
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json)
Hash identifier: txgNSvzAXtq48vX9vjC8jDVvusREcDJFEgEE0JSCFnA=
Subject key identifier: 53:B9:2F:9D:D8:86:48:CD:3C:30:CE:62:E8:28:58:C0:1F:A0:CA:DC
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
Manifest number: E2
Signing time: Wed 23 Sep 2026 06:19:11 +0000
Manifest this update: Wed 23 Sep 2026 06:19:10 +0000
Manifest next update: Wed 30 Sep 2026 06:19:10 +0000
Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: g3d5Fw7kOEN1P4TmJZrCcXWs88S7IxTtm6kui1t7Sdw=)
2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: WRz1Amhg1eLxzvJe34a5Oo/mdHZDgY00iZZMnOor6VE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Validity
Not Before: Sep 23 06:19:10 2026 GMT
Not After : Sep 30 06:19:10 2026 GMT
Subject: CN=6ab36f5f-33da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:ac:3a:b2:6f:20:9b:4d:6b:25:4e:74:e3:
0f:54:41:39:ea:7a:7d:df:3e:7e:3e:e2:0e:51:f5:
b8:82:d0:cb:4e:08:b3:c4:03:e6:b3:6e:38:ea:8c:
86:33:c0:90:31:0e:79:d2:77:a2:22:ff:ac:22:3e:
c5:e7:35:36:37:c7:e7:08:ca:56:8f:f5:e6:17:10:
65:a0:03:0c:e3:cd:14:cd:c6:69:ed:01:6d:f3:94:
b6:37:88:bc:07:1d:2b:6b:83:6c:07:77:bc:f6:1f:
83:b2:a5:8c:46:21:b1:3b:c4:f5:20:39:88:6c:29:
37:d8:f5:db:6c:55:a0:19:ff:d6:50:ae:95:00:23:
0f:67:e0:10:e6:6e:ce:4d:13:2f:a9:ed:c1:7a:b2:
43:a7:1f:70:ca:75:61:3d:ad:fb:3a:c0:cb:3c:cf:
a0:6f:df:44:d9:70:3e:06:87:c4:35:3b:b6:9b:04:
9d:90:90:ff:88:6c:10:51:5b:e7:0f:fb:59:ea:f6:
fe:aa:96:79:d0:89:48:00:0a:9d:80:51:2b:f3:ed:
a7:3a:0e:73:0e:b3:a0:72:e7:2f:b4:cd:3e:78:51:
c7:89:36:45:38:89:e2:9b:d5:5b:0d:69:f7:f3:b1:
f9:35:e9:13:15:3c:6e:4e:4d:ba:a6:a9:73:00:db:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B9:2F:9D:D8:86:48:CD:3C:30:CE:62:E8:28:58:C0:1F:A0:CA:DC
X509v3 Authority Key Identifier:
keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:9c:24:59:2f:3d:da:c8:4c:d4:68:5f:b8:25:4b:c7:a7:d0:
a0:1a:62:3f:d6:ce:9c:4c:19:01:2f:b2:0c:42:a1:27:b2:a0:
3e:ea:68:81:80:ae:79:c5:76:f2:2d:26:a8:88:9d:08:16:6a:
d0:dc:95:5c:29:50:ff:3e:81:37:37:45:af:2d:57:73:28:30:
a6:96:43:84:68:c9:32:16:1b:ed:ca:8a:9f:f2:d1:c0:48:b0:
76:7e:bd:ff:6d:91:79:d7:38:fe:69:58:80:b0:b7:6a:02:cb:
fc:9c:06:0c:b2:aa:3e:f2:2f:aa:3b:1a:7a:7d:99:17:50:a8:
8d:1f:dd:72:d7:a8:d8:c8:5e:3c:dd:15:b2:ff:5e:13:95:cd:
41:5f:a6:83:5c:63:cc:41:0a:d7:e4:de:64:5b:28:9b:3b:ba:
4e:c6:b7:d5:73:91:aa:bc:5f:9a:5f:6b:d7:89:c4:9f:b5:b2:
3d:3e:e9:69:be:00:67:95:9e:c0:88:d3:fb:56:5d:0e:34:55:
6b:16:ae:b4:fe:79:8b:e8:1f:c1:c2:a7:66:94:88:53:cf:c7:
00:59:02:f1:0a:4d:e6:33:fd:6f:72:1f:98:ed:b6:6f:31:64:
1e:ca:e0:f9:94:56:ef:bd:ea:ed:9c:93:e2:01:c5:4d:5c:07:
0d:d9:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:39:58 2026 by rpki-client