
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
File: 0MwJjruW320cXCjum1Xwqbgp_ak.mft (raw, json)
Hash identifier: kug8oE2KUWNXq0KY5IiaczbV2y7CqSo3qI5j9renS3o=
Subject key identifier: D7:7C:10:AA:A3:32:B9:0F:FB:26:0A:46:22:10:0B:48:DD:68:54:B4
Authority key identifier: D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
Certificate issuer: /CN=A9142187/serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
Manifest number: 5B
Signing time: Wed 13 May 2026 08:16:32 +0000
Manifest this update: Wed 13 May 2026 08:16:31 +0000
Manifest next update: Wed 20 May 2026 08:16:31 +0000
Files and hashes: 1: 0MwJjruW320cXCjum1Xwqbgp_ak.crl (hash: VsE8/DXQB72y1Z5AeGIEp7fIwtWgkb5ygxTYamHFIzA=)
2: CCDDC90CCA5911F0B5ABC06CC4F9AE02.roa (hash: pzoy5b4jAK7WNQHs94s/PsJ8rZ83uQ8ezld7Xwjun4g=)
3: 26CA159E0BB711F1A64B03C6263D8C67.roa (hash: P5tfx0ynD93bH16mM9zmJmGEUghyGxe1+aGIlNRSAJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142187, serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Validity
Not Before: May 13 08:16:31 2026 GMT
Not After : May 20 08:16:31 2026 GMT
Subject: CN=6a04335f-3ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:96:6e:d3:7b:cf:f6:98:21:ac:23:e9:eb:
ec:e3:27:d3:eb:a8:cb:8c:b4:5c:c1:58:58:81:c8:
b0:2f:e2:82:2b:22:fe:be:5b:76:3b:62:f3:33:e9:
b9:f9:74:87:cd:af:56:d5:3f:d7:7f:95:74:8c:fd:
64:a7:8d:0c:18:46:32:8b:39:30:53:77:5d:e6:4b:
db:fe:c7:12:8f:b7:81:26:8d:c7:27:86:ac:f7:13:
76:a3:10:50:d4:93:0a:c2:e0:8e:8d:98:7d:9e:81:
3b:77:08:4a:4e:cc:e4:b5:f7:f2:bd:58:39:d9:2e:
cc:4d:a4:ff:5f:77:3c:6d:22:90:5e:43:7f:92:ba:
62:14:9f:27:ad:e3:33:99:8d:c7:cb:ae:92:4c:b1:
49:03:7b:73:b7:91:51:85:be:4c:69:2a:fd:89:ee:
f3:a4:55:31:5a:c8:0c:dc:7a:38:50:a9:01:70:6b:
40:71:dd:46:e4:98:c2:a9:ef:5f:24:ea:a5:45:bd:
9c:4b:a0:58:c9:35:7d:6b:62:f7:bf:5b:2b:79:e6:
d6:fd:71:1d:d6:b5:be:3c:fd:76:2f:08:1c:88:1a:
99:70:56:91:e4:d2:89:d9:ba:e6:48:52:9c:e0:8f:
3d:6a:26:4e:a9:46:53:1f:ea:02:f4:b2:77:11:1d:
92:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:10:AA:A3:32:B9:0F:FB:26:0A:46:22:10:0B:48:DD:68:54:B4
X509v3 Authority Key Identifier:
keyid:D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:3c:0a:ca:2d:f4:9d:cf:0e:06:62:52:71:d7:4d:64:dd:ed:
23:85:7a:a6:df:26:a0:01:4b:a8:42:23:0e:27:9e:42:8f:2c:
8c:8a:e7:69:59:84:f3:ed:aa:e2:89:eb:98:93:d0:ee:cb:13:
9f:2a:d7:0f:8c:b3:e2:0b:55:4a:00:8c:6a:41:80:63:4c:65:
85:e5:eb:fd:bc:5f:32:50:b2:4f:3e:38:65:98:42:08:77:c6:
a6:38:e1:07:2e:a0:38:4d:88:d3:86:7d:b8:4e:20:49:94:1a:
d3:40:af:17:e3:83:d4:ce:96:4f:e1:31:e4:94:ba:5e:3b:e8:
75:08:c2:d3:43:d1:75:b7:3a:78:b0:3e:8f:37:d1:c8:07:dc:
a5:b3:ce:10:6e:f6:1c:bc:c0:de:c2:91:c7:3e:26:ea:7f:64:
65:87:8c:5b:3c:a3:e9:25:55:01:55:ff:4b:aa:d0:90:cd:f3:
ad:c4:9d:e1:69:b9:1d:d0:6d:d5:ef:dc:29:28:12:13:5b:dd:
4b:31:b2:6b:1c:5b:12:49:6e:d2:27:73:2d:1f:78:f6:64:cc:
00:fb:bb:dd:9c:5d:4e:49:10:b8:b2:d7:f4:cf:5b:25:8c:0a:
02:a2:4d:7d:af:f6:00:42:bf:8b:59:e7:b1:63:36:47:ef:8d:
a0:35:e3:ae
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MjE4NzExMC8GA1UEBRMoRDBDQzA5OEVCQjk2REY2RDFDNUMyOEVFOUI1NUYwQTlC
ODI5RkRBOTAeFw0yNjA1MTMwODE2MzFaFw0yNjA1MjAwODE2MzFaMBgxFjAUBgNV
BAMTDTZhMDQzMzVmLTNjZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnXpZu03vP9pghrCPp6+zjJ9PrqMuMtFzBWFiByLAv4oIrIv6+W3Y7YvMz6bn5
dIfNr1bVP9d/lXSM/WSnjQwYRjKLOTBTd13mS9v+xxKPt4Emjccnhqz3E3ajEFDU
kwrC4I6NmH2egTt3CEpOzOS19/K9WDnZLsxNpP9fdzxtIpBeQ3+SumIUnyet4zOZ
jcfLrpJMsUkDe3O3kVGFvkxpKv2J7vOkVTFayAzcejhQqQFwa0Bx3UbkmMKp718k
6qVFvZxLoFjJNX1rYve/Wyt55tb9cR3Wtb48/XYvCByIGplwVpHk0onZuuZIUpzg
jz1qJk6pRlMf6gL0sncRHZJpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU13wQqqMy
uQ/7JgpGIhALSN1oVLQwHwYDVR0jBBgwFoAU0MwJjruW320cXCjum1Xwqbgp/akw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTg3LzMwM0U3NzJDQ0E1
OTExRjA4Mzk5ODQ2QkM0RjlBRTAyLzBNd0pqcnVXMzIwY1hDanVtMVh3cWJncF9h
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvME13SmpydVczMjBjWENqdW0xWHdxYmdwX2FrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy
MTg3LzMwM0U3NzJDQ0E1OTExRjA4Mzk5ODQ2QkM0RjlBRTAyLzBNd0pqcnVXMzIw
Y1hDanVtMVh3cWJncF9hay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA1PArKLfSdzw4GYlJx101k3e0jhXqm3yagAUuoQiMOJ55CjyyMiudpWYTz7ari
ieuYk9DuyxOfKtcPjLPiC1VKAIxqQYBjTGWF5ev9vF8yULJPPjhlmEIId8amOOEH
LqA4TYjThn24TiBJlBrTQK8X44PUzpZP4THklLpeO+h1CMLTQ9F1tzp4sD6PN9HI
B9yls84QbvYcvMDewpHHPibqf2Rlh4xbPKPpJVUBVf9LqtCQzfOtxJ3habkd0G3V
79wpKBITW91LMbJrHFsSSW7SJ3MtH3j2ZMwA+7vdnF1OSRC4stf0z1sljAoCok19
r/YAQr+LWeexYzZH742gNeOu
-----END CERTIFICATE-----
Generated at Wed May 13 15:18:41 2026 by rpki-client