
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
File: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json)
Hash identifier: u1x4ioVUW6jw0Rrvd8j7T4FGPLL9VpO1rTZ6lZWPMCc=
Subject key identifier: 8F:39:F9:91:F6:26:BB:19:90:13:5E:5B:6E:43:54:9E:5B:3A:B3:C8
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Certificate issuer: /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial: 08D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
Manifest number: 08C6
Signing time: Tue 24 Mar 2026 20:11:59 +0000
Manifest this update: Tue 24 Mar 2026 20:11:59 +0000
Manifest next update: Tue 31 Mar 2026 20:11:59 +0000
Files and hashes: 1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: 7YxNGsOlw7AblcnXQVmarcWC/BzccrW0THUa6wovT+Y=)
2: 56AD05C0D8F711F09DAB56B975D3641D.roa (hash: q89Jg/7hPlysCgYbH3zg0CvpgeLJQkUN21WMNq0ChPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Validity
Not Before: Mar 24 20:11:59 2026 GMT
Not After : Mar 31 20:11:59 2026 GMT
Subject: CN=69c2f00f-c03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:96:78:0f:8a:33:0e:95:ae:01:c5:ed:4e:
51:ef:1b:d9:65:17:5a:23:cc:a4:2f:62:f5:2e:e3:
c6:78:c6:8e:6d:6d:f8:85:e1:f3:ee:09:e2:02:50:
66:c1:2a:ea:1e:f6:9c:7c:97:4f:e8:5d:77:19:51:
46:2c:4e:78:52:85:a5:af:93:35:97:28:63:b5:bf:
79:b5:30:83:44:78:53:db:3e:5c:a2:4d:6a:97:b9:
06:a0:b7:04:f6:02:7f:5a:92:7a:04:f7:58:24:6b:
90:e9:00:7d:7d:75:4e:19:06:5e:71:33:c2:8e:5d:
53:af:c3:48:f7:93:e0:71:14:00:e7:3c:11:90:3b:
bb:70:3d:cc:a1:2d:56:0b:9e:db:60:90:c1:bb:3f:
b7:80:94:5a:42:dc:23:bf:f7:78:64:0d:fb:73:b8:
6e:c2:0b:18:87:ed:e9:b6:28:93:91:93:1c:32:44:
6b:16:91:ef:83:85:1e:95:d2:8b:36:a5:68:cf:97:
bf:51:89:6c:f3:c6:9f:e4:59:16:b6:d1:45:5b:6a:
b2:a3:b5:4d:8f:64:e2:f5:1e:8c:c1:e5:b5:84:f6:
cd:f4:c4:5d:96:f4:2e:71:2b:d5:a9:a8:6e:78:d2:
e3:93:43:37:61:7a:9e:3a:73:ca:7e:38:e1:a7:18:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:39:F9:91:F6:26:BB:19:90:13:5E:5B:6E:43:54:9E:5B:3A:B3:C8
X509v3 Authority Key Identifier:
keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:e9:b6:73:8c:14:25:d0:bc:cd:7d:b2:88:41:f7:0b:6c:10:
97:3b:c9:37:9e:c9:51:d0:99:ef:b5:d0:2b:95:b9:f3:cb:3f:
9c:50:8e:1c:8f:42:4d:ff:1e:d1:e7:4b:11:59:f6:db:bf:e0:
e2:b5:98:d0:13:00:ba:f0:3a:76:f8:dd:30:18:64:d2:4d:e9:
68:34:9c:d2:36:be:18:8b:89:f5:78:af:4b:bf:11:18:04:5a:
8a:54:04:45:9f:61:f9:48:5c:5c:90:6c:a7:6f:9f:a9:98:4a:
c7:06:20:e5:5c:16:7b:c7:91:47:2d:f7:35:b2:39:63:5a:f9:
f7:25:42:28:95:e9:47:62:73:05:cd:66:68:f2:dd:5c:da:03:
c2:e7:2f:61:8d:7d:dc:8b:88:1d:f2:5d:44:b9:b3:c3:a4:44:
a7:03:b5:95:08:dc:21:b4:2b:ff:d6:cd:43:8f:19:3f:1d:30:
71:15:b5:48:91:d5:c4:ca:bd:6d:45:31:f6:a1:4e:b1:ff:20:
2e:ab:3b:3d:73:25:0f:d3:6b:a4:c5:ed:b5:d7:b0:3a:33:bc:
47:d6:09:c7:84:be:de:e2:08:0c:07:3a:62:b0:50:c7:f2:00:
6c:b1:5d:f0:47:50:2e:18:33:15:00:c5:88:b0:01:5f:51:c5:
07:d6:d6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:20 2026 by rpki-client