
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json)
Hash identifier: ck8FhJ8nmcBASCJalhG+krPEzusYrkCKBFjjn1q7ILI=
Subject key identifier: CF:4E:FE:E5:DD:EF:19:72:33:7A:D5:74:CF:B9:C8:E1:78:7E:0F:17
Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
Manifest number: A9
Signing time: Sat 13 Jun 2026 07:21:18 +0000
Manifest this update: Sat 13 Jun 2026 07:21:17 +0000
Manifest next update: Sat 20 Jun 2026 07:21:17 +0000
Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: WNOBRYruM11FCexX4NxrVwRpYo9FmnqbLzZ/x/ODt2U=)
2: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: PG7OBR6GyNLrIjZOfwPBfDBaGVKv/qZwCkbhTbs1CAg=)
3: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: V8o99dNNhmaM2c88PY3odEi8XIfBLs9AedcwcTXfAbs=)
4: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: ysVuW5LnYi59x1lz18NXRjV3JavVPishhatCefOBZLg=)
5: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: 377aBWt/4YjE0cdxFMi4oiB5yI0io2fUU0WHhpm9ooo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Validity
Not Before: Jun 13 07:21:17 2026 GMT
Not After : Jun 20 07:21:17 2026 GMT
Subject: CN=6a2d04ee-c795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:76:58:ea:27:3e:1b:09:ca:8d:75:8f:48:
4c:6b:4c:5c:aa:06:05:eb:2f:e7:2e:f1:64:f3:a8:
e0:9a:3c:1e:cf:16:ce:64:e0:df:3d:b8:4a:c9:e0:
47:0b:d4:6b:75:2f:bd:6f:ca:4f:8a:93:fe:7f:f9:
04:95:47:ef:bb:61:ba:21:ba:9e:8b:8f:74:ca:dc:
6f:11:2e:e4:5c:81:24:74:14:95:bb:30:05:89:56:
c7:c7:a2:7f:12:43:92:d1:2e:b0:47:bc:fa:f9:fd:
b9:8b:f5:99:ab:b8:ce:14:3f:72:08:35:a0:ff:0b:
7d:5f:db:b5:83:72:06:42:74:83:0a:29:01:89:31:
bd:0f:65:03:d3:4f:bb:b5:a4:26:39:fe:29:f7:fa:
2b:da:59:74:e6:fe:ed:7a:6f:a3:3e:8c:9c:c9:54:
21:15:9c:be:4b:4c:10:7d:4e:0f:45:16:fd:a5:00:
5d:3e:2c:ed:32:b5:76:ec:43:2f:08:c5:8b:13:bc:
92:30:a6:d8:1c:ce:c6:95:ed:69:f8:22:7b:43:6c:
42:c3:c2:ee:06:b5:75:ad:30:17:91:78:66:5d:94:
47:e1:ed:a7:86:5c:87:4a:03:c6:63:6d:52:da:b3:
42:c6:a1:1f:49:f8:d8:29:0d:5b:ce:d3:9a:29:7a:
69:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4E:FE:E5:DD:EF:19:72:33:7A:D5:74:CF:B9:C8:E1:78:7E:0F:17
X509v3 Authority Key Identifier:
keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f8:0e:8a:39:bc:78:1f:78:64:60:1d:f8:e8:42:bd:a2:b1:
fc:98:5b:07:b6:1b:c5:e4:c6:0a:6c:32:4f:8c:d4:95:e0:32:
bb:42:82:51:f9:ad:47:ba:82:d0:09:93:d1:9b:f5:4d:48:cd:
6e:1d:5b:19:46:f5:c9:51:63:df:e7:53:04:f9:6e:6b:7c:06:
0f:cb:0a:00:c0:12:3e:79:00:df:36:48:5d:32:d3:c5:c7:1b:
fe:4b:f9:9f:06:07:0f:39:42:1c:b1:85:1d:cb:d9:b1:4b:7a:
3c:8f:53:0e:b9:8c:ce:21:e8:47:ae:bc:59:3d:9f:03:e5:f2:
19:31:7a:1c:ad:78:e0:ba:4c:76:29:9c:fa:c8:28:83:f6:3a:
bb:44:9b:e6:f7:bc:d6:c3:a2:be:20:a6:e0:cb:83:e1:ff:54:
46:89:79:08:d8:3e:2a:5c:7f:61:20:6a:f1:67:89:fa:e5:9d:
ad:6b:1b:58:85:5d:88:63:77:d9:50:5f:52:9f:65:76:0e:3c:
c2:50:30:f1:b3:bc:03:d4:ef:2a:67:bf:28:b1:11:dd:58:f7:
40:ad:5d:3c:90:b4:11:7d:56:9e:aa:4c:57:bb:47:8d:e4:6f:
39:8e:61:a6:cd:20:91:3c:c6:b0:1a:f7:56:6c:22:7c:fb:9f:
01:93:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:48:45 2026 by rpki-client