
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json)
Hash identifier: gE9c1d5VPnX1WoR+3Sersr2h6/ltboUjhnD3A44mMsA=
Subject key identifier: 3B:BE:8E:86:14:5B:0F:8D:D6:76:4D:DB:25:3F:95:B3:69:20:7D:94
Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
Manifest number: 0197
Signing time: Wed 25 Mar 2026 03:38:10 +0000
Manifest this update: Wed 25 Mar 2026 03:38:09 +0000
Manifest next update: Wed 01 Apr 2026 03:38:09 +0000
Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: YJ8w+fnOL+sFHbnsIf0gtkx8UPHUKZH4XGiVTLkcYHQ=)
2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: kEA6yeUhDISU7WpJDe7H86w819sEogR4lALDsAB0ROU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Validity
Not Before: Mar 25 03:38:09 2026 GMT
Not After : Apr 1 03:38:09 2026 GMT
Subject: CN=69c358a1-01e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:19:c2:ff:e3:2d:18:30:21:6e:46:65:8d:68:
61:fa:87:9c:91:4b:da:c9:14:d8:00:c3:8c:77:e5:
de:28:45:01:5a:0f:92:8a:d5:86:49:ac:a5:06:37:
48:81:9e:d9:5e:e3:ee:96:b8:9a:af:cf:4c:75:fb:
c9:b3:3f:ff:cd:12:bc:49:f1:bc:44:cd:ca:ff:61:
3a:2d:d0:f3:48:67:0c:6e:d2:3a:ff:59:bf:0c:75:
26:30:1c:aa:da:31:9e:a2:6e:12:f9:01:55:c7:4a:
78:f1:43:4e:fb:28:6f:f7:42:c7:51:b9:dd:f0:a9:
9c:81:09:1a:51:22:34:ce:9e:17:83:27:cc:dd:e6:
31:c9:8b:c0:d4:08:93:1a:10:2c:56:04:05:e7:89:
7b:80:ec:c6:af:16:cd:b5:e9:56:3e:b6:18:62:62:
c8:e7:6e:af:d4:6c:3e:85:c7:65:c4:7b:31:78:c2:
37:0a:f0:55:42:4f:2f:f3:91:fc:49:07:e1:8f:4a:
23:a3:49:0a:a4:4b:f4:1a:37:7d:ff:36:69:3b:46:
47:e4:63:24:fe:de:5b:97:12:c1:85:d2:43:9a:ab:
60:27:b5:1e:65:03:c3:24:a4:93:a9:5b:eb:a9:ea:
68:76:96:22:2b:c8:2c:61:c9:01:59:2f:1b:58:32:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BE:8E:86:14:5B:0F:8D:D6:76:4D:DB:25:3F:95:B3:69:20:7D:94
X509v3 Authority Key Identifier:
keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d2:9b:33:b8:08:e1:4b:18:18:c0:db:0c:cd:7e:60:db:de:
3c:c6:35:60:76:29:53:c7:96:8e:ff:c0:85:23:0a:26:52:2c:
c1:54:5f:a2:76:84:df:08:e9:9f:e7:7a:f5:bc:a4:de:f0:6b:
92:63:eb:64:e3:5f:12:df:7d:67:e3:ea:b4:c0:b6:e7:b5:86:
64:7c:8b:86:7d:b5:df:94:67:4f:97:c4:e6:d9:04:bd:2b:d4:
cc:ee:60:9f:bf:27:d0:c8:8a:e3:3a:da:cc:80:2e:e7:ac:d6:
6e:36:43:92:49:e3:b3:59:ab:41:70:5b:46:74:fa:1b:56:bb:
90:3d:42:5a:f2:4e:f3:67:8f:dd:7e:7d:0e:1d:2e:63:aa:da:
d4:c7:07:f8:72:8c:04:f5:26:a0:b8:3f:b5:30:8f:ba:96:5d:
2b:e7:96:ce:ba:9f:07:a4:4a:f8:a2:93:21:63:40:65:2b:39:
57:43:cc:10:7c:a2:7a:5a:18:93:8c:c9:16:69:d2:2c:34:66:
a7:bf:35:e2:3c:fb:08:72:52:2f:42:22:9f:a1:e3:3a:c9:65:
a9:4f:da:7e:a5:1c:e7:4b:a3:33:e5:dd:95:a6:1a:fc:4b:bc:
cf:b8:09:3e:c7:8d:0c:e1:71:8a:07:4e:46:f6:a3:1e:6e:c2:
14:7d:8c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:36 2026 by rpki-client