
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
File: o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json)
Hash identifier: 6jco3Dkh1bYhbCo7IZYBUtlsrCwPgy6EI650pjswcog=
Subject key identifier: 94:E8:20:0B:59:2F:C0:4D:35:00:24:3C:35:33:9B:D3:F0:13:F2:23
Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65
Certificate issuer: /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
Manifest number: 0163
Signing time: Sun 01 Mar 2026 05:58:27 +0000
Manifest this update: Sun 01 Mar 2026 05:58:27 +0000
Manifest next update: Sun 08 Mar 2026 05:58:27 +0000
Files and hashes: 1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: 9R00+f7q2eTQH1RzIr8PJqEx+xJL5ljEJmYrolnQqfM=)
2: 4A9AD51270F811F0BA070F34C4F9AE02.roa (hash: GfIBo0sJeXzYPko1KN4K0PA1n9E0Kyw46Z51n+s1ljE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl
rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F, serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
Validity
Not Before: Mar 1 05:58:27 2026 GMT
Not After : Mar 8 05:58:27 2026 GMT
Subject: CN=69a3d583-6240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:03:93:2a:f5:be:f2:04:99:4b:56:2c:3e:
a2:97:03:e8:fd:c3:6d:75:eb:9c:1d:6a:2c:8b:a6:
27:f1:2f:4a:b9:47:79:61:98:7c:c6:e8:3d:eb:03:
5b:90:e6:3d:6f:ac:bd:e5:da:b8:a8:30:b5:41:b1:
38:1c:08:1a:9a:e0:e6:7b:94:f1:cc:ee:8d:92:6b:
fe:91:dd:6d:5f:09:e6:1d:eb:8e:29:8c:35:55:23:
03:e7:c6:89:40:8a:83:42:ab:f5:ac:1d:5f:f7:c2:
3b:eb:2c:8c:d7:40:64:fe:87:bb:3f:cb:74:af:b0:
7e:49:85:bb:c9:e1:4e:58:52:ae:47:30:92:88:71:
81:4c:84:00:dd:5f:a5:57:ad:d9:bd:95:d0:ea:50:
3f:0d:54:9b:d7:fc:0c:95:48:b3:d2:d1:f0:c1:02:
47:08:06:30:2a:2a:4d:bf:5c:0a:cc:27:0d:5a:02:
b9:8a:df:39:90:1f:71:62:46:e7:b1:5b:11:13:00:
d7:44:e8:dc:ab:a7:29:9b:41:11:67:ed:b0:00:2c:
cd:fc:fc:46:95:e9:7a:c1:0b:1f:d4:cd:b3:ca:cf:
f9:46:73:1d:5a:dc:6d:c4:9f:e5:b9:f2:8f:d4:5b:
17:40:3e:41:21:71:e2:18:05:a3:50:89:79:01:7e:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E8:20:0B:59:2F:C0:4D:35:00:24:3C:35:33:9B:D3:F0:13:F2:23
X509v3 Authority Key Identifier:
keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:31:84:03:c9:4d:6b:dc:91:a5:39:88:d8:74:fb:61:58:9a:
fa:b0:05:a3:b9:3e:81:a8:3b:44:65:c6:1a:8b:fe:64:1a:55:
c9:bb:77:7e:2b:db:27:9e:41:cb:ee:f4:0b:5d:c5:68:0a:a2:
07:c1:aa:e3:f9:68:40:47:d7:7f:b0:29:0e:b8:a2:07:d6:72:
10:73:51:0f:b3:e7:1f:66:a5:49:ad:77:05:17:05:9a:f5:f3:
3c:d4:03:69:c7:e9:4f:12:65:34:a6:42:65:c4:6d:ef:18:5b:
07:2e:df:e5:c7:7b:ca:1c:1d:80:e7:62:30:87:d8:bd:0c:0c:
73:d1:0d:45:a9:a6:4e:7a:a2:ea:8c:01:a0:ef:dd:78:98:d1:
5d:88:6e:06:94:d6:f4:17:eb:5d:e2:b4:10:da:19:54:28:2e:
f4:58:2e:2a:28:ac:b4:27:a3:f4:53:8b:df:59:ba:8c:42:77:
6d:91:66:0f:ba:ac:eb:be:ad:1e:fa:67:d4:a0:89:78:8e:9c:
c0:e6:6b:aa:22:72:c1:92:5e:c7:e6:78:fd:da:d8:9d:62:0e:
c6:d9:60:b4:24:d4:f9:d1:20:7d:09:34:73:61:8b:89:6a:b0:
7a:f9:c2:32:2d:44:96:1d:fb:8a:61:4f:d6:7e:71:df:81:59:
43:ed:62:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:35 2026 by rpki-client