
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
File: 9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft (raw, json)
Hash identifier: r1c33tP+6F8k85m7kBoYmhBKMEEegVO6goLXvhVUOw8=
Subject key identifier: 57:DD:5E:CD:9C:97:7A:39:F7:2E:43:51:05:8C:15:A3:E2:22:AA:8D
Authority key identifier: F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C
Certificate issuer: /CN=A9136067/serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
Manifest number: 4F
Signing time: Mon 11 May 2026 08:25:35 +0000
Manifest this update: Mon 11 May 2026 08:25:34 +0000
Manifest next update: Mon 18 May 2026 08:25:34 +0000
Files and hashes: 1: 9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl (hash: 0CvXh0NcwOH2NIxt0OqgHyiszfsNaRj8ASvTvjPniJw=)
2: 2812D988D68111F09571D1A368D3641D.roa (hash: VKKHpjPTEvlkEGFu+dpzNhBb8en/BchDeWr6ImqXAAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl
rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136067, serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C
Validity
Not Before: May 11 08:25:34 2026 GMT
Not After : May 18 08:25:34 2026 GMT
Subject: CN=6a01927e-c883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:0e:3f:b5:92:45:a2:c8:d8:6e:cb:04:c9:
3d:08:9d:10:df:26:11:cb:c0:d5:ed:1f:fb:e9:de:
8b:10:06:e3:37:fc:75:28:9d:a0:4c:84:89:77:cc:
8a:ef:72:99:31:2e:8a:17:80:df:ab:c0:cf:d8:68:
ec:5b:94:8f:7a:dd:14:7b:66:73:f5:8c:60:84:78:
0e:fb:60:e2:af:b3:72:c8:a8:80:d7:80:13:aa:f0:
c7:08:6f:a6:46:c8:84:fa:06:2f:c6:06:2f:bb:0b:
f3:77:e2:ff:47:4d:75:7e:11:b2:dc:15:c2:6e:27:
24:c9:4a:c3:34:d3:cd:c6:4c:74:9c:99:5e:3e:8f:
ff:ce:30:05:34:53:14:5b:de:25:e0:42:7a:68:c7:
44:b0:c2:e5:74:22:75:96:f9:2b:8f:ff:d3:72:4b:
4a:2b:ce:5d:a6:00:ff:49:02:f6:c7:7c:3a:ff:c2:
26:d8:b4:e1:52:9f:f5:37:e1:1b:81:03:7c:7f:64:
47:2e:cb:9c:ec:8f:3d:5d:b9:d9:55:e9:6c:28:0b:
45:a4:4f:8a:22:04:5d:c6:80:a1:7d:39:ea:bf:b6:
bc:14:a1:39:ab:b4:20:b3:19:ae:2d:6a:46:3a:e5:
8a:e8:22:a2:f7:0d:09:6f:24:30:02:43:a5:d2:9e:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DD:5E:CD:9C:97:7A:39:F7:2E:43:51:05:8C:15:A3:E2:22:AA:8D
X509v3 Authority Key Identifier:
keyid:F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:d6:3b:43:dd:56:3e:60:6c:85:e6:f2:b4:14:39:23:72:e1:
0d:fb:c3:8f:84:f5:a9:2f:93:eb:e2:0d:9e:e6:c8:b6:9e:1d:
36:3e:3c:d3:70:ae:c6:43:2d:3a:b1:65:6d:dd:8c:96:b7:8a:
43:f5:eb:32:c6:4e:7d:b5:4a:8c:23:25:d8:d2:be:4b:0b:9c:
a4:0c:ff:fa:20:92:e1:36:1a:0a:ac:43:f4:1d:3c:8c:3b:b1:
4a:a5:46:6d:c3:cc:d5:56:59:f2:3b:cb:a9:fb:47:a8:93:2b:
a4:04:9d:96:64:2b:b8:f8:86:7a:83:25:3a:3c:80:b6:71:b5:
d4:b6:f7:8b:78:b9:34:6e:cd:54:86:09:ff:e2:f0:54:a6:52:
c3:28:e0:33:9a:5b:af:a8:72:1e:fd:4d:46:a9:38:24:44:1b:
e3:42:da:55:73:8e:73:f4:8a:8a:5f:a0:3c:6b:db:0e:3e:ff:
50:df:b0:d8:b4:9f:ed:8e:1d:e3:df:2f:70:a7:72:37:95:0f:
26:46:69:76:e6:b2:e3:2b:15:53:64:da:da:e7:30:70:6c:d0:
1c:30:2e:21:14:bb:ac:b2:48:41:82:d5:dd:fc:70:4e:f9:c0:
7b:36:03:8a:2f:47:3b:33:99:73:a1:2f:da:7b:34:0a:43:e5:
6f:aa:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:10 2026 by rpki-client