
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json)
Hash identifier: FCIx2dGhNziKJeu0SJU7sNSZv01fVdBojuWrnl+YoT0=
Subject key identifier: A2:FE:78:9C:B1:15:FC:CD:1C:6C:52:A1:32:A8:FC:F6:86:41:A7:7D
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial: 06B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
Manifest number: 0689
Signing time: Thu 16 Apr 2026 22:36:41 +0000
Manifest this update: Thu 16 Apr 2026 22:36:41 +0000
Manifest next update: Thu 23 Apr 2026 22:36:41 +0000
Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: Om6TtGZGlkJyKfZOvo/cxNzpUAF/Oq1A+rYRz4IqdJM=)
2: 05646F7C268211F19B4B306BB2833773.roa (hash: HZzicft3bos6w7OuWhMV24pkNyMhlarAtyII9OEKTS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Validity
Not Before: Apr 16 22:36:41 2026 GMT
Not After : Apr 23 22:36:41 2026 GMT
Subject: CN=69e16479-846c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a6:22:5d:1d:33:9f:1c:5f:e0:fe:75:0d:c9:
37:ae:59:a5:08:19:14:47:f8:47:db:5c:14:3f:ee:
30:bc:5a:cc:bb:ef:55:69:63:ba:9b:b0:d9:71:6c:
e5:b5:af:64:e8:e6:27:57:b1:3a:1f:b9:af:60:55:
1f:05:5f:e9:7b:7c:fc:77:a0:ff:f6:80:31:76:bf:
fc:a9:51:ae:07:83:4d:57:6f:1d:c7:c9:06:62:c4:
c2:b2:a3:2e:75:ee:57:c6:4c:43:68:6f:3f:e9:ef:
af:6a:46:d4:a8:19:77:ac:7e:44:e4:bc:c0:31:26:
9f:42:46:c9:f4:80:5d:71:2f:df:cb:58:16:73:52:
4e:4d:fc:67:83:de:24:36:3b:11:a0:1e:95:10:ea:
f5:de:6a:bc:06:df:93:24:89:fa:10:bb:28:21:06:
de:76:f3:50:8a:44:db:6f:47:95:ef:6c:b9:f4:f0:
80:f3:d3:5e:9e:0d:7e:94:d7:1f:0f:e2:d8:43:6c:
37:fe:0c:68:e8:e9:2f:46:5a:a0:41:5b:c8:92:3c:
7b:da:f7:28:fc:51:af:21:4d:4a:da:c5:ac:f1:e8:
c0:e8:be:8f:25:1e:ae:2a:af:2b:2c:54:20:bd:42:
7b:65:61:40:6d:1c:1c:44:8f:6a:de:7a:97:1c:a4:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FE:78:9C:B1:15:FC:CD:1C:6C:52:A1:32:A8:FC:F6:86:41:A7:7D
X509v3 Authority Key Identifier:
keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:80:29:5f:8e:44:e4:68:51:a7:d5:66:cb:95:d4:44:3f:29:
8b:6a:75:b3:32:10:00:78:8c:b2:c8:d8:e4:bf:d3:13:b0:51:
dc:0e:b1:d9:84:c8:eb:e6:76:4b:bf:e5:1d:6c:cd:94:15:88:
3f:15:94:38:d4:b3:e6:c1:70:a7:c8:5a:65:27:7f:64:77:18:
d9:72:b5:46:03:33:fe:9d:23:9e:65:d2:7a:b8:c1:08:a5:97:
5b:03:20:50:9e:32:04:86:3b:90:2a:7c:31:53:3f:06:ae:77:
46:0e:45:e8:92:84:04:70:eb:8b:ea:f0:75:93:9b:68:28:08:
c8:8c:9c:c2:08:0d:4f:6b:33:b5:17:65:c6:09:9f:ad:7a:90:
b1:1f:93:eb:ae:bc:38:37:2d:87:17:da:a9:6a:4c:27:2e:3a:
ea:eb:56:e4:30:b9:9b:1e:fa:2a:17:b7:5a:77:9a:dd:0f:81:
66:a4:7b:48:e7:2a:10:12:8d:5f:b1:ef:7b:8c:48:c3:d7:ff:
95:67:2d:47:87:27:da:04:92:30:20:9e:d6:be:c7:c7:f1:72:
e5:49:5a:77:89:ec:8f:31:a4:43:db:cb:8f:2d:eb:71:a8:1f:
25:69:67:e3:37:30:02:33:b9:8a:7a:54:e4:1c:84:86:dc:e2:
d1:17:16:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:51 2026 by rpki-client