifier:
keyid:D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bc:bc:6f:2b:75:0d:b7:0b:c4:59:e9:6b:af:e9:44:5f:35:
7c:2d:f4:84:e8:21:c5:29:0e:92:ff:ad:e1:dd:9a:e5:81:2d:
34:88:22:2e:71:5b:90:19:ad:71:1c:c8:80:98:02:cf:02:33:
59:e5:fb:cd:38:e0:b5:5c:26:ad:90:52:00:aa:5e:1d:71:fb:
72:2e:c9:0b:87:97:cf:c5:3f:ff:3f:84:e3:af:4e:0b:1c:84:
df:5f:7a:86:05:41:be:f9:d8:dc:f5:41:7b:25:d9:1d:f1:0b:
58:3f:2a:a5:64:98:58:29:44:e1:a9:c0:b4:b3:bd:7f:44:36:
bb:e1:95:71:7c:ae:84:25:90:2f:85:6d:23:c3:2b:a2:95:73:
0b:d9:cb:3c:7b:de:cf:f1:46:bc:51:10:22:6d:52:df:ac:4c:
d9:85:32:b4:f3:a8:28:63:fc:1e:b2:18:03:9a:90:08:9d:a7:
cb:90:a1:dc:c8:32:3a:1d:6e:42:cc:75:d1:31:b1:67:f1:1a:
be:64:51:49:61:74:17:b6:54:7f:97:40:c3:44:b6:b7:36:6b:
13:ed:61:e1:75:18:67:ff:77:db:7c:97:75:bb:c8:3e:7c:e7:
2d:fd:9b:38:09:e6:f4:2b:07:11:6c:07:d6:10:84:4b:9e:79:
b3:da:56:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIxODcxMTAvBgNVBAUTKEQwQ0MwOThFQkI5NkRGNkQxQzVDMjhFRTlCNTVGMEE5
QjgyOUZEQTkwHhcNMjYxMDExMDc1MDA3WhcNMjYxMDE4MDc1MDA3WjAYMRYwFAYD
VQQDEw02YWNiM2ZhZi1iMjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzjZ78EkzxrPJu+L55BOn13Dot7lmVuSIpsyMimjYSgpiaAb/QkduKYCuvQlK
S1irw7/qUHNSzpGSApQLJWIQcRHrFE2wJ4fCVDli01M/P85Bayf8P5vSgbet2AV8
1MXsu0jG2Y+J1TfCVCgpWSGk0ypbpMkihAJQ5xjVZTIELf8vtOTPSVYtOdLZeK3c
ByGEszjZQLou8b0oY4d9AJAY5aTij1GXfWiyAEzuTTQ2zgg9xeb6lcUsUw4JSKUF
pe8niziX3tfAD/S8GqCRmQD/k6TA+EBGJrlK6xzLrjmrefYCTQICrMqDUTJjSpfI
VS4zsp9RxBYEBVM1/4XKfXCMYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0qbddH
pwnfqWeOIdcXQy0XIQl3MB8GA1UdIwQYMBaAFNDMCY67lt9tHFwo7ptV8Km4Kf2p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjE4Ny8zMDNFNzcyQ0NB
NTkxMUYwODM5OTg0NkJDNEY5QUUwMi8wTXdKanJ1VzMyMGNYQ2p1bTFYd3FiZ3Bf
YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBNd0pqcnVXMzIwY1hDanVtMVh3cWJncF9hay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjE4Ny8zMDNFNzcyQ0NBNTkxMUYwODM5OTg0NkJDNEY5QUUwMi8wTXdKanJ1VzMy
MGNYQ2p1bTFYd3FiZ3BfYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPby8byt1DbcLxFnpa6/pRF81fC30hOghxSkOkv+t4d2a5YEtNIgiLnFbkBmt
cRzIgJgCzwIzWeX7zTjgtVwmrZBSAKpeHXH7ci7JC4eXz8U//z+E469OCxyE3196
hgVBvvnY3PVBeyXZHfELWD8qpWSYWClE4anAtLO9f0Q2u+GVcXyuhCWQL4VtI8Mr
opVzC9nLPHvez/FGvFEQIm1S36xM2YUytPOoKGP8HrIYA5qQCJ2ny5Ch3MgyOh1u
Qsx10TGxZ/EavmRRSWF0F7ZUf5dAw0S2tzZrE+1h4XUYZ/9323yXdbvIPnznLf2b
OAnm9CsHEWwH1hCES555s9pWmg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:00:33 2026 by rpki-client