
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json)
Hash identifier: SMW93YnqbtLZXCxaNH7cXaLIqs95J1s6L7rc/ypbjYE=
Subject key identifier: 8F:47:B6:CA:38:98:ED:E0:BE:00:FA:37:1A:01:5C:03:A3:FF:8B:00
Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Certificate serial: 081B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
Manifest number: 0812
Signing time: Tue 24 Mar 2026 15:52:22 +0000
Manifest this update: Tue 24 Mar 2026 15:52:21 +0000
Manifest next update: Tue 31 Mar 2026 15:52:21 +0000
Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: UKcOK95iFddF5F/TeP1R8ep1dBy8yOIKdx0bUoRfcP0=)
2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: MdKj745wIJAm1a/+fD8XVUD4Xm85NkWf5HLxKsTPL9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2075 (0x81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Validity
Not Before: Mar 24 15:52:21 2026 GMT
Not After : Mar 31 15:52:21 2026 GMT
Subject: CN=69c2b336-604f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:c6:28:53:75:f1:e2:de:05:c1:6f:1b:24:
ad:26:70:4e:ca:e0:4a:9c:20:75:cc:85:c9:8d:40:
9f:58:2e:07:25:ac:d7:37:d5:1a:e1:96:56:5b:dc:
11:d4:e2:4a:72:95:18:fc:b7:f2:e9:41:e8:b8:27:
81:dc:da:bc:3e:0a:f5:00:fc:37:87:31:39:72:bf:
38:45:ab:81:d4:db:4f:7a:30:b5:19:69:15:0b:df:
59:64:91:c7:20:4f:b5:a9:24:5a:2b:f0:36:04:04:
35:d7:44:1e:f8:20:f3:e0:d9:af:7b:12:3c:b3:f9:
a1:52:94:a9:6c:dd:18:4b:1f:40:fd:ce:3c:e0:66:
9a:06:f4:78:f6:fb:a1:0a:d6:c7:ba:0d:e2:46:f5:
9e:68:e2:e6:a9:0e:fc:95:7c:c4:67:2b:08:9e:8c:
38:cd:5c:64:47:33:02:b4:44:95:90:99:6b:5d:06:
89:18:a7:af:25:d5:32:6c:02:1d:d2:ab:96:f3:ee:
54:3c:aa:20:22:99:80:91:b7:bd:73:19:12:a6:44:
fb:9b:78:36:54:e1:8c:0b:78:75:39:69:7f:6a:5d:
ad:61:cb:b5:87:7d:c6:08:08:f8:c2:97:af:f8:a0:
6d:90:e3:71:7b:dc:46:fb:37:1a:61:a0:cd:cc:a2:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:B6:CA:38:98:ED:E0:BE:00:FA:37:1A:01:5C:03:A3:FF:8B:00
X509v3 Authority Key Identifier:
keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:13:79:5c:19:07:7a:89:8f:8f:61:6e:ee:f1:2e:31:96:6a:
7c:a6:d6:0c:3f:44:b6:a4:49:ca:f6:77:e3:19:1e:ab:56:de:
87:21:0a:1e:57:84:b8:7f:22:ae:e8:fb:32:4d:d9:57:bf:dc:
2d:9f:a5:73:4e:5e:26:08:5b:8d:3f:77:96:76:90:2b:22:f6:
b9:9f:3d:39:f8:3c:aa:aa:fd:1f:7c:61:5d:94:bf:69:31:bb:
76:04:62:cb:a1:e3:4b:8a:10:1e:e2:16:58:53:0f:01:41:08:
af:5b:5f:53:39:10:a0:9a:2d:b0:97:4f:30:56:af:c6:9d:6a:
24:b7:e0:5f:b1:a3:bd:89:3f:77:f8:16:f2:d3:e3:93:e7:2f:
e7:d5:c9:79:64:01:db:e5:f0:73:e2:08:b3:87:26:e7:6e:72:
d5:b0:90:d0:a5:57:ca:c6:94:d9:40:67:f0:ab:5a:5c:e3:c9:
b5:7f:1d:75:06:94:9c:02:ae:0a:56:ad:2a:c7:13:e2:16:75:
4b:dd:8d:07:e6:77:41:a4:bf:a9:67:2d:08:46:51:f6:56:d4:
8f:6d:63:85:21:be:e6:52:44:09:77:05:f0:38:e6:79:b5:63:
5c:5d:d2:42:01:7f:e2:9e:5a:44:76:c8:f9:ed:1b:78:45:45:
2f:35:92:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNCRkYxMTAvBgNVBAUTKEFGNEEzNTQ0Qzc0QjMxN0E3QzMyNkFGMEU4MzkzQ0I5
RDUyNjIwMzIwHhcNMjYwMzI0MTU1MjIxWhcNMjYwMzMxMTU1MjIxWjAYMRYwFAYD
VQQDEw02OWMyYjMzNi02MDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn0DGKFN18eLeBcFvGyStJnBOyuBKnCB1zIXJjUCfWC4HJazXN9Ua4ZZWW9wR
1OJKcpUY/Lfy6UHouCeB3Nq8Pgr1APw3hzE5cr84RauB1NtPejC1GWkVC99ZZJHH
IE+1qSRaK/A2BAQ110Qe+CDz4NmvexI8s/mhUpSpbN0YSx9A/c484GaaBvR49vuh
CtbHug3iRvWeaOLmqQ78lXzEZysInow4zVxkRzMCtESVkJlrXQaJGKevJdUybAId
0quW8+5UPKogIpmAkbe9cxkSpkT7m3g2VOGMC3h1OWl/al2tYcu1h33GCAj4wpev
+KBtkONxe9xG+zcaYaDNzKIM5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI9Htso4
mO3gvgD6NxoBXAOj/4sAMB8GA1UdIwQYMBaAFK9KNUTHSzF6fDJq8Og5PLnVJiAy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi8wRTJFRjUzNDFB
NkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1YcDhNbXJ3NkRrOHVkVW1J
REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3IwbzFSTWRMTVhwOE1tcnc2RGs4dWRVbUlESS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0JGRi8wRTJFRjUzNDFBNkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1Y
cDhNbXJ3NkRrOHVkVW1JREkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYBN5XBkHeomPj2Fu7vEuMZZqfKbWDD9EtqRJyvZ34xkeq1behyEKHleEuH8i
ruj7Mk3ZV7/cLZ+lc05eJghbjT93lnaQKyL2uZ89Ofg8qqr9H3xhXZS/aTG7dgRi
y6HjS4oQHuIWWFMPAUEIr1tfUzkQoJotsJdPMFavxp1qJLfgX7GjvYk/d/gW8tPj
k+cv59XJeWQB2+Xwc+IIs4cm525y1bCQ0KVXysaU2UBn8KtaXOPJtX8ddQaUnAKu
ClatKscT4hZ1S92NB+Z3QaS/qWctCEZR9lbUj21jhSG+5lJECXcF8DjmebVjXF3S
QgF/4p5aRHbI+e0beEVFLzWS5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:30 2026 by rpki-client