
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json)
Hash identifier: 9A1YEIPlPFoGDo39iCpG/RscTxjHO2eR0FWUVJaa/8A=
Subject key identifier: 7A:5A:F8:2E:39:2C:EE:3D:0B:34:69:D2:83:0B:41:2F:2D:63:19:C6
Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Certificate serial: 0491
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
Manifest number: 048A
Signing time: Wed 13 May 2026 00:08:20 +0000
Manifest this update: Wed 13 May 2026 00:08:20 +0000
Manifest next update: Wed 20 May 2026 00:08:20 +0000
Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: aMh31mNm8Ia7AyKKangzh73PDuqYnCjvGoZr6TV0+/0=)
2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: d5iSZj62C8juxE8auMNyD5ksUnuDKMjscM3w2qSQY9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1169 (0x491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Validity
Not Before: May 13 00:08:20 2026 GMT
Not After : May 20 00:08:20 2026 GMT
Subject: CN=6a03c0f4-9926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:33:f0:71:5e:a4:18:e0:be:12:d4:d0:8c:
00:38:24:71:60:2d:5e:f0:ac:42:e8:e7:0f:69:6e:
5f:c9:47:0a:b5:45:40:c2:67:bf:56:bb:88:d8:45:
c2:6d:8e:a4:34:90:52:1f:0d:28:3c:2f:06:22:e2:
de:aa:79:cb:88:d1:ef:4e:1a:57:19:0e:b3:81:19:
ce:71:1a:02:4a:2d:bf:2c:5c:bd:66:89:db:87:61:
4e:5b:76:94:8b:7f:aa:af:41:85:6c:d2:6a:d1:52:
08:86:28:c7:0a:79:e1:d6:73:b9:33:f2:29:a3:65:
96:e7:0e:ec:72:e9:a9:95:3f:b8:24:3f:1c:98:b3:
95:8c:c5:f3:70:b5:10:1e:f0:21:89:af:4e:09:76:
21:8c:6a:39:b9:36:64:c8:65:86:c4:41:07:04:e6:
2e:13:52:40:ad:6b:47:50:a7:69:e0:d7:84:20:93:
d5:f2:d6:0b:ba:77:83:1c:7f:62:a2:5f:d9:d8:93:
6f:f9:5f:b0:ca:dc:4f:f4:0f:79:43:eb:6a:33:f6:
25:5e:47:a4:51:04:23:b7:f4:78:4d:bb:6c:22:18:
6a:b8:4b:40:f9:06:2c:db:04:78:62:bf:5b:b1:59:
09:2d:70:02:ff:e2:ba:1a:a9:ad:b9:e8:30:6b:7d:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5A:F8:2E:39:2C:EE:3D:0B:34:69:D2:83:0B:41:2F:2D:63:19:C6
X509v3 Authority Key Identifier:
keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:65:7e:64:ed:b4:7e:dc:ad:db:c5:53:0c:11:bc:2e:97:09:
91:29:60:c7:7e:c4:70:f1:bf:76:53:dc:cd:fd:fb:b3:eb:bd:
ce:6c:4a:97:3d:6f:1a:b6:bb:81:8e:bc:f6:f7:b3:ff:71:33:
4e:bc:f9:77:b8:f5:d8:20:ef:9a:9b:ac:23:b3:6b:7e:0e:a6:
03:91:1d:3d:d4:10:2f:43:68:26:32:2a:64:b3:67:e0:bc:c8:
5d:a7:6c:b4:17:6f:0b:e9:44:90:68:e1:22:2d:5f:c2:2a:34:
ab:db:72:e6:86:86:18:07:dc:55:eb:f2:e8:39:43:63:7d:11:
bb:00:bc:9f:39:fe:f6:89:52:8a:8a:08:41:bf:75:a6:aa:34:
38:73:b9:17:42:eb:4e:7f:c0:a0:32:b3:8c:04:b8:a2:b7:10:
39:11:7d:d8:d6:e7:8c:8b:4e:23:9b:2a:56:12:07:c9:9d:3a:
a1:68:7b:a0:64:c0:0d:53:92:49:18:32:1c:3e:10:e7:23:9d:
56:73:13:0d:96:07:93:4f:b8:f4:89:e6:31:3f:8a:95:21:ee:
9f:57:bf:32:1e:10:9d:c7:95:65:5e:71:5f:f7:e5:80:c8:ce:
f6:aa:a1:4b:75:0f:71:f2:77:da:43:77:79:fc:1a:e9:ae:74:
1d:34:07:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx
MjY2OUUyMzIwHhcNMjYwNTEzMDAwODIwWhcNMjYwNTIwMDAwODIwWjAYMRYwFAYD
VQQDEw02YTAzYzBmNC05OTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9Iz8HFepBjgvhLU0IwAOCRxYC1e8KxC6OcPaW5fyUcKtUVAwme/VruI2EXC
bY6kNJBSHw0oPC8GIuLeqnnLiNHvThpXGQ6zgRnOcRoCSi2/LFy9Zonbh2FOW3aU
i3+qr0GFbNJq0VIIhijHCnnh1nO5M/Ipo2WW5w7scumplT+4JD8cmLOVjMXzcLUQ
HvAhia9OCXYhjGo5uTZkyGWGxEEHBOYuE1JArWtHUKdp4NeEIJPV8tYLuneDHH9i
ol/Z2JNv+V+wytxP9A95Q+tqM/YlXkekUQQjt/R4TbtsIhhquEtA+QYs2wR4Yr9b
sVkJLXAC/+K6Gqmtuegwa304LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHpa+C45
LO49CzRp0oMLQS8tYxnGMB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0
QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk
clVaNTRPZzVxTndTWnA0akkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe2V+ZO20ftyt28VTDBG8LpcJkSlgx37EcPG/dlPczf37s+u9zmxKlz1vGra7
gY689vez/3EzTrz5d7j12CDvmpusI7Nrfg6mA5EdPdQQL0NoJjIqZLNn4LzIXads
tBdvC+lEkGjhIi1fwio0q9ty5oaGGAfcVevy6DlDY30RuwC8nzn+9olSiooIQb91
pqo0OHO5F0LrTn/AoDKzjAS4orcQORF92NbnjItOI5sqVhIHyZ06oWh7oGTADVOS
SRgyHD4Q5yOdVnMTDZYHk0+49InmMT+KlSHun1e/Mh4QnceVZV5xX/flgMjO9qqh
S3UPcfJ32kN3efwa6a50HTQH2w==
-----END CERTIFICATE-----
Generated at Wed May 13 11:48:48 2026 by rpki-client