
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
File: n0OyarpyjoL2JjN_omUh-Oafu8s.mft (raw, json)
Hash identifier: /vOa41b/nEmCZegVQrgHZo5kmAurKhemdHzWukxFXLI=
Subject key identifier: 50:4E:D6:E4:95:9F:A3:FA:33:7C:57:96:01:CB:F6:76:6F:E4:27:2B
Authority key identifier: 9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB
Certificate issuer: /CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
Certificate serial: 0301
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
Manifest number: 02F5
Signing time: Mon 02 Mar 2026 01:50:23 +0000
Manifest this update: Mon 02 Mar 2026 01:50:22 +0000
Manifest next update: Mon 09 Mar 2026 01:50:22 +0000
Files and hashes: 1: n0OyarpyjoL2JjN_omUh-Oafu8s.crl (hash: eKHSQsjfPlbnaim4pGJgmdevigbfpl7zLyO++8xev58=)
2: 22D1D50A58BC11ED96790F65C4F9AE02.roa (hash: 1w6R+Y36BRswSm5nVdy4wtIC4/IN06yXyCbCLxbXF6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl
rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769 (0x301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB41, serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
Validity
Not Before: Mar 2 01:50:22 2026 GMT
Not After : Mar 9 01:50:22 2026 GMT
Subject: CN=69a4ecdf-6e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:ae:9d:1e:e1:31:d0:4c:82:5e:6f:20:44:
08:1c:4c:df:64:d4:31:af:b2:83:51:2a:e3:06:ea:
6b:4c:00:c1:87:5f:63:24:fe:a8:dc:79:cc:f7:db:
ca:2d:56:7b:f5:10:de:a0:b7:56:2a:c4:38:3f:cf:
42:f4:b5:90:7f:b5:cd:34:e7:62:87:41:a2:5d:45:
61:a9:a7:0e:b1:6a:4c:88:f6:12:25:06:68:33:d5:
13:88:b7:66:eb:8a:58:e3:ff:b1:d4:bf:3f:28:35:
fb:4d:1f:12:17:96:f4:c8:df:f3:6a:32:ba:bf:2f:
0e:6c:9f:10:a8:6e:32:1c:28:e2:83:43:8c:74:33:
8c:84:9d:bd:91:f4:06:06:59:99:5e:e3:94:bb:42:
3f:88:7c:ff:cc:f3:4c:db:71:cf:1f:2d:fe:99:88:
af:9f:cd:9d:22:71:16:cb:11:c4:4b:b7:e2:7b:78:
04:1e:a8:d3:22:b0:97:a6:3c:15:a6:76:5f:80:d4:
0d:2c:35:5b:b3:39:8f:5b:cc:50:ed:0e:31:f9:1c:
17:95:d1:63:89:0b:db:b6:ad:3a:e8:22:f0:92:b4:
3e:3a:a5:57:3d:11:d9:df:f2:12:c9:a9:72:7e:80:
d9:c8:a0:20:a5:e8:dc:5d:86:e1:4c:84:6f:45:11:
1b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4E:D6:E4:95:9F:A3:FA:33:7C:57:96:01:CB:F6:76:6F:E4:27:2B
X509v3 Authority Key Identifier:
keyid:9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ba:8d:b9:de:89:3d:54:a4:f2:88:91:af:f9:28:8a:82:99:
35:bc:e1:db:65:d1:ca:3c:94:86:19:d8:0a:f9:53:98:19:cf:
b8:16:a8:64:eb:10:e0:7c:a7:22:ac:cf:8f:fe:fc:be:a8:d0:
bc:a5:1b:b0:47:1f:8b:bb:c3:6c:2d:0f:08:f1:34:65:1e:f2:
71:8e:c7:71:e2:0a:f2:b3:70:c5:f4:07:97:d9:88:77:ba:b8:
fc:b9:45:11:e8:c7:5a:ee:9e:fc:d9:03:28:a1:e5:22:c5:c6:
0d:77:aa:d1:e5:ac:da:a7:0e:b7:b5:18:17:91:08:5d:a0:45:
9b:61:60:b9:38:0b:2b:9d:7a:5a:20:db:f2:85:51:79:80:31:
07:d7:7e:66:8e:36:7e:a5:5e:30:b6:64:5e:9b:47:e9:85:41:
b3:10:93:5a:0f:47:1a:b7:25:8f:08:15:77:03:28:a6:d7:80:
74:24:ff:8a:04:db:cf:21:e3:00:1a:2e:4c:b4:f9:ef:fc:37:
38:50:c5:16:3f:b4:63:26:2a:e9:c6:11:90:09:1a:44:69:39:
0a:ea:ee:7c:cb:c2:74:25:45:82:8a:5e:31:0a:f3:8b:f9:2b:
ca:2b:a7:20:1e:eb:e0:8d:8e:a0:29:13:66:c2:80:84:5d:81:
9c:3e:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:54 2026 by rpki-client