
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json)
Hash identifier: Gau5pXMludIWzAVUXAWPBMyHCVQIpyQC5EeHc780Ceg=
Subject key identifier: 9A:42:00:B4:82:99:45:EC:7E:7C:A4:FF:1A:E9:2E:D1:F4:91:0D:DD
Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Certificate serial: 09F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
Manifest number: 09EC
Signing time: Sun 26 Jul 2026 20:20:05 +0000
Manifest this update: Sun 26 Jul 2026 20:20:05 +0000
Manifest next update: Sun 02 Aug 2026 20:20:05 +0000
Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: LjMCRbhWWWvGN9QmacWW950EdunbfkDxaVNOB0yKGjc=)
2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: w0Mg38kqxU56tToSKDuvE9izP1apCE3Ik6yrPGcnebw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2548 (0x9f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Validity
Not Before: Jul 26 20:20:05 2026 GMT
Not After : Aug 2 20:20:05 2026 GMT
Subject: CN=6a666bf5-4413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:05:5d:04:fc:62:b6:22:22:14:c1:bf:67:
8f:24:c9:f2:c6:b1:8d:58:c6:20:b0:c9:17:82:c8:
cd:18:ee:4f:92:d1:a4:7c:05:ba:74:c1:61:1e:f7:
7d:e8:17:ab:28:73:d9:ce:7e:c7:c4:d6:ff:ec:46:
a5:3e:51:94:6b:41:9e:73:c3:f0:8b:42:25:ad:89:
b7:e5:0e:69:47:94:c6:b0:7b:b8:0b:2e:bb:85:50:
e4:cf:49:c4:5f:2c:71:7e:d8:49:cd:9d:d5:6c:46:
0b:3d:d5:35:8f:fb:10:85:d3:ce:58:90:a3:25:b1:
eb:35:d9:3d:6c:03:e3:e2:3c:2c:da:15:8d:23:dc:
b6:91:d7:88:56:0e:f3:a4:48:21:73:fb:8c:53:eb:
ef:98:61:b2:6c:df:c8:87:57:7b:1c:04:88:8d:77:
a1:e7:a5:8d:d2:09:ec:9b:5d:6e:ef:a6:15:ef:52:
75:56:0f:8c:05:d3:83:38:8d:8e:a7:20:2d:e3:a6:
bb:54:28:e1:b3:e6:17:31:86:ca:ab:49:d5:2f:d5:
6b:46:15:44:b3:0a:22:e5:2b:59:5e:c3:15:61:ba:
40:ab:ca:31:5f:00:f3:14:81:21:e4:0b:24:6f:31:
d8:b3:89:e0:df:a4:d1:4f:5e:49:12:93:2c:2b:30:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:42:00:B4:82:99:45:EC:7E:7C:A4:FF:1A:E9:2E:D1:F4:91:0D:DD
X509v3 Authority Key Identifier:
keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:70:99:b1:97:dc:48:f1:34:3e:d8:5c:ae:46:6d:0b:26:2d:
1c:65:5e:8f:69:75:76:91:d9:dc:f2:fe:75:e0:c4:26:d5:8e:
2a:c1:b9:cb:8e:bd:20:0b:47:9d:62:45:d7:3f:cb:f1:b3:1a:
b0:59:e9:87:13:ef:14:39:b4:2a:0d:e2:62:6b:75:98:7d:d7:
68:75:b1:97:44:36:e4:0a:52:36:24:56:5a:d6:14:17:11:cb:
c8:c4:ac:f8:7f:a4:d3:50:71:b1:d0:90:8a:be:49:c2:40:1e:
c8:64:0d:77:bc:90:03:16:00:1e:dd:f3:28:d0:9a:a7:8e:86:
34:33:b1:c6:4e:92:01:41:3d:08:07:64:6c:f6:d7:b7:51:62:
c4:20:77:4e:70:20:5a:69:9b:e7:62:03:bf:46:c1:e3:44:39:
4e:7b:d0:18:fd:1a:81:12:19:7b:c8:ec:f6:f1:08:4f:98:6d:
61:ed:2f:ae:6d:49:77:c6:d2:c9:0d:f4:fe:8c:23:60:71:e5:
10:2d:9b:d7:c7:ed:3e:50:0f:d9:78:55:19:38:24:0a:a7:de:
7c:81:06:7f:0e:79:34:2f:04:8d:e7:c6:a0:9a:c2:f6:53:f3:
89:dd:3c:0f:c6:ab:98:21:5e:04:60:b1:5a:18:87:4a:46:f1:
19:6b:0c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:24 2026 by rpki-client