
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
File: o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json)
Hash identifier: sbTUY7+wH5a9QEKh00v66kSaEQ17lx9JFleJnPfYJm8=
Subject key identifier: B9:9A:3A:AB:B7:B7:CC:F9:8D:24:63:8A:99:1A:17:EC:06:55:D5:63
Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Certificate serial: 0440
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
Manifest number: 0439
Signing time: Mon 02 Mar 2026 02:15:52 +0000
Manifest this update: Mon 02 Mar 2026 02:15:50 +0000
Manifest next update: Mon 09 Mar 2026 02:15:50 +0000
Files and hashes: 1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: R3sHlHVnO/B/6l8ZGvoxpbhSBCzYwFqfCJWEZv+0JyI=)
2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: fiTho/TerZpO+3DrMondjvawf8v6tA9SLzSvEGlCEZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl
rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1088 (0x440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Validity
Not Before: Mar 2 02:15:50 2026 GMT
Not After : Mar 9 02:15:50 2026 GMT
Subject: CN=69a4f2d7-a803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:50:25:1f:41:31:d9:9e:d1:12:21:25:54:
c2:6d:fe:e2:a4:f2:83:1c:f6:bf:8e:48:e4:7f:2f:
fc:d5:e0:15:13:95:5c:ce:4e:43:43:82:d2:35:1e:
7b:64:d8:5c:b7:41:e8:49:cc:11:b6:bb:a4:21:a5:
6d:c2:14:cb:6a:05:85:f8:cc:8a:49:be:4d:2f:78:
ea:a4:cb:22:24:e4:29:6b:2a:3f:fe:ea:9b:f3:7a:
ce:72:27:d1:93:76:ec:6d:39:36:ee:04:2d:1e:42:
e6:c3:8f:0f:1b:ff:7a:00:f0:10:5f:65:ec:00:f7:
c3:0f:c0:fb:ba:56:0b:01:16:68:bd:62:80:38:ae:
a0:14:8e:86:3b:a7:b0:30:4e:1d:cc:25:f5:78:44:
a3:38:97:ba:82:8c:8a:74:a8:83:c8:e6:69:86:02:
5a:06:8f:11:bf:86:0c:c9:5d:e3:36:67:c0:f0:ec:
7a:01:32:01:13:f5:3b:8b:94:47:aa:b9:65:ae:62:
ea:90:98:a2:d0:75:3e:dc:39:e4:96:41:25:b4:82:
a6:f8:f4:d5:84:a2:20:a6:0f:8f:7d:b3:f2:c7:60:
81:b0:68:73:4f:f4:b2:e7:ca:9e:dc:ea:55:ac:4d:
bd:db:18:53:fc:d7:7e:93:2a:93:4e:a9:af:4d:8a:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9A:3A:AB:B7:B7:CC:F9:8D:24:63:8A:99:1A:17:EC:06:55:D5:63
X509v3 Authority Key Identifier:
keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d6:e5:b3:b9:1e:a3:57:e7:b0:4c:04:4a:2f:77:bc:06:ee:
a3:64:17:5d:78:5d:af:56:9b:aa:97:86:35:8c:7c:19:42:74:
52:79:db:28:43:28:a3:39:38:37:87:b5:a2:e3:bb:ef:25:24:
01:3f:84:c0:92:6d:1b:08:ac:d2:05:8b:cf:02:d5:43:94:73:
09:10:5b:6d:25:73:13:27:59:08:a6:47:3e:0d:bd:89:a6:d3:
47:43:f5:61:7c:c0:c3:58:71:d8:1b:97:6a:ac:80:4d:36:49:
c8:8d:7a:06:20:11:64:fa:b5:40:99:66:e8:52:2e:fd:56:a8:
bc:53:f9:6b:67:7b:82:c0:39:dc:01:d0:9e:50:f3:6f:07:61:
2e:6c:a1:4a:98:19:6f:ee:54:d9:48:eb:2a:13:77:95:ba:5f:
5a:dc:11:65:53:16:50:18:af:b9:98:df:ee:3f:c1:dd:d2:34:
19:e7:62:81:00:08:32:d6:20:7f:7a:95:00:8b:f8:56:5f:9a:
ee:9b:db:17:df:3e:83:1c:0e:90:24:9b:28:2b:d8:6a:67:86:
de:f1:77:74:65:8f:09:e0:14:e1:03:ae:dc:9a:c4:fc:3d:c7:
54:cb:77:0e:cf:0f:ad:17:dd:75:05:d7:b2:11:23:e5:6a:e9:
1a:fe:3b:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE0QTExMTAvBgNVBAUTKEEzRDczQTRFOUYxMDQzREUzQUJGNEY1RUQxMDg2OEFG
NkQzMzVCRjQwHhcNMjYwMzAyMDIxNTUwWhcNMjYwMzA5MDIxNTUwWjAYMRYwFAYD
VQQDEw02OWE0ZjJkNy1hODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1KlQJR9BMdme0RIhJVTCbf7ipPKDHPa/jkjkfy/81eAVE5Vczk5DQ4LSNR57
ZNhct0HoScwRtrukIaVtwhTLagWF+MyKSb5NL3jqpMsiJOQpayo//uqb83rOcifR
k3bsbTk27gQtHkLmw48PG/96APAQX2XsAPfDD8D7ulYLARZovWKAOK6gFI6GO6ew
ME4dzCX1eESjOJe6goyKdKiDyOZphgJaBo8Rv4YMyV3jNmfA8Ox6ATIBE/U7i5RH
qrllrmLqkJii0HU+3DnklkEltIKm+PTVhKIgpg+PfbPyx2CBsGhzT/Sy58qe3OpV
rE292xhT/Nd+kyqTTqmvTYo7fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmaOqu3
t8z5jSRjipkaF+wGVdVjMB8GA1UdIwQYMBaAFKPXOk6fEEPeOr9PXtEIaK9tM1v0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRBMS82OENFQzA5NDk1
NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5NDZ2MDllMFFob3IyMHpX
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285YzZUcDhRUTk0NnYwOWUwUWhvcjIweldfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTRBMS82OENFQzA5NDk1NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5
NDZ2MDllMFFob3IyMHpXX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAotbls7keo1fnsEwESi93vAbuo2QXXXhdr1abqpeGNYx8GUJ0UnnbKEMoozk4
N4e1ouO77yUkAT+EwJJtGwis0gWLzwLVQ5RzCRBbbSVzEydZCKZHPg29iabTR0P1
YXzAw1hx2BuXaqyATTZJyI16BiARZPq1QJlm6FIu/VaovFP5a2d7gsA53AHQnlDz
bwdhLmyhSpgZb+5U2UjrKhN3lbpfWtwRZVMWUBivuZjf7j/B3dI0GedigQAIMtYg
f3qVAIv4Vl+a7pvbF98+gxwOkCSbKCvYameG3vF3dGWPCeAU4QOu3JrE/D3HVMt3
Ds8PrRfddQXXshEj5WrpGv47MA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:17:28 2026 by rpki-client