
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
File: -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json)
Hash identifier: aDOShF6M0nfxHf6wihph2ORgYWFxORl7JA8jeWG+fu8=
Subject key identifier: F7:D8:CC:69:39:59:68:6A:50:A7:D4:A8:CF:A3:FC:D6:69:6A:1D:89
Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
Certificate issuer: /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Certificate serial: 02FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
Manifest number: 02F6
Signing time: Wed 25 Mar 2026 00:56:03 +0000
Manifest this update: Wed 25 Mar 2026 00:56:03 +0000
Manifest next update: Wed 01 Apr 2026 00:56:03 +0000
Files and hashes: 1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: FZT0222Pthx/4rKw31q58sGL6oZCEUnUZP8PTIg/XW0=)
2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: EI6GzHfnkWqNaMVXOSJiD8mcwGEHnHoi3RAZSaS8pSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764 (0x2fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Validity
Not Before: Mar 25 00:56:03 2026 GMT
Not After : Apr 1 00:56:03 2026 GMT
Subject: CN=69c332a3-24b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:ed:da:84:18:df:c8:1f:13:3e:90:8b:ae:
48:a4:0b:7c:c0:9f:93:60:40:41:3d:9e:6d:cf:30:
44:ed:4a:77:5e:ef:e1:ba:3d:8d:ba:5e:89:19:8a:
29:36:33:2c:93:6a:44:78:18:f6:09:c0:fe:c1:89:
83:e5:91:6a:05:19:d1:06:34:07:b3:c0:bb:4a:9e:
76:c2:0f:76:4c:46:d5:21:1f:93:23:2e:1d:17:f2:
02:9a:69:2e:5a:2c:f0:41:98:6c:8d:21:05:5a:c8:
71:c1:96:06:5f:fb:b4:f8:24:c5:43:b7:f8:2b:4b:
4a:b7:10:49:26:3a:7f:06:3b:73:9d:92:1f:e8:c7:
2a:23:4d:b4:a5:ce:6f:5b:d8:79:9d:fa:03:81:5f:
7f:0b:40:0a:8e:40:ac:b2:75:77:bd:1f:81:8a:04:
ed:bb:5a:f2:1e:34:69:7b:ba:18:75:34:b1:62:6c:
b2:06:ff:cf:2e:80:56:82:14:b5:e1:1e:c3:16:96:
df:40:89:e3:bb:84:dd:73:fa:70:f7:1e:70:aa:4d:
25:2d:e9:ee:6a:af:60:64:62:29:e1:31:cc:5a:fd:
82:3a:3d:76:61:59:1e:a2:75:bc:b1:00:21:d1:56:
e6:37:9d:f1:72:be:f0:d2:20:68:90:3f:fd:0a:ce:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D8:CC:69:39:59:68:6A:50:A7:D4:A8:CF:A3:FC:D6:69:6A:1D:89
X509v3 Authority Key Identifier:
keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:e2:45:b1:0a:f1:9a:b9:86:d4:8d:32:7b:49:7f:77:7b:51:
48:88:51:8c:5f:ee:e3:b3:23:d3:dd:2b:ed:db:36:3a:84:ed:
92:ea:6f:db:fb:ba:64:13:e6:da:12:3f:39:9c:b7:3b:79:53:
d0:3f:27:23:26:c1:e4:17:fb:7a:ee:c0:b8:10:6c:81:85:65:
d4:ef:47:78:29:59:07:a8:cf:f4:42:ce:11:c5:35:02:cc:af:
39:80:a9:00:a9:fd:c5:e4:0c:e1:18:67:b5:05:b7:c9:62:11:
31:d4:3a:cc:66:00:66:54:2d:fa:a1:8d:35:c5:e7:18:ab:67:
26:89:7d:f8:ed:ad:c8:5f:61:fe:60:38:bc:60:a3:8b:1e:b2:
06:c9:12:70:39:33:de:61:0d:45:98:54:9e:31:38:80:d7:8d:
86:bc:6c:06:d8:0c:2f:7c:ad:b7:16:30:a5:83:31:28:7d:3e:
49:5b:33:2e:a9:95:7a:30:69:cb:1a:c5:0a:4f:a5:69:4c:7d:
db:6d:e3:5b:d1:e1:ef:b7:44:3e:4c:de:41:23:6f:a0:cc:ed:
c0:b5:a6:6e:12:24:7b:f0:9c:45:2d:e0:8c:21:03:c9:b4:98:
18:d1:e9:ed:cd:a7:97:54:95:30:c0:60:a9:bc:52:d7:b3:07:
d1:93:12:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:31 2026 by rpki-client