
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json)
Hash identifier: vpYikPgQMTZ9PEeJgUhudRzXiERHA7J1BU97WxB6m5Q=
Subject key identifier: 40:B9:6F:50:97:2E:8F:1E:03:E7:6D:3F:38:A6:42:6F:2C:B6:D6:EA
Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
Manifest number: 0228
Signing time: Wed 29 Jul 2026 04:29:23 +0000
Manifest this update: Wed 29 Jul 2026 04:29:23 +0000
Manifest next update: Wed 05 Aug 2026 04:29:23 +0000
Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: uZX4R5a5aejf7WGi6VUCEMO24toDtCAvyvoxnDFZy1U=)
2: 9993077459B011F18691C362BD833773.roa (hash: PKDdZUq/eeCrgJp6yfNiqjr8n5K/Gvs8SrQ/lEfK2Y8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Validity
Not Before: Jul 29 04:29:23 2026 GMT
Not After : Aug 5 04:29:23 2026 GMT
Subject: CN=6a6981a3-5bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:e1:c1:11:4b:48:4f:6c:d5:c1:74:f0:1e:
93:50:6e:ae:10:f8:d0:31:eb:43:f2:c2:7a:e8:54:
b5:32:c9:f5:66:9f:5f:9b:37:c8:cb:11:aa:d0:32:
c6:00:c2:84:16:cc:12:bf:a7:c7:a7:4c:56:bc:d9:
1f:27:1c:a8:2e:41:74:61:9f:17:8f:93:b8:00:cc:
17:12:d1:73:3d:2b:ab:7a:ac:bd:1c:9a:37:e3:c0:
8d:56:cf:c1:5f:97:6d:86:c2:6c:3b:d0:eb:fd:60:
92:1b:60:78:75:eb:62:ef:13:6c:95:f3:cc:e2:70:
7a:00:92:2a:90:36:2d:89:29:9c:f2:a8:7d:0a:47:
de:ab:f7:c4:6b:e4:6c:22:1a:da:4f:f2:63:1f:14:
dd:95:f1:06:46:74:bb:15:8d:6f:ab:ea:01:0c:98:
9e:a8:00:40:17:14:5b:bd:2c:b1:12:4b:f7:fa:97:
83:68:25:16:e2:36:c0:22:b6:4a:84:5a:6c:63:e5:
96:08:c0:fc:57:ef:cf:5a:b9:5a:d1:8f:ce:07:a2:
f1:65:73:82:8e:23:7f:70:8d:09:42:b9:fb:7c:90:
9c:44:55:a0:19:ab:8b:da:b1:f4:13:7a:ed:91:71:
13:37:d5:fb:0b:26:6f:3b:48:3c:c9:0e:2b:f0:3e:
68:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B9:6F:50:97:2E:8F:1E:03:E7:6D:3F:38:A6:42:6F:2C:B6:D6:EA
X509v3 Authority Key Identifier:
keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:07:44:c3:2f:1b:69:ae:63:76:af:06:3f:20:6a:a8:c9:d3:
45:62:92:4b:54:2b:36:d6:0d:c2:7e:52:79:ec:7c:bf:60:80:
6a:0e:d1:34:41:71:ad:25:5a:ab:77:f6:3c:81:87:5f:fc:2f:
ce:aa:c4:9d:0b:79:b0:ac:ad:ad:7d:76:02:a9:82:34:ab:d9:
e6:96:87:3d:95:01:47:25:11:89:0f:f1:85:6e:74:a5:ec:fb:
56:ed:4d:35:2a:9b:fc:4a:bc:04:24:9d:67:5b:f9:8c:2c:80:
15:21:86:57:29:81:f6:30:71:d6:64:3b:1a:d4:92:72:19:8f:
39:9b:2a:40:2a:6e:1e:0a:8e:7b:a8:3d:be:50:28:52:0f:04:
1d:83:66:cb:1f:78:5b:e0:41:cc:65:89:93:1d:b8:e8:9d:28:
a0:9e:6a:63:c9:cc:bd:0a:6c:4e:62:5e:c9:a5:ce:be:9d:97:
1e:f6:fb:ad:e2:be:83:ab:5b:7c:c3:a1:b4:78:2f:c2:c8:c3:
88:2e:f7:d7:d7:12:c3:ed:d1:af:51:13:c3:54:8b:ed:f0:5f:
70:c6:10:bb:d8:8c:c8:4a:cc:29:1c:4d:74:f3:c8:d6:75:4c:
66:d6:9f:49:10:13:46:f2:b3:f0:50:af:76:82:51:d7:77:b4:
b5:ed:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:46 2026 by rpki-client