
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
File: 9oPyIkSMakhd2P7f4encdEIT-jw.mft (raw, json)
Hash identifier: XBYCTkNW6Op29kfTO4zkUj9q/qSyIAtMxLDKi+fAlb0=
Subject key identifier: 30:CE:0C:E8:5E:87:7A:FC:C3:2E:E5:6C:62:3D:3D:DD:C1:CE:2A:66
Authority key identifier: F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
Certificate issuer: /CN=A91A2886/serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
Manifest number: 26
Signing time: Wed 15 Apr 2026 08:28:45 +0000
Manifest this update: Wed 15 Apr 2026 08:28:44 +0000
Manifest next update: Wed 22 Apr 2026 08:28:44 +0000
Files and hashes: 1: 9oPyIkSMakhd2P7f4encdEIT-jw.crl (hash: mmfXD1NlR5ih5p3SGs9+zFSnVF3Yz3ig+a5Oc0xw/OY=)
2: 35037C3414DD11F1B12014D7123D8C67.roa (hash: j+SdwyC8ptJD+qecbYia9qa2SzHrIz3dLwQQE297jB4=)
3: 9541152014DD11F1B59CF9DA123D8C67.roa (hash: o6jXstt3oz0pLRapDBGquL+NWtwn1qFvviGsBZcW4hM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2886, serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Validity
Not Before: Apr 15 08:28:44 2026 GMT
Not After : Apr 22 08:28:44 2026 GMT
Subject: CN=69df4c3c-ab5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:34:b9:b8:81:4b:53:69:3a:d5:a3:6f:47:
a8:10:d1:b0:26:8a:bb:0e:c7:ca:a1:34:66:2a:34:
d4:21:53:e1:8a:ee:83:95:eb:7d:17:58:d9:eb:be:
8b:30:c0:98:a7:11:6a:55:77:78:82:4c:f6:ec:ca:
8a:7d:82:1e:08:43:54:68:f8:74:c9:70:e1:59:13:
93:68:ee:22:42:8d:55:61:86:e7:8d:03:0f:79:c7:
95:6c:a4:ec:f1:1f:4b:a8:ba:ef:5e:b7:fb:c9:5c:
24:5e:d4:65:95:a0:6a:5a:dd:b8:69:7b:da:b4:ec:
6e:a9:fb:21:a1:be:c5:8f:23:9e:65:c9:44:3b:ba:
0c:86:db:39:b5:7d:2d:82:e9:97:9a:8c:a2:56:20:
77:b8:68:7e:75:be:98:1f:b5:70:00:a9:81:ea:c5:
50:d8:9a:e7:b3:8c:78:35:77:f4:16:b0:bf:31:73:
42:ea:fe:21:ff:d6:3b:f2:08:78:98:c2:14:f6:4d:
6f:43:ce:2e:09:f1:95:77:50:73:61:d9:6e:ed:a2:
45:5a:47:f6:9c:bb:8a:53:a5:ce:8e:78:29:c2:0c:
fc:78:9c:d8:98:64:41:15:c9:98:fc:ec:2a:7c:de:
a4:84:30:72:fb:99:4a:bc:f3:71:d7:33:c7:85:71:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CE:0C:E8:5E:87:7A:FC:C3:2E:E5:6C:62:3D:3D:DD:C1:CE:2A:66
X509v3 Authority Key Identifier:
keyid:F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:94:47:d5:10:52:f9:54:7e:4c:f6:71:e1:74:6f:0b:ea:14:
b0:c0:a3:e7:d6:da:83:99:e4:fa:f0:d2:3b:96:db:7f:10:e8:
e0:3e:7a:42:ae:9b:d5:93:f9:5d:e0:76:9d:ff:b4:94:d8:20:
c5:a6:44:6c:4e:5a:d5:51:dd:68:90:99:bb:22:c4:bd:95:61:
2f:3f:e4:30:80:01:05:6b:67:da:99:37:84:00:82:e2:45:0b:
0c:07:9a:0a:cd:7d:2c:86:63:ac:72:4c:aa:c8:e6:36:b3:be:
dc:60:60:ff:08:04:87:4a:e5:8b:cc:fa:5f:40:40:ae:62:b5:
74:0d:09:78:c4:49:e7:33:8e:75:aa:59:9a:e7:e9:1a:db:93:
ea:8a:77:c7:40:8d:db:d9:81:41:be:99:67:19:f9:eb:d2:83:
8a:b8:80:79:6e:7d:92:d0:c2:44:73:80:0e:a4:83:3a:52:18:
b9:a9:bc:da:9b:da:a6:f0:91:1c:21:1c:24:db:66:a7:e8:a7:
ec:fb:55:63:5e:28:e9:47:be:ba:ee:9a:01:bd:8c:2a:b4:61:
72:30:0d:ed:55:03:ff:17:51:c0:16:bb:38:e0:e8:cf:88:7c:
23:ea:40:43:63:8c:d6:f1:4b:74:a4:98:22:ad:e0:d6:33:70:
6a:32:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:38:12 2026 by rpki-client