
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json)
Hash identifier: sDrYBKkgzzqVbCUJqIlnVFRAelk1ElorsDIE9xnjGWM=
Subject key identifier: DE:E3:3F:D1:12:0C:D3:9E:EC:F4:E5:12:F6:CB:1E:75:6F:C7:98:71
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
Manifest number: C0
Signing time: Thu 23 Jul 2026 08:45:16 +0000
Manifest this update: Thu 23 Jul 2026 08:45:16 +0000
Manifest next update: Thu 30 Jul 2026 08:45:16 +0000
Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: ge3QBO42Bo99hQkibdyLxrcUmj1Tol4XYWLKVsY458o=)
2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: rWKDZcXDRvxkeevoTmv1zvdbGFQP1gVAwd/TCsKJ1Qk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Validity
Not Before: Jul 23 08:45:16 2026 GMT
Not After : Jul 30 08:45:16 2026 GMT
Subject: CN=6a61d49c-b93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:1d:50:b5:00:b6:d9:43:fb:39:e4:24:2f:
12:f5:d9:e9:fb:2b:12:f9:3a:52:0c:dc:4d:f7:a9:
ad:87:93:59:8a:f0:4f:30:7f:7d:64:32:ac:a0:ad:
8c:af:ff:87:bc:4c:5c:00:44:d5:83:d4:cc:6e:41:
17:03:bd:78:ad:49:c6:ae:ff:ee:fc:cf:18:19:ab:
49:4f:30:17:02:f6:6d:4b:49:57:2c:5d:e0:36:e2:
02:84:09:22:eb:a0:be:a5:a9:8c:83:1b:ee:97:1d:
ce:1a:be:f8:90:a0:90:84:95:5a:84:c6:f8:10:c2:
cd:d1:d1:16:53:0c:be:1e:f2:5b:4a:07:7c:ee:84:
e2:d3:76:4b:fd:9a:07:71:a2:a3:be:df:b2:9e:04:
0e:85:09:7e:1d:c8:27:b6:8e:65:41:71:0e:c1:1b:
9c:28:aa:d4:34:16:28:c2:0d:46:37:bc:96:dc:a4:
48:c6:d2:29:e9:1b:26:65:1d:03:a5:f1:51:02:2f:
63:0a:f1:64:9e:ca:a7:a3:ae:93:c3:15:4e:22:83:
60:16:55:46:88:d1:fb:de:e0:42:62:31:82:b7:e2:
7c:73:1c:b5:1b:5a:45:22:8b:18:05:d1:f4:3c:39:
04:21:31:79:06:dd:fa:16:fa:06:23:17:6f:60:7d:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:3F:D1:12:0C:D3:9E:EC:F4:E5:12:F6:CB:1E:75:6F:C7:98:71
X509v3 Authority Key Identifier:
keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:39:ac:69:1a:8c:88:7f:ff:5e:88:b2:55:39:0a:82:d0:d0:
d0:2b:37:bc:71:0e:46:0f:57:2b:6a:70:cf:c7:5a:a1:18:9e:
bc:09:51:ff:e3:b6:2a:66:70:ec:7f:d7:69:d8:9b:29:8d:85:
e2:e2:b0:cb:9f:c0:86:7c:3e:8a:6a:16:a0:d0:68:16:62:26:
34:22:63:13:d8:a3:76:a1:0b:80:af:5b:e4:1a:78:e2:b6:ef:
65:6d:e8:65:0e:20:60:8d:ec:59:62:77:b2:b8:05:cb:02:66:
42:53:3a:1d:cd:25:5a:3d:85:b3:d9:68:d9:a5:5b:65:63:e8:
8b:76:56:31:04:1c:03:a6:0f:ec:2d:20:77:57:a2:11:bb:38:
a6:20:f6:37:af:02:af:ef:78:63:6b:b7:31:e7:33:2c:3d:87:
07:24:82:f0:35:7d:b2:46:8d:eb:72:6d:bf:22:a6:ac:a1:e9:
4e:ed:52:c6:60:0e:0d:f6:b7:68:b7:e1:84:19:37:9e:19:b2:
63:d1:60:4b:fc:4e:28:47:61:f0:ea:fd:f7:0a:b5:4a:88:d4:
fb:7c:8e:1e:5c:6f:12:1a:7b:e0:3d:9d:f5:79:f8:fd:ab:c3:
08:65:db:1b:06:c3:82:f2:b7:c5:fd:20:11:2c:85:10:d9:aa:
46:8d:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:07 2026 by rpki-client