
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
File: o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft (raw, json)
Hash identifier: lS1tkD+hTUeVRsz7HH1vndqZuWfGgrpnUxwSzbc2di4=
Subject key identifier: 25:E5:F5:82:7A:5B:DB:09:4D:C0:D9:07:8A:EC:47:75:E0:DA:1B:6F
Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
Certificate issuer: /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
Manifest number: 025F
Signing time: Sun 01 Mar 2026 02:43:53 +0000
Manifest this update: Sun 01 Mar 2026 02:43:53 +0000
Manifest next update: Sun 08 Mar 2026 02:43:53 +0000
Files and hashes: 1: o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl (hash: Ju5W///wc3+/ReK8FxOijZHA/FjIx3IeF2vlqd+Wyf0=)
2: CCCA3842714711EDBB61A87FC4F9AE02.roa (hash: d+HUan0J8SxJd0xahBGBlV4BNz+TxsCySiJG+1XtTvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:43:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F6AF, serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Validity
Not Before: Mar 1 02:43:53 2026 GMT
Not After : Mar 8 02:43:53 2026 GMT
Subject: CN=69a3a7e9-7f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:95:1f:cc:23:0c:28:ea:40:fb:72:1c:ac:
b5:82:4f:8d:91:09:bd:6b:78:5b:1d:db:ea:9b:12:
f0:e9:47:c4:c1:1a:24:08:6a:9f:fe:e4:79:a0:17:
87:ad:9b:45:08:7e:7a:fb:4d:a3:13:14:c3:45:ef:
1d:63:50:df:62:dc:1c:0a:6f:bb:bf:92:97:54:49:
09:32:e7:64:af:6c:ed:2f:75:c9:84:f2:9c:c7:9c:
6b:28:89:ee:ea:f5:21:5d:2c:b8:95:61:f1:6c:8c:
c7:1b:46:1e:e8:67:c2:9c:1b:65:76:1e:45:92:51:
4e:60:07:63:fa:aa:fa:8b:00:8e:86:e0:af:a7:6d:
35:1c:40:f0:1d:ba:88:e1:4c:dd:6d:a4:b2:bf:8e:
8e:04:b4:78:c8:3f:08:54:29:7f:41:5b:7f:f9:6b:
0d:c3:46:f6:8a:a0:63:27:dd:76:e6:f7:d4:74:ea:
ca:0c:25:ab:2e:a6:a6:41:0d:97:f8:22:82:f0:51:
50:fb:7f:f3:c2:b4:c7:20:29:92:3e:ae:42:3e:26:
74:9a:f4:34:51:ec:7e:0b:11:e4:3f:6a:9e:d7:dc:
7d:ac:25:21:b7:e8:d0:03:7b:01:f3:27:85:bc:84:
f7:75:a1:97:2d:57:3c:94:c7:b3:5e:73:c9:89:52:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E5:F5:82:7A:5B:DB:09:4D:C0:D9:07:8A:EC:47:75:E0:DA:1B:6F
X509v3 Authority Key Identifier:
keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:f9:53:bf:d5:8e:db:67:33:9b:fb:68:dd:e8:d6:e4:58:bf:
e5:d2:80:be:bb:99:34:0b:c5:90:2a:09:1d:8e:9d:78:43:e5:
03:68:ec:32:e2:aa:d8:46:07:04:04:99:64:e4:88:dc:a9:bc:
64:f8:e3:4a:54:40:bc:9a:9c:ae:9a:6b:be:88:9d:86:33:e6:
5e:40:2f:d1:48:2a:31:c5:dd:f0:65:62:a3:d7:f0:7b:b8:44:
d4:e4:40:8e:15:04:fb:4c:5f:04:4f:f5:83:32:d2:87:97:14:
06:6a:3d:1d:8b:61:47:a9:d0:91:99:4a:bf:07:91:92:42:ec:
ae:8c:13:03:c9:a7:50:1c:ef:a5:9a:35:f8:c4:40:c7:37:50:
f2:48:11:6f:59:4f:3c:f0:c9:b7:1e:00:12:a4:1e:2f:a8:b9:
2f:1d:ef:ac:36:54:c6:34:a5:09:7f:cd:6d:e1:59:aa:23:43:
14:de:e0:49:f8:e1:5f:8a:07:e5:26:71:b2:eb:df:55:37:02:
e7:57:8e:bc:34:f9:be:11:64:b5:61:68:eb:79:92:eb:01:b9:
21:00:08:5c:23:34:9c:d6:ea:ff:ec:e4:17:a5:c8:dc:7e:d8:
b7:9e:6a:ed:2c:df:b1:67:f1:f7:ac:78:10:fe:03:a9:5f:3e:
76:29:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:41 2026 by rpki-client