
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
File: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json)
Hash identifier: raKfu7kO8wuxsKw6mLz5y7YzkVJuSMYUtZXQxG2BYMk=
Subject key identifier: B6:B8:7D:44:42:7B:01:C1:DD:CE:5C:CC:C5:2B:19:CB:E3:89:31:17
Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
Certificate issuer: /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Certificate serial: 049D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
Manifest number: 0496
Signing time: Tue 24 Mar 2026 23:39:34 +0000
Manifest this update: Tue 24 Mar 2026 23:39:33 +0000
Manifest next update: Tue 31 Mar 2026 23:39:33 +0000
Files and hashes: 1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: 8n7XQnkbl/D4zR6CadwZfAkRTgaQVqnFB1yvanRUPD8=)
2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: z7KyT6HnbJ6UMz7BQC748vvaSmuWe8c14BvsShCGtbY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Validity
Not Before: Mar 24 23:39:33 2026 GMT
Not After : Mar 31 23:39:33 2026 GMT
Subject: CN=69c320b6-23dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:14:97:bc:83:a1:d0:65:15:fa:fc:c7:76:
92:c5:5a:b1:5b:59:c4:26:74:ab:a6:bc:28:fc:17:
3a:b5:32:55:74:b5:d4:01:ac:70:a4:3a:bf:76:9a:
37:d8:bc:18:95:6e:4b:57:f2:e1:25:11:e1:57:a9:
74:df:3a:17:1a:79:b7:e1:f6:72:a0:b6:2c:ec:ed:
aa:9a:69:f5:62:eb:cc:f7:c3:b3:e9:1c:8a:71:e6:
6c:37:e6:9c:8b:c7:1c:37:54:e2:69:3f:8b:11:0c:
cb:b2:25:70:21:de:04:16:bc:fc:b8:51:1a:95:ff:
71:f8:88:8a:30:ad:ee:3a:52:b8:b7:94:0c:fb:1b:
69:2a:86:f9:65:2c:f9:4a:ab:74:7d:b3:0b:69:11:
ec:e0:d1:1f:b7:69:82:51:fe:5a:3e:fb:69:59:99:
f3:05:e5:48:41:c0:b0:95:d0:12:2f:8f:70:f6:90:
64:34:28:c7:11:b5:17:7e:13:4a:bd:3b:9c:90:f2:
15:4d:80:d2:ba:34:00:f9:8a:a8:24:29:64:1b:be:
26:eb:8a:f1:51:7c:f9:66:dd:00:87:cc:ff:47:1b:
38:45:27:40:30:c2:79:12:2d:44:6d:f2:db:ed:2b:
9e:38:07:97:a1:f4:22:82:4e:f9:b4:41:6f:1a:38:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B8:7D:44:42:7B:01:C1:DD:CE:5C:CC:C5:2B:19:CB:E3:89:31:17
X509v3 Authority Key Identifier:
keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:a4:4b:8d:52:f7:dc:6b:0a:0f:ab:4e:15:1b:6a:29:10:b7:
99:6b:83:a2:32:e3:aa:56:be:20:13:de:18:18:12:af:6d:79:
c1:b4:45:87:fa:f5:f6:e2:dd:6b:5f:c2:be:98:f7:ed:66:af:
75:3d:8b:2a:44:9f:cb:63:8b:68:5a:84:f2:dc:ad:23:65:98:
19:65:1d:e9:7c:7b:a5:57:a3:55:c9:52:63:28:d3:df:96:b8:
9d:2b:3d:12:01:94:af:2c:bf:e4:a5:df:7d:3f:9c:ee:ae:50:
5b:1c:11:4c:d9:8c:b1:d2:42:d7:87:88:b0:1c:53:e9:31:22:
e5:d2:00:cd:c5:92:8e:56:bf:01:92:cc:27:ba:23:01:09:cd:
7b:54:27:a8:33:20:16:5a:a0:b2:18:04:30:1b:2b:a2:7b:21:
ee:92:88:e1:18:97:06:1c:3c:fb:1e:a4:53:cd:47:c8:2f:ea:
51:b8:e0:e2:11:8f:62:82:ee:66:41:31:59:7c:93:73:f8:f6:
7a:f3:18:9f:48:2e:9a:03:6a:bb:b6:8b:16:3e:f6:d1:c1:ea:
94:1d:23:e0:d7:90:c2:bb:e4:48:c7:67:aa:6d:0a:a5:82:f2:
b9:a7:c6:45:6f:ad:67:06:2e:b0:60:61:b1:99:18:97:ad:64:
07:aa:07:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:46 2026 by rpki-client