
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json)
Hash identifier: dt29EDZohN+UE9iKsimROYuMT4ZCWCX7xZNEzi/TFyI=
Subject key identifier: F3:AC:C1:59:14:D3:F6:98:14:D0:C7:EE:4A:D7:A8:A2:48:9F:67:04
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
Manifest number: 9C
Signing time: Mon 11 May 2026 07:29:59 +0000
Manifest this update: Mon 11 May 2026 07:29:59 +0000
Manifest next update: Mon 18 May 2026 07:29:59 +0000
Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: 03Dg1ni0uq3APdevlLNmuvLJr5e7FWAgvuJ4k9q1riQ=)
2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: rWKDZcXDRvxkeevoTmv1zvdbGFQP1gVAwd/TCsKJ1Qk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Validity
Not Before: May 11 07:29:59 2026 GMT
Not After : May 18 07:29:59 2026 GMT
Subject: CN=6a018577-b4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:a5:6f:9f:28:b5:e7:40:ef:c0:c3:cd:bf:
5e:39:f7:c6:ec:c0:72:8e:52:8c:00:89:cc:92:7b:
e5:1d:cc:44:39:cc:af:84:66:ca:e8:f6:1d:47:61:
94:ab:bd:bb:fa:28:42:14:04:ed:60:01:fa:6a:7f:
04:5b:c2:3c:6a:50:81:aa:9a:90:a7:eb:05:cf:00:
b5:af:b4:53:6a:10:2d:00:b6:dc:69:70:01:49:61:
d2:cb:fd:e4:99:a1:24:c4:14:fa:db:0f:cb:79:49:
ac:a0:c9:76:2e:f3:96:47:23:20:83:c9:0a:7d:98:
9d:3b:da:56:f3:9e:c0:24:0a:e1:b4:0a:fd:d1:5c:
33:c4:6f:7f:0c:6f:01:14:15:f1:6e:b0:96:8e:c8:
61:8f:be:d8:61:ab:4d:fb:e5:3c:a2:a1:4a:85:28:
61:b9:57:19:fc:57:88:0a:9b:61:4e:00:af:a5:8f:
c3:f4:70:9d:36:be:70:ee:d2:67:3c:9a:64:d5:e2:
c4:b5:52:8d:2e:9f:6c:a0:4b:97:84:c9:35:f7:40:
3a:77:88:15:c1:43:f1:a8:d6:bb:f4:4c:06:33:53:
6c:24:61:d0:a2:1d:2c:70:35:43:97:ff:aa:7f:8f:
52:6e:3b:ca:92:a5:c6:bf:11:cb:e3:33:5b:2b:1b:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AC:C1:59:14:D3:F6:98:14:D0:C7:EE:4A:D7:A8:A2:48:9F:67:04
X509v3 Authority Key Identifier:
keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ea:02:88:15:bb:15:f0:1c:3f:78:a5:86:1b:e1:79:95:b9:
8b:c6:07:d9:b1:af:d4:27:93:4a:87:a1:9b:4b:93:bb:4f:95:
45:25:30:77:a9:6a:22:1d:21:2a:2c:de:ef:69:74:65:68:46:
53:22:19:a3:df:66:bd:ad:a0:15:b7:b5:19:0b:70:26:bd:b2:
e5:aa:80:57:30:3c:7b:ad:be:12:ab:8f:4f:a4:31:20:f8:52:
84:3d:40:26:35:27:a4:64:ff:99:2e:13:67:4b:8a:08:f0:cd:
47:16:62:11:77:a9:46:23:b8:1f:4e:57:33:49:96:29:bb:72:
26:89:35:5c:37:b2:31:92:86:a2:af:9a:c0:19:bf:db:ea:11:
b2:6f:e1:74:8e:be:0d:f6:ca:47:d0:38:89:51:f0:c3:9d:94:
b3:92:3d:65:e0:24:34:d7:0b:5d:0a:6e:97:2d:b1:17:4d:b4:
b0:09:eb:97:6e:f0:32:3d:1c:a9:57:b4:e6:20:83:80:79:bb:
01:8d:2c:29:9f:f5:83:c4:04:fc:65:36:4e:01:a1:9f:1e:0c:
7e:6b:e0:04:e6:42:4a:41:c5:f0:eb:04:62:d0:cf:cf:43:6a:
f1:c8:7d:c0:bb:0f:4d:e9:5e:fc:43:34:da:7c:a3:c3:96:ff:
51:2b:a8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:49 2026 by rpki-client