
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json)
Hash identifier: tDhos1qpFopafrGvEtq66Pd01ZUg2hrvLvZtwmlJfjc=
Subject key identifier: FC:41:99:08:93:9B:1C:55:96:69:89:C1:AD:4E:55:32:C0:43:A9:3F
Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
Manifest number: 021C
Signing time: Sun 01 Mar 2026 03:35:58 +0000
Manifest this update: Sun 01 Mar 2026 03:35:58 +0000
Manifest next update: Sun 08 Mar 2026 03:35:58 +0000
Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: GqkMUUh3F5ZxdyFGMtTXGfKLwR9+XN60k+4iyzyOsmg=)
2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: ubUjcvyGWOVoBPD/HaOXZSW0U65r3pb0SXIKGNOXMw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Validity
Not Before: Mar 1 03:35:58 2026 GMT
Not After : Mar 8 03:35:58 2026 GMT
Subject: CN=69a3b41e-815a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:13:e5:15:b0:12:1e:ab:d6:df:98:4e:7a:
f1:9c:cd:4f:c5:1c:06:e9:c1:af:dc:6b:fc:d2:58:
2d:7a:e8:c2:6b:53:e5:b9:c9:7a:0f:fa:c4:30:13:
2f:a4:b1:91:f2:6f:9f:dd:b0:3f:16:4b:6f:04:de:
e1:ff:1e:1c:3b:7a:16:f0:6e:c2:d9:22:90:3d:d1:
5d:c4:bd:67:35:f4:d0:4e:fb:6e:8e:90:14:d4:a8:
6c:52:17:34:5d:fd:0f:d6:37:81:c5:33:10:0f:09:
18:ab:e0:24:09:b7:85:e5:ef:ee:82:6b:bc:1e:c7:
0b:ea:a8:42:75:05:a5:df:9d:4b:ff:19:3f:5c:b6:
f7:4a:10:d9:0f:cd:2c:e7:ce:17:f9:92:b4:90:9d:
b4:12:81:04:00:a7:f1:72:92:fd:be:80:97:76:35:
c6:33:d6:e0:43:77:7d:fa:13:22:42:96:3e:3c:a5:
02:0f:c0:d6:f4:40:33:89:48:d3:09:00:5d:4b:db:
14:05:56:92:d7:90:0a:d4:cd:22:1d:7e:56:47:87:
6a:80:ce:d0:62:88:86:4f:6f:6c:ff:3a:99:e9:13:
8f:e2:5d:26:8f:f8:52:41:de:52:92:5c:d4:0d:a3:
ee:79:16:ff:84:e8:93:67:81:2d:5b:42:dc:28:ca:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:41:99:08:93:9B:1C:55:96:69:89:C1:AD:4E:55:32:C0:43:A9:3F
X509v3 Authority Key Identifier:
keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:fc:b4:10:8b:f0:40:14:9e:ad:ad:58:2d:77:c3:78:69:16:
28:63:5e:7a:84:12:65:0b:85:89:0a:ef:82:0e:3e:bf:41:f3:
fe:12:33:c3:26:65:30:97:21:b5:97:57:fb:e2:7f:01:d0:c5:
2f:f1:2d:cf:51:98:5c:eb:b4:c1:a9:54:15:59:bf:0e:8b:e3:
60:e7:38:4b:82:d6:bb:ba:31:bf:98:20:00:4f:bc:6e:2f:12:
73:83:e9:e4:c9:50:9a:c5:ca:8f:bb:31:34:b5:85:fb:d6:17:
2f:76:36:39:0c:31:b8:ec:cc:c5:7e:ab:bd:95:2a:95:e3:58:
3e:99:31:b5:e4:f3:14:e8:1d:ff:5b:be:a6:3c:09:a6:40:0f:
c2:3f:e2:e0:c7:a3:a6:00:cd:44:5c:02:2b:9a:94:f7:08:87:
47:b2:fb:4f:cf:28:c5:66:1d:5d:80:d8:12:cc:dc:92:b4:f0:
69:0d:0a:ec:5e:26:b4:7a:e3:ca:7c:09:1a:28:bd:48:38:19:
5a:ad:a9:16:2d:23:3d:cf:cb:2a:4e:dc:0e:ad:d4:d8:23:08:
44:b9:25:0b:96:58:39:0f:e2:65:c3:99:db:46:8f:37:86:6f:
23:6e:4f:be:3a:0e:33:69:92:99:cd:5a:b4:e0:c4:06:4f:da:
70:dd:ec:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:28 2026 by rpki-client