
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
File: -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json)
Hash identifier: 9cAMsjLXQ2888OcTdHsST4bXFwxhBN1VOsIHN7KOkG8=
Subject key identifier: 7F:A0:BA:4C:FC:12:4B:88:EA:B4:6B:56:00:DF:4A:86:B0:F4:47:1F
Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
Certificate issuer: /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Certificate serial: 0315
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
Manifest number: 030F
Signing time: Wed 13 May 2026 01:20:23 +0000
Manifest this update: Wed 13 May 2026 01:20:22 +0000
Manifest next update: Wed 20 May 2026 01:20:22 +0000
Files and hashes: 1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: 1ne2wXTxN3Ey+qRoV/fZyna/Is1FW7I62O8bF5xbRI0=)
2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: EI6GzHfnkWqNaMVXOSJiD8mcwGEHnHoi3RAZSaS8pSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Validity
Not Before: May 13 01:20:22 2026 GMT
Not After : May 20 01:20:22 2026 GMT
Subject: CN=6a03d1d6-f90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:c1:6d:63:29:0d:6f:67:5f:ed:9c:3e:50:
04:ce:a6:9a:2a:a7:c6:8b:bb:dc:48:b3:74:53:a0:
44:4e:79:e3:e0:5a:1c:d8:4c:0a:21:38:24:ba:f1:
ee:07:fd:33:13:33:9d:6e:69:a1:1e:77:98:7c:b4:
a8:20:89:17:4d:e7:25:78:52:ec:a7:0e:f1:07:2d:
09:2d:4d:cc:64:fe:5b:6e:b3:d7:a8:4d:27:a8:34:
8f:68:85:65:b3:7b:f8:b7:41:9f:3e:dc:74:5b:37:
da:d7:4a:ce:61:fa:d7:d8:bd:dc:82:cb:19:68:57:
05:f0:5c:4e:30:e6:2b:1e:15:ab:bb:cf:35:5f:88:
38:cd:48:8b:52:4b:8d:36:48:8c:c7:6e:c8:56:61:
fe:b4:2f:00:97:6d:0e:02:82:c7:10:26:49:75:cd:
c7:5a:57:9b:70:b8:db:6f:9e:a9:a8:5c:98:bf:34:
9e:89:33:e7:f3:22:6b:c7:44:fa:ef:5b:6a:17:7c:
c9:01:8a:0e:e2:29:87:f4:6e:d8:c6:67:99:a2:ef:
65:b6:a0:c1:be:d5:18:a4:a5:a2:c4:12:61:e1:b7:
7f:db:49:aa:b2:c8:f5:70:7d:96:27:89:f0:04:df:
48:c5:4a:3e:f3:f8:3d:97:31:26:6b:12:38:b4:df:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A0:BA:4C:FC:12:4B:88:EA:B4:6B:56:00:DF:4A:86:B0:F4:47:1F
X509v3 Authority Key Identifier:
keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:cd:5d:33:fb:32:69:24:2a:a1:4f:3b:24:f8:65:0a:08:28:
0d:7a:43:7d:d1:e4:39:7d:bc:28:02:4e:26:5d:22:cb:73:68:
38:09:8a:c3:18:66:d4:88:00:ee:e5:79:6d:92:01:db:e7:ea:
ac:c0:97:3d:e0:e9:14:51:be:87:06:e9:67:2e:6a:8d:35:f7:
d6:31:5e:c5:30:fc:82:97:f1:ed:0f:1f:de:7e:31:a1:6d:9e:
d3:d7:3d:2f:65:ad:bb:15:6c:4f:f6:45:af:a5:f4:4c:ad:fd:
59:74:4e:bb:21:8e:c0:9c:56:44:bf:fc:85:e3:88:c3:23:29:
87:91:f0:e1:11:6d:a5:d3:d5:2a:e3:cc:70:96:37:8b:f7:92:
5c:cf:cd:79:0e:6a:3b:2f:91:07:85:ad:67:1b:31:b2:45:bf:
59:eb:60:f3:72:10:52:98:2a:45:70:a8:85:66:5e:d7:b3:43:
20:95:ff:5a:8a:94:be:14:83:98:a8:64:9e:1f:bd:f7:21:6d:
21:41:ea:f3:4b:e0:f7:fc:3a:b5:c7:90:b7:6c:3e:c9:d1:c1:
62:54:82:63:96:cd:6c:7e:dd:f1:3f:85:6d:e7:9a:ca:01:fb:
1e:91:4d:85:90:89:2f:7d:c7:97:4b:6c:57:d2:c2:1a:65:80:
53:e1:73:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:56 2026 by rpki-client