
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.mft
File: POwBojpouGUmd4W7YIfAna3JWkI.mft (raw, json)
Hash identifier: SjhFNJXpAdhgWn3RsSkZVQolU/9oBdjpvuALj74xnbI=
Subject key identifier: EF:A7:F3:A9:BA:FB:2B:14:97:8E:25:15:1C:7D:C1:A1:30:46:93:12
Authority key identifier: 3C:EC:01:A2:3A:68:B8:65:26:77:85:BB:60:87:C0:9D:AD:C9:5A:42
Certificate issuer: /CN=A9150291/serialNumber=3CEC01A23A68B865267785BB6087C09DADC95A42
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.mft
Manifest number: 0D
Signing time: Mon 21 Sep 2026 09:11:47 +0000
Manifest this update: Mon 21 Sep 2026 09:11:47 +0000
Manifest next update: Mon 28 Sep 2026 09:11:47 +0000
Files and hashes: 1: POwBojpouGUmd4W7YIfAna3JWkI.crl (hash: 2nvwSso1Udgyf1vJkFbMhQ3JMK3mdeaAVUuy5ZIkcDA=)
2: 2B4C31BEAC1C11F188F54D123411F970.roa (hash: gwwobKaEiehWlvo2lzNMzGg+0baEAyvc96ounKXLUf8=)
3: 6C972D86AC1C11F1B31E0A3B3411F970.roa (hash: n1CRUyDZguF1Oqp4ARd64HpB4SMYX+Mnn5zg/em3u8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.crl
rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150291, serialNumber=3CEC01A23A68B865267785BB6087C09DADC95A42
Validity
Not Before: Sep 21 09:11:47 2026 GMT
Not After : Sep 28 09:11:47 2026 GMT
Subject: CN=6ab0f4d3-7e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:b2:86:18:de:ef:b7:fe:5d:68:08:34:bc:
01:88:fe:e4:53:58:7e:2e:8f:bd:78:1a:87:21:95:
2c:1f:52:0b:1b:41:10:c9:c5:a6:91:6e:b9:78:14:
fb:f4:cc:d4:ee:3c:dd:6f:65:1a:c4:d0:52:c2:b9:
b4:e1:32:ce:8e:27:37:c3:81:11:40:f0:7e:72:7a:
1e:26:b3:5c:59:5d:ff:80:db:04:28:99:0f:46:76:
db:23:66:b9:d1:8c:48:40:46:07:48:33:67:68:f8:
ef:ca:aa:87:bb:62:0d:20:96:7c:a9:62:6f:dd:28:
f2:0e:3b:b7:e8:a0:46:cc:dc:48:17:94:65:06:34:
09:95:e1:d0:05:8c:cf:64:38:03:02:41:46:a7:b2:
74:22:16:ee:d0:38:6f:b8:ba:73:a4:fb:02:a8:2b:
5a:9b:77:c5:fe:72:68:79:8b:88:b8:0d:ed:a2:40:
25:d0:aa:35:37:68:16:15:4b:90:b2:8f:a3:8c:13:
82:14:80:25:7b:9e:75:0f:a2:6a:8f:29:07:9c:2a:
aa:58:9c:c1:87:42:4f:2a:24:b2:4f:00:db:39:7a:
ff:90:47:ab:d2:d7:fb:e9:05:36:14:bc:4e:2e:0e:
60:cd:70:8f:96:08:5b:05:5d:0b:42:d5:d7:41:8a:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A7:F3:A9:BA:FB:2B:14:97:8E:25:15:1C:7D:C1:A1:30:46:93:12
X509v3 Authority Key Identifier:
keyid:3C:EC:01:A2:3A:68:B8:65:26:77:85:BB:60:87:C0:9D:AD:C9:5A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:94:b8:a8:51:96:42:d5:0f:02:8f:55:bd:b9:44:ce:16:29:
30:fb:24:ab:5c:3e:f2:c3:ca:44:24:cb:53:02:df:60:b4:fd:
87:f8:80:22:00:e4:24:08:8b:ae:ee:29:12:fb:6e:8d:5f:37:
ff:1d:e2:d1:6f:f9:86:15:05:b7:ec:5f:d1:bd:b6:57:a2:7b:
ec:bb:cc:49:92:1f:c9:f0:66:a2:2e:af:40:7b:0c:ad:d0:99:
34:ca:78:68:07:47:55:e5:2b:0d:cd:cd:fa:66:ed:fe:7f:d5:
17:b9:1b:9a:48:61:a9:f4:13:08:e0:f2:e6:05:d5:09:ce:b2:
df:87:76:e6:76:bb:fb:32:1b:d6:5c:60:fe:c4:b5:97:67:de:
10:dc:1a:76:4e:1e:4f:9a:73:0d:4d:e3:08:8d:72:12:84:4d:
48:9f:57:55:29:0a:09:a4:ad:9a:12:76:91:7a:36:ec:39:5b:
e3:0d:24:97:14:cb:80:9f:18:7f:40:3c:56:97:e6:f0:02:22:
b0:6c:e5:f6:e7:d7:b4:d8:91:e0:47:5f:36:03:c5:81:a6:60:
78:ca:89:1e:c2:d7:82:93:92:95:4b:c2:17:5e:c7:57:59:5f:
ef:c0:ee:74:63:a9:24:47:69:4b:49:13:73:7e:90:62:63:19:
5e:dc:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:47:45 2026 by rpki-client