
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json)
Hash identifier: RopDkB4ycJoPiud22zax3UyHGFMt5kOeO3r58szavLE=
Subject key identifier: 63:EC:64:DE:A5:17:73:48:EB:17:E6:08:F9:A6:35:0D:0F:D9:3A:23
Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
Manifest number: 0236
Signing time: Fri 17 Apr 2026 02:20:35 +0000
Manifest this update: Fri 17 Apr 2026 02:20:35 +0000
Manifest next update: Fri 24 Apr 2026 02:20:35 +0000
Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: QXsHuciiMqJ+DOCLzoTzCD22aXh4T+lGcrKqhLFWHIw=)
2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: HLxpBgf2BiS9RoMk9148N++nqSRKey+SFnFlfYeHOnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Validity
Not Before: Apr 17 02:20:35 2026 GMT
Not After : Apr 24 02:20:35 2026 GMT
Subject: CN=69e198f3-8959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:08:ad:84:01:d6:6f:85:7e:19:06:23:69:
28:01:1f:fb:1a:30:28:9b:3f:79:5a:0a:30:a9:b2:
7d:cd:ea:0c:2c:12:68:44:7c:cd:5c:72:99:f6:f9:
99:ee:10:dc:b0:e7:c5:d8:cb:99:ba:a2:ef:a8:a4:
59:2b:92:be:09:9b:11:d7:dd:57:b4:63:14:cc:7d:
88:dd:d4:f4:dd:5a:79:f1:33:da:80:50:e8:4d:54:
37:ba:3a:ce:e8:ad:ae:51:b5:40:a9:9e:55:63:62:
a9:2c:aa:b6:6f:51:24:e5:be:05:c5:44:cb:70:ef:
e1:71:91:0c:b1:0d:8a:bb:1e:f8:02:c8:2a:07:f4:
5d:00:fd:19:4f:3a:f8:8c:f8:4d:50:2f:8f:47:aa:
08:7e:e2:84:03:b9:e2:03:3a:f6:40:0f:62:1c:c1:
48:20:f1:d1:b8:a9:87:fd:06:b0:83:a0:45:f0:3d:
23:72:8a:35:b3:f7:1a:4e:c8:55:a0:f2:b4:e1:34:
e0:fe:df:5a:15:a0:c7:dd:97:5a:c5:98:21:69:11:
4c:7d:1e:18:21:f9:99:61:4d:34:c5:6b:84:48:e2:
e8:8f:a9:f2:29:b2:dd:a1:5f:3c:48:23:80:13:73:
6c:b0:29:30:48:26:b6:28:45:59:0d:a7:02:59:16:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EC:64:DE:A5:17:73:48:EB:17:E6:08:F9:A6:35:0D:0F:D9:3A:23
X509v3 Authority Key Identifier:
keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:f6:eb:b4:7a:7c:ad:33:f6:6b:65:38:dd:50:a2:b2:ea:1e:
5b:bb:4d:8e:e9:1f:a4:9c:40:9e:76:71:23:a7:12:49:8c:1e:
fd:6c:5a:2a:10:c4:f8:ce:4a:87:e2:cf:05:50:1b:5c:e1:bd:
b8:40:98:a3:5d:7c:a2:7f:d8:83:28:4a:d0:78:ba:ce:d1:e8:
73:dd:3b:98:fd:08:57:89:6b:d3:13:0d:11:96:c4:23:3f:ad:
b7:25:f4:98:1b:fe:62:1a:21:a6:9c:e4:53:ef:51:0c:dc:4b:
74:a2:db:bf:a9:2c:cf:8b:a3:3a:2c:19:a3:e5:38:6a:22:88:
21:14:d7:d5:dd:37:9f:f2:88:d3:a4:fa:c3:9a:50:5e:25:f5:
d9:eb:c2:2f:82:3d:30:80:d5:7c:93:47:5a:f6:49:3f:0f:77:
23:7d:d2:0b:38:82:bf:43:4c:c6:27:cd:fc:0a:4c:3a:59:87:
ba:ce:74:d9:f5:f9:43:6a:eb:57:54:63:06:f2:c9:28:ba:c0:
f1:49:86:d7:49:71:c7:dc:73:4b:8b:c9:3d:35:37:73:5b:8b:
24:d4:6e:fd:9e:39:9d:bd:d2:12:51:62:01:72:c8:f6:df:fd:
1b:f1:ef:16:a1:fd:ec:c9:b3:40:5f:4a:8e:95:61:45:b8:d4:
56:1c:3c:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM2OTUxMTAvBgNVBAUTKEEzNzAzMEMzNTk2MzA0MDU4RTJGOTk0RjNGRDE0NzFB
M0EyODNFQjMwHhcNMjYwNDE3MDIyMDM1WhcNMjYwNDI0MDIyMDM1WjAYMRYwFAYD
VQQDEw02OWUxOThmMy04OTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwLIIrYQB1m+FfhkGI2koAR/7GjAomz95WgowqbJ9zeoMLBJoRHzNXHKZ9vmZ
7hDcsOfF2MuZuqLvqKRZK5K+CZsR191XtGMUzH2I3dT03Vp58TPagFDoTVQ3ujrO
6K2uUbVAqZ5VY2KpLKq2b1Ek5b4FxUTLcO/hcZEMsQ2Kux74AsgqB/RdAP0ZTzr4
jPhNUC+PR6oIfuKEA7niAzr2QA9iHMFIIPHRuKmH/Qawg6BF8D0jcoo1s/caTshV
oPK04TTg/t9aFaDH3ZdaxZghaRFMfR4YIfmZYU00xWuESOLoj6nyKbLdoV88SCOA
E3NssCkwSCa2KEVZDacCWRaZJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPsZN6l
F3NI6xfmCPmmNQ0P2TojMB8GA1UdIwQYMBaAFKNwMMNZYwQFji+ZTz/RRxo6KD6z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzY5NS84NzNBNjgwMERB
OEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJBV09MNWxQUDlGSEdqb29Q
ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28zQXd3MWxqQkFXT0w1bFBQOUZIR2pvb1ByTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzY5NS84NzNBNjgwMERBOEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJB
V09MNWxQUDlGSEdqb29Qck0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANPbrtHp8rTP2a2U43VCisuoeW7tNjukfpJxAnnZxI6cSSYwe/WxaKhDE+M5K
h+LPBVAbXOG9uECYo118on/YgyhK0Hi6ztHoc907mP0IV4lr0xMNEZbEIz+ttyX0
mBv+YhohppzkU+9RDNxLdKLbv6ksz4ujOiwZo+U4aiKIIRTX1d03n/KI06T6w5pQ
XiX12evCL4I9MIDVfJNHWvZJPw93I33SCziCv0NMxifN/ApMOlmHus502fX5Q2rr
V1RjBvLJKLrA8UmG10lxx9xzS4vJPTU3c1uLJNRu/Z45nb3SElFiAXLI9t/9G/Hv
FqH97MmzQF9KjpVhRbjUVhw8pQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:11 2026 by rpki-client