
$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json)
Hash identifier: LCYIBJZUPDnlG+IJYBqHj6N1AmDewHk/sDKRqkaig/U=
Subject key identifier: F0:55:CD:08:8D:F4:F6:50:87:5B:63:7F:5F:55:EB:45:33:76:F5:56
Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Certificate serial: 020F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
Manifest number: 0207
Signing time: Fri 17 Apr 2026 02:48:01 +0000
Manifest this update: Fri 17 Apr 2026 02:48:01 +0000
Manifest next update: Fri 24 Apr 2026 02:48:01 +0000
Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: SFXafFlt5Z58GU/WrobQNPvzxCjdWqwIDO54b0hlhEA=)
2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: hX2Iw++PK9Y+cjSdv5iifugQbVGCyctU8mKlkkvrChc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Validity
Not Before: Apr 17 02:48:01 2026 GMT
Not After : Apr 24 02:48:01 2026 GMT
Subject: CN=69e19f61-84b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:80:bc:23:07:68:08:1b:f8:43:a1:28:36:
05:b9:94:37:b7:f6:b3:aa:3c:4d:3e:c4:54:07:62:
db:a9:1b:d1:7c:34:7a:03:df:44:d7:06:a3:83:c8:
79:63:4f:a5:e1:94:18:1a:38:38:29:e1:d6:19:9f:
a0:c9:c8:38:38:75:dc:59:94:bc:aa:fe:6f:4b:c6:
b1:5c:92:06:e1:05:02:ae:84:35:b6:66:c0:92:0b:
47:7c:70:23:bf:1f:f8:39:b8:b2:c1:8a:03:99:c8:
ba:24:a0:7c:a5:30:29:9d:38:94:84:f8:1a:c2:66:
a7:02:9a:48:96:82:f2:4b:36:85:10:b7:eb:77:57:
5b:c2:c0:23:02:e5:0c:c7:6c:03:1e:a4:42:5a:43:
9b:95:3c:e4:53:36:96:f2:c8:31:4d:d6:0e:7c:73:
74:38:f4:bc:84:28:e5:65:a5:fa:18:3c:50:ab:97:
e7:27:4c:ef:3a:03:ff:48:d5:4e:c7:ab:2d:a1:7b:
a2:43:e3:d3:70:71:7f:8b:22:b0:1b:ec:9f:5d:4a:
b0:ce:9a:ba:5b:db:53:6e:f5:7c:f0:35:e2:5f:94:
47:31:47:54:8e:64:37:dc:29:9b:0b:82:e0:16:63:
0e:29:72:66:66:fa:38:f3:be:d8:0b:c7:54:8c:40:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:55:CD:08:8D:F4:F6:50:87:5B:63:7F:5F:55:EB:45:33:76:F5:56
X509v3 Authority Key Identifier:
keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4d:da:be:c3:65:bf:4a:fa:2f:fd:a3:4a:a4:0b:22:a6:0f:
1b:6f:3b:9b:66:bc:ef:d3:39:b7:99:ff:d7:8c:0b:89:71:54:
7d:95:68:9d:8d:0d:c2:2d:da:f4:04:01:05:de:4e:d2:0b:15:
99:36:cf:7a:cb:55:ea:ea:db:1f:75:29:44:be:f6:a2:b1:7f:
39:d5:e0:76:d9:af:89:42:b4:24:88:c9:3a:d6:87:19:2c:42:
c1:dd:fe:7b:1e:f9:78:6a:3e:ff:e8:e5:c0:74:2c:ea:37:0e:
1e:a1:f9:22:04:9c:7e:12:e6:73:1d:e4:59:dd:e0:ea:3b:d5:
06:6e:a5:13:ac:37:d6:30:ea:50:c8:7d:fa:2b:7a:fc:90:dd:
96:69:44:8b:35:ab:1e:4a:40:75:6a:a0:db:2c:80:44:af:ae:
a5:59:76:ca:0a:f7:af:0a:10:68:01:80:69:62:04:4a:62:14:
0a:bd:81:f4:c4:7a:8c:f4:f4:5b:e7:ab:bf:00:3c:ac:70:d5:
2f:b5:43:66:d0:74:d1:b5:45:46:e1:be:59:a5:57:3e:1e:4f:
de:65:02:0d:ee:e6:4f:ce:e4:da:49:aa:50:2b:66:e2:49:bc:
42:b9:4e:cd:b9:e2:ad:c8:f9:79:2d:79:fc:cd:46:c3:44:d8:
fc:fa:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:36 2026 by rpki-client