
$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json)
Hash identifier: Bn96rKW1hK8xLhFNYi1t5Zhmz66UgWW/yIS11f+2iKw=
Subject key identifier: 31:00:29:F5:06:87:07:5A:CD:B3:E3:98:35:47:8F:06:BD:D1:65:FD
Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
Manifest number: 95
Signing time: Wed 25 Mar 2026 06:40:12 +0000
Manifest this update: Wed 25 Mar 2026 06:40:11 +0000
Manifest next update: Wed 01 Apr 2026 06:40:11 +0000
Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: 07vNJkKydHHUqQk/Hc0HQxguqvNKZ8tjCWwpeuP8lAc=)
2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: 5L0n0AuaZsG9RN1VkF1qu4foHDeiS87d8mBxLuyWIUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Validity
Not Before: Mar 25 06:40:11 2026 GMT
Not After : Apr 1 06:40:11 2026 GMT
Subject: CN=69c3834c-2eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d7:eb:01:10:df:a5:73:81:e4:a4:71:00:41:
aa:e6:fe:3c:4e:ed:0c:af:43:ff:0c:05:4e:6c:c2:
1b:7d:7f:c4:a5:1a:38:d2:dc:8d:f3:9c:7b:06:84:
0e:10:7f:34:bd:38:1f:81:b1:3d:a4:ee:d2:6b:b3:
a9:75:df:dd:f7:80:d9:f6:08:82:ce:ef:7e:1c:fa:
3d:16:92:4e:9f:86:33:96:b7:56:c7:b9:c5:9e:d8:
7d:a6:1c:65:fc:ea:a3:0e:36:ed:6a:c0:86:21:6c:
37:0d:f8:a2:f7:b5:1e:20:ae:5d:35:ac:77:ff:f6:
c7:cb:6f:4a:b7:5a:a0:46:5c:9f:22:ab:1d:d5:be:
a4:4d:ac:09:d0:bd:13:6b:e4:42:eb:e9:a7:99:e6:
d6:82:8e:e2:26:a7:0e:02:7b:27:65:6e:b0:2d:b1:
29:f1:29:f9:fa:ef:8a:1e:3a:12:84:03:14:b5:27:
e3:ba:f3:77:cf:66:9b:68:72:3e:3c:44:0e:1f:7a:
7b:c8:33:e6:81:4e:c5:ca:2a:71:47:25:fd:89:6c:
30:af:a5:84:59:01:1b:76:69:5a:1f:12:ea:bf:ba:
09:ee:4d:a3:9e:2a:a3:38:b7:82:cd:d2:78:0d:8c:
09:fc:6d:0c:fe:c3:b2:d0:94:70:ae:f9:a5:37:8d:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:29:F5:06:87:07:5A:CD:B3:E3:98:35:47:8F:06:BD:D1:65:FD
X509v3 Authority Key Identifier:
keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:62:33:09:67:df:f2:5f:ab:de:05:55:df:36:5e:a2:50:4b:
ee:f5:54:f6:ef:2d:9c:c0:b4:f3:fb:2b:b5:c2:cb:d3:cd:4d:
02:91:b3:6d:9a:fa:ef:6e:37:13:cb:39:ec:f4:46:1d:92:a7:
bc:de:8f:96:e6:d5:23:83:2f:65:00:77:89:f0:1a:90:58:ea:
81:d1:c4:5a:b3:1c:be:99:78:7f:2b:ca:0d:c7:10:ae:b8:dc:
2a:e2:fd:ff:0d:16:be:cb:25:47:4c:7a:88:99:d5:33:06:f3:
03:e1:13:60:5c:16:12:16:cd:f1:8d:bc:8b:76:c8:18:c8:0c:
e6:f1:23:6a:0b:65:d9:90:0b:ea:2d:61:95:e2:b6:33:22:fa:
79:22:83:e1:74:2e:01:72:ef:5b:29:81:25:f9:c6:c8:9d:be:
ad:3d:79:a1:7a:ea:31:e0:4f:15:33:91:86:7f:f4:c0:05:18:
79:5a:db:e2:b4:60:99:4a:44:f1:67:c8:90:02:d5:96:4f:70:
f1:8c:45:22:73:a5:14:64:7c:ce:69:3e:20:76:98:77:ed:dd:
07:42:d4:ab:97:f9:3f:a0:30:bf:55:8e:55:31:1b:70:51:69:
27:3f:8c:0e:ec:8a:b2:05:51:38:22:c4:f7:ef:85:40:93:c7:
d7:96:07:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:07:16 2026 by rpki-client