
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json)
Hash identifier: XTPHmmlY6ygB/qSIZBPutafZiExgROqoreFAUMDu0Sk=
Subject key identifier: 3B:D0:41:10:16:A4:DD:F2:FA:3D:AE:11:C5:5E:A9:2A:AB:D4:C2:BC
Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Certificate serial: 028B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
Manifest number: 0285
Signing time: Mon 21 Sep 2026 01:52:55 +0000
Manifest this update: Mon 21 Sep 2026 01:52:55 +0000
Manifest next update: Mon 28 Sep 2026 01:52:55 +0000
Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: UOedsV3NUvPmtfnQN252Aubq+a1DUWNM/gqyGI/AMTY=)
2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: HLxpBgf2BiS9RoMk9148N++nqSRKey+SFnFlfYeHOnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Validity
Not Before: Sep 21 01:52:55 2026 GMT
Not After : Sep 28 01:52:55 2026 GMT
Subject: CN=6ab08df7-bb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a7:84:a1:df:0b:2e:bc:83:8e:c2:eb:6d:b6:
b4:73:19:bd:ae:19:b6:3c:54:02:c3:dd:01:9a:a8:
19:de:f0:88:fe:00:cd:3f:b3:af:b0:80:d1:42:eb:
e6:53:6a:c5:9c:7d:5e:2e:63:9a:d7:5a:db:93:a4:
1a:1d:27:06:48:de:36:89:67:bb:95:90:19:b4:9f:
af:bd:ab:36:c7:4d:77:14:78:51:37:1f:b6:6b:46:
cc:bc:7a:7c:d9:5f:ba:f4:b8:d3:5d:ce:be:69:d0:
3b:24:60:ed:30:a1:6c:0f:40:cd:df:7b:4f:ad:3c:
ae:30:45:94:aa:31:ea:5b:b4:7d:29:7c:b2:fa:a4:
47:00:48:bf:ea:ca:c3:c5:c2:83:b5:3e:ea:a6:c6:
bc:a3:1b:0b:fd:64:e0:56:a7:f2:96:d8:b7:30:07:
9d:49:c6:c1:b6:4f:cd:6e:a7:e0:44:64:67:30:ae:
6c:46:9e:9f:da:c5:ce:49:96:30:74:6d:e7:bd:50:
45:0b:ff:0c:1f:02:a0:c8:5e:97:e6:6c:6f:cc:89:
06:42:31:ef:03:bf:5b:69:64:a2:6c:ad:a7:16:a7:
5e:56:88:b3:41:88:3d:be:69:71:f8:d8:60:6d:90:
85:fb:52:4b:1e:2d:1e:86:eb:18:3f:c6:08:ed:c7:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D0:41:10:16:A4:DD:F2:FA:3D:AE:11:C5:5E:A9:2A:AB:D4:C2:BC
X509v3 Authority Key Identifier:
keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a4:f5:3e:4b:f9:62:ae:e4:ae:cc:c6:5a:cf:98:3d:c4:d0:
5b:a4:6a:c2:dd:59:cb:e4:22:00:f7:00:69:f6:c8:fd:fc:1a:
f4:77:9c:0c:a5:99:52:34:c9:66:00:b7:95:e6:31:96:cc:54:
35:be:b7:61:ea:b2:e2:5d:77:77:45:cb:38:12:e8:5a:97:60:
9e:7d:9e:29:ca:02:ee:73:36:c0:b8:9a:cc:2f:4f:ca:0a:83:
11:24:b3:b1:a0:52:4e:d7:a5:ff:e1:ab:d7:cb:1e:17:90:35:
a4:5a:9c:ce:63:0f:a9:35:22:7a:54:f9:10:23:18:99:1e:14:
d0:38:43:fe:78:19:2d:16:aa:e2:70:66:09:7b:12:b0:68:a5:
95:02:9d:b5:57:0b:9e:43:50:48:34:71:ba:25:b9:c0:cf:52:
f7:1f:8f:9e:ac:8b:fd:06:0e:6e:34:7f:db:cb:d7:7c:e7:2f:
13:bb:52:cb:73:23:7e:b5:05:be:87:a3:92:0e:5e:6d:a9:da:
24:76:19:ad:7c:88:24:de:96:96:43:1f:34:c0:c4:b1:3e:90:
da:06:2b:0d:69:20:65:29:3c:24:a6:00:76:ba:b1:14:df:70:
bf:c6:c9:68:31:87:5c:dd:5e:da:06:4f:23:98:70:c4:a4:c9:
53:c7:3c:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM2OTUxMTAvBgNVBAUTKEEzNzAzMEMzNTk2MzA0MDU4RTJGOTk0RjNGRDE0NzFB
M0EyODNFQjMwHhcNMjYwOTIxMDE1MjU1WhcNMjYwOTI4MDE1MjU1WjAYMRYwFAYD
VQQDEw02YWIwOGRmNy1iYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA06eEod8LLryDjsLrbba0cxm9rhm2PFQCw90BmqgZ3vCI/gDNP7OvsIDRQuvm
U2rFnH1eLmOa11rbk6QaHScGSN42iWe7lZAZtJ+vvas2x013FHhRNx+2a0bMvHp8
2V+69LjTXc6+adA7JGDtMKFsD0DN33tPrTyuMEWUqjHqW7R9KXyy+qRHAEi/6srD
xcKDtT7qpsa8oxsL/WTgVqfylti3MAedScbBtk/NbqfgRGRnMK5sRp6f2sXOSZYw
dG3nvVBFC/8MHwKgyF6X5mxvzIkGQjHvA79baWSibK2nFqdeVoizQYg9vmlx+Nhg
bZCF+1JLHi0ehusYP8YI7cdg2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvQQRAW
pN3y+j2uEcVeqSqr1MK8MB8GA1UdIwQYMBaAFKNwMMNZYwQFji+ZTz/RRxo6KD6z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzY5NS84NzNBNjgwMERB
OEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJBV09MNWxQUDlGSEdqb29Q
ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28zQXd3MWxqQkFXT0w1bFBQOUZIR2pvb1ByTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzY5NS84NzNBNjgwMERBOEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJB
V09MNWxQUDlGSEdqb29Qck0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm6T1Pkv5Yq7krszGWs+YPcTQW6Rqwt1Zy+QiAPcAafbI/fwa9HecDKWZUjTJ
ZgC3leYxlsxUNb63Yeqy4l13d0XLOBLoWpdgnn2eKcoC7nM2wLiazC9PygqDESSz
saBSTtel/+Gr18seF5A1pFqczmMPqTUielT5ECMYmR4U0DhD/ngZLRaq4nBmCXsS
sGillQKdtVcLnkNQSDRxuiW5wM9S9x+PnqyL/QYObjR/28vXfOcvE7tSy3MjfrUF
voejkg5ebanaJHYZrXyIJN6WlkMfNMDEsT6Q2gYrDWkgZSk8JKYAdrqxFN9wv8bJ
aDGHXN1e2gZPI5hwxKTJU8c88A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:25:22 2026 by rpki-client