
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
File: 9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft (raw, json)
Hash identifier: Oy8Qler5Lk2xoAdifQBKz23/Ksj4mblk9Do/VQb56ds=
Subject key identifier: 32:38:6A:10:D5:98:2E:E3:BD:FA:68:E6:48:45:A0:30:9A:87:A3:B3
Authority key identifier: F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C
Certificate issuer: /CN=A9136067/serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
Manifest number: 37
Signing time: Wed 25 Mar 2026 07:45:07 +0000
Manifest this update: Wed 25 Mar 2026 07:45:07 +0000
Manifest next update: Wed 01 Apr 2026 07:45:07 +0000
Files and hashes: 1: 9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl (hash: CP0CxgSSS4utNHOgEOFb7YRbIPAcAPPK3kn3bZPBQnM=)
2: 2812D988D68111F09571D1A368D3641D.roa (hash: VKKHpjPTEvlkEGFu+dpzNhBb8en/BchDeWr6ImqXAAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl
rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136067, serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C
Validity
Not Before: Mar 25 07:45:07 2026 GMT
Not After : Apr 1 07:45:07 2026 GMT
Subject: CN=69c39283-9c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:3e:0c:41:81:82:04:79:99:c4:26:af:ab:
2a:5e:18:cc:14:fd:08:8b:ba:ed:28:99:2a:22:fc:
db:ec:95:11:19:d8:bf:ad:92:7b:bd:85:f0:f3:57:
12:dd:3f:0a:e5:95:90:ce:2e:1b:9d:df:5e:2c:67:
20:68:42:2d:3a:4d:4a:81:7c:1a:79:b1:4d:5b:e6:
50:b3:d2:7c:c1:58:31:40:e2:fa:9d:77:82:af:53:
d9:b8:6f:ae:ca:30:b8:d2:d9:52:4d:39:dd:c5:c0:
e0:7b:1f:87:67:e0:01:3d:c6:0d:1e:17:02:ee:d2:
ee:59:3d:6b:28:88:5c:88:1c:d5:62:21:f0:ca:d0:
bc:90:b2:14:53:f6:74:20:00:0b:fb:45:f5:bd:16:
f8:17:67:8c:a9:55:a9:c6:57:3d:69:7e:21:48:b3:
3d:13:65:2f:20:ce:5e:ed:b8:27:9b:ce:f4:8d:bd:
9b:df:c8:b5:97:27:e6:c6:50:09:3d:48:83:b6:05:
ab:9e:6f:f8:5b:91:7d:86:30:d0:e3:96:50:4e:1b:
2a:4b:05:86:7f:7b:b1:48:bb:24:bd:8a:bf:fa:13:
51:a1:6f:c9:08:46:ed:3c:d1:ee:1e:9c:d1:da:9c:
5d:56:c8:26:d8:f4:f1:bb:bd:95:55:a9:7c:07:c0:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:38:6A:10:D5:98:2E:E3:BD:FA:68:E6:48:45:A0:30:9A:87:A3:B3
X509v3 Authority Key Identifier:
keyid:F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:72:b3:79:67:6d:c7:17:ee:7b:d3:1e:75:16:77:5a:37:67:
86:db:71:93:fd:09:ce:6c:51:f7:cc:05:c2:e8:bc:bb:58:f7:
56:6a:86:2b:b1:e0:18:9b:bb:12:7d:6d:7f:8b:17:f0:1a:c2:
a2:08:2f:51:3f:eb:47:c0:a5:05:da:c7:62:3c:91:1c:63:d2:
ec:17:b2:44:03:53:4d:83:15:76:cd:de:8c:cd:71:d1:03:22:
34:26:f4:6b:33:df:01:23:2b:89:8e:2a:b0:ed:88:a4:f3:67:
95:df:c7:66:45:24:b4:20:fe:78:fc:a9:28:ee:c6:8f:2c:ad:
19:a6:4e:9a:47:e8:22:71:74:58:71:8d:f6:6a:fe:db:3f:bb:
56:e9:fe:56:66:88:84:75:57:be:9a:37:d5:76:9f:f7:92:80:
ac:bb:f5:ea:65:41:f3:af:42:da:ef:4f:d5:ee:e5:0a:9d:21:
59:ca:d9:ec:34:01:7a:16:28:67:79:8c:cf:a2:96:27:45:45:
db:a3:1d:3c:af:dd:22:15:23:c9:56:ea:a9:a9:db:0e:70:bd:
37:3e:de:39:9d:4b:f6:ad:61:18:9e:61:39:7f:e7:42:1b:0b:
3e:3d:69:25:e8:c1:a3:67:88:09:b0:76:7f:14:76:cc:71:3d:
b6:40:9e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:21:59 2026 by rpki-client