
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
File: _ONoVUVgesO8wzQNA5shaIJxJ74.mft (raw, json)
Hash identifier: d0+7jyP4G+rzjTOFFAIamOXzibVBdVk8p7YnIfgsOCA=
Subject key identifier: C8:2A:58:3D:AC:98:7D:89:3C:0F:8F:D7:00:64:85:50:90:52:02:EC
Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE
Certificate issuer: /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE
Certificate serial: 0906
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
Manifest number: 08E7
Signing time: Fri 12 Jun 2026 20:23:42 +0000
Manifest this update: Fri 12 Jun 2026 20:23:42 +0000
Manifest next update: Fri 19 Jun 2026 20:23:42 +0000
Files and hashes: 1: _ONoVUVgesO8wzQNA5shaIJxJ74.crl (hash: vruh6Dp20i73lsbt282gnKxYDM7aBkvybwmgfsejcgY=)
2: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (hash: d8G/TfpNpL6HX37ocKvM5TsVlVjVR76JD7mZYT1iKdk=)
3: 51A7E3C28EB711EBB8A7B01DC4F9AE02.roa (hash: +lxeSugWEuY86E4w4UGBy7QvT+6uw0dBO3CLwKjhb3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl
rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2310 (0x906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE
Validity
Not Before: Jun 12 20:23:42 2026 GMT
Not After : Jun 19 20:23:42 2026 GMT
Subject: CN=6a2c6ace-b932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:fc:52:28:25:83:90:fe:fa:0b:1d:9d:36:
98:16:f1:7c:af:d7:4a:bc:d2:8f:3b:83:86:eb:69:
75:2a:87:cb:3d:f1:0c:c1:ff:08:f2:30:ae:ae:8e:
80:5b:3d:2d:7e:4a:dd:61:1f:73:59:b5:16:38:5a:
56:e4:fe:8c:bc:13:f2:75:a6:fa:31:07:76:84:aa:
82:71:39:54:4d:a0:13:2f:31:bd:e3:de:f5:9d:cf:
be:01:80:79:8b:97:e5:ce:c0:33:f8:ef:65:b6:e9:
01:a7:b7:f8:99:19:50:fb:92:da:e6:0d:af:26:81:
17:21:81:01:70:32:1f:b2:16:ee:13:5f:73:aa:21:
a8:4b:5a:59:86:e3:ef:69:f0:0f:b4:d2:3f:ef:90:
dd:dd:98:75:df:84:f2:b8:60:86:8e:cc:73:21:94:
ed:f4:4e:94:61:44:55:68:73:66:6a:94:a7:ce:b6:
63:73:4e:01:fe:9c:e8:e3:d4:c7:06:b0:02:a1:60:
6e:82:63:8b:dc:33:bb:48:b0:87:24:bb:32:6e:46:
f3:40:b6:4f:42:74:64:60:df:d0:ce:42:2e:b2:3c:
23:dd:b6:c0:e5:2d:16:36:d0:a6:62:84:3b:15:11:
8c:0b:45:2a:16:87:2e:57:db:be:3f:81:7b:b7:8c:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2A:58:3D:AC:98:7D:89:3C:0F:8F:D7:00:64:85:50:90:52:02:EC
X509v3 Authority Key Identifier:
keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:7a:8a:69:c1:ee:e6:24:3b:0e:72:2c:c3:5f:ce:5c:a8:e5:
fc:d8:ed:2e:bc:d2:77:dc:ca:91:50:93:e7:c5:e5:08:84:5e:
2f:9b:5f:1d:9b:1b:74:42:46:45:29:34:0d:4e:29:09:76:89:
2a:e9:b4:a5:55:fb:b7:46:68:21:d8:62:76:b5:1a:9e:3f:e5:
10:f2:34:83:6a:cd:01:38:ba:d4:f7:4b:8b:75:e4:c3:5a:6e:
08:be:b9:dd:38:44:45:19:25:cc:18:ec:72:2f:6b:07:36:15:
51:52:01:31:a9:0c:68:63:58:9e:55:9a:63:bf:70:e0:d0:6c:
79:74:49:9a:63:e0:46:f7:b4:a6:e5:b7:1c:7d:7d:a0:f3:62:
a4:8c:2a:3a:99:2d:d0:72:93:31:04:24:98:24:19:70:f1:8d:
64:40:65:5c:20:b9:ad:e0:fd:c2:ca:c2:22:43:23:f3:79:33:
b4:1c:95:7d:a5:f1:91:1d:d7:08:13:28:f0:5b:5e:55:a7:30:
b9:49:bc:43:24:50:50:2e:6a:68:64:19:70:6e:a0:e5:4a:0e:
9a:09:6f:ea:cc:86:e9:41:d7:be:08:01:60:25:ae:25:70:06:
20:ef:51:93:24:ef:31:d7:b0:76:3a:da:d0:cf:98:05:03:2b:
65:f1:27:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:49 2026 by rpki-client