
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json)
Hash identifier: wpBdYxRkyfRPAmjTpamFKmid7WeDiCuNQILrLCRxbKM=
Subject key identifier: 6C:05:0D:5F:E5:4B:77:CC:DD:E4:95:BB:06:C2:11:B3:1B:AD:34:FE
Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
Manifest number: 01D2
Signing time: Mon 02 Mar 2026 02:25:09 +0000
Manifest this update: Mon 02 Mar 2026 02:25:07 +0000
Manifest next update: Mon 09 Mar 2026 02:25:07 +0000
Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: Y3X8yz6q/v49rdhR6kUG6DJoh+1vbRL5ckKGp8iKyGA=)
2: 8AE913AED18811F08493AE11C4F9AE02.roa (hash: aSymJnexrg1u767E/fsEUjs4CyF2cy6zWX0QemHP05I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Validity
Not Before: Mar 2 02:25:07 2026 GMT
Not After : Mar 9 02:25:07 2026 GMT
Subject: CN=69a4f504-d880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2e:10:55:02:fb:a3:97:bf:ee:87:06:e1:15:
36:db:f2:2a:02:f8:0c:e0:63:89:90:b4:db:de:b2:
16:35:c1:d1:0d:c3:59:03:b3:8e:65:84:d5:80:71:
53:90:4f:91:40:cb:38:78:9f:c0:cf:35:9d:f8:e8:
15:c4:c2:84:d8:80:67:c2:94:8b:2c:c9:fd:e5:40:
b4:25:38:77:ce:97:6f:c3:81:ca:bb:f4:f5:86:93:
23:95:96:b3:a8:ec:27:9a:8a:95:c9:8d:be:f5:e1:
ef:5c:b6:ef:51:b2:75:7f:57:df:3b:42:92:cb:39:
a4:11:7b:24:d0:c6:5b:b5:8c:3a:2a:d0:c0:b6:3a:
ee:15:d6:78:4d:89:4c:79:b5:c3:f0:13:61:62:41:
dd:da:77:ae:9a:cc:f7:15:e3:74:dc:ea:e0:a0:8c:
a3:0e:15:4d:2f:f3:f8:19:68:57:5e:d5:29:da:99:
71:37:bc:56:b4:9e:af:92:f0:56:59:6e:9f:52:db:
2b:d1:50:d8:6e:82:21:b2:b4:08:db:64:5e:7f:8f:
e8:cd:4a:44:09:c1:c8:54:fa:b7:cb:99:d4:67:cb:
6a:40:ea:e5:d2:17:dd:ae:af:48:fa:f1:60:db:d4:
b4:77:e3:72:6b:3e:e0:a4:09:5a:c7:2e:f9:79:f9:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:05:0D:5F:E5:4B:77:CC:DD:E4:95:BB:06:C2:11:B3:1B:AD:34:FE
X509v3 Authority Key Identifier:
keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f3:d5:31:c9:ae:a6:ee:16:7a:3a:b6:22:7a:5b:f2:a3:e6:
cd:86:30:84:30:d2:b7:99:9f:88:ff:4f:f9:9e:8e:57:e7:3f:
0b:07:04:90:78:28:2a:2e:12:cf:22:2b:ac:cf:b4:19:29:9d:
76:eb:1b:e8:bc:4d:43:71:00:3f:c9:19:c2:ca:95:c2:a4:15:
e0:1a:94:2e:12:0d:0b:5a:44:da:f6:24:15:85:fc:0b:24:f4:
41:2f:63:3e:b3:bd:dc:5d:87:2f:65:0b:4e:fc:31:b9:a0:fd:
53:dd:c3:e5:53:46:4b:22:e0:10:68:92:5c:c3:28:6e:80:5b:
e9:21:56:2d:61:44:c9:99:5f:24:a4:51:bd:79:50:25:29:54:
7a:a9:a0:35:f7:8e:d4:a7:08:e9:93:52:1d:0c:1f:02:07:bb:
4a:b8:08:62:aa:d2:89:69:be:3d:18:a3:d2:8a:bf:b0:d3:3e:
63:ca:b9:4b:ff:70:ec:93:5d:cc:fe:0b:96:23:da:74:c9:1e:
77:5f:e6:76:a2:28:3f:2a:f6:9c:76:cf:0a:0b:b8:22:e3:79:
c9:78:2c:47:b8:41:93:f4:38:41:90:ff:e6:9b:18:1c:cd:a0:
a5:9d:0b:83:a1:80:78:bc:f6:3c:d5:39:c2:ac:35:5c:00:fd:
89:4d:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:33 2026 by rpki-client