
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
File: 0MwJjruW320cXCjum1Xwqbgp_ak.mft (raw, json)
Hash identifier: yOcJ2BFGeRToTHEiKGtJiCVvmxSJD0ToCEn1IkHaNqE=
Subject key identifier: 70:4E:91:D8:22:4A:E1:1C:64:45:55:27:A2:09:D7:A9:43:3D:BB:7C
Authority key identifier: D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
Certificate issuer: /CN=A9142187/serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
Manifest number: 42
Signing time: Wed 25 Mar 2026 07:38:45 +0000
Manifest this update: Wed 25 Mar 2026 07:38:45 +0000
Manifest next update: Wed 01 Apr 2026 07:38:45 +0000
Files and hashes: 1: 0MwJjruW320cXCjum1Xwqbgp_ak.crl (hash: M9VubQYqHGlJ3hrANHIBx3NVJi4mRNR2jjfThBzCxzM=)
2: CCDDC90CCA5911F0B5ABC06CC4F9AE02.roa (hash: pzoy5b4jAK7WNQHs94s/PsJ8rZ83uQ8ezld7Xwjun4g=)
3: 26CA159E0BB711F1A64B03C6263D8C67.roa (hash: P5tfx0ynD93bH16mM9zmJmGEUghyGxe1+aGIlNRSAJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142187, serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Validity
Not Before: Mar 25 07:38:45 2026 GMT
Not After : Apr 1 07:38:45 2026 GMT
Subject: CN=69c39105-35ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:5c:3a:0e:87:16:6b:37:84:e5:ed:64:ee:
d7:a6:87:db:4a:cf:0c:15:8f:52:3c:35:47:e7:f6:
fd:08:41:f8:2b:40:72:e8:2a:15:bc:b7:f3:18:2f:
da:f9:4b:33:2d:66:71:06:d5:21:af:34:58:7c:f1:
e1:f5:d7:3a:b3:83:22:65:a7:65:6f:74:df:8d:3f:
e8:f0:20:b8:cc:f3:ac:d1:57:0d:2c:c8:0d:2d:e4:
8e:8e:7c:96:c0:3d:22:92:a4:f0:06:8e:25:3e:70:
1f:87:24:ee:b6:7c:ee:d3:42:ce:9b:ae:a6:22:cd:
03:c7:f2:84:5f:01:a1:d5:c0:27:cd:21:5a:3d:b8:
d5:f3:25:47:d6:ff:3e:6d:ca:2a:75:67:da:75:e5:
51:7a:ac:1c:1d:d1:46:4d:5f:f3:b8:15:e2:e4:55:
01:0f:89:63:4b:b9:d0:54:2f:fa:af:86:85:95:2b:
ac:00:a3:b8:02:92:e6:30:04:f5:3e:84:08:0c:fa:
ef:71:a2:f8:30:41:d4:38:26:76:c9:20:86:59:8a:
01:33:dd:6a:00:17:e0:89:43:0a:da:07:96:a8:9e:
41:69:66:00:f3:ef:12:f3:9a:9b:7b:aa:ff:fc:d3:
e0:71:25:5e:a2:69:f7:4f:97:e6:c4:c8:d5:43:25:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4E:91:D8:22:4A:E1:1C:64:45:55:27:A2:09:D7:A9:43:3D:BB:7C
X509v3 Authority Key Identifier:
keyid:D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:6c:2b:64:ef:1b:35:bf:dc:37:40:c6:82:2a:c8:c6:05:99:
43:58:61:ae:85:9d:ee:98:a2:51:76:d8:06:d9:b4:4b:e6:83:
d1:b7:18:15:ea:90:ee:3f:1a:1b:e4:38:8a:e3:c0:12:68:b3:
9d:b2:4e:fc:9c:d1:35:09:f3:e6:9d:0e:73:d0:1e:65:8e:99:
1f:e3:16:6d:a9:77:97:a8:c4:b4:8f:13:29:b0:68:ff:80:43:
e1:d0:eb:fc:91:f3:ca:f5:3d:31:7b:42:fa:5b:1b:51:0d:d2:
14:de:6a:27:a3:66:d8:36:ee:e1:54:75:2c:bf:87:b6:00:cc:
c3:99:e6:8b:79:f3:41:22:9c:55:bf:68:94:68:34:aa:a8:61:
1b:10:43:85:d8:11:f9:4c:83:78:48:dc:cf:39:29:c3:7a:e3:
f5:40:a8:69:6a:15:67:ea:55:a8:2e:98:99:c7:a5:05:15:0b:
2f:24:7c:b4:ed:82:e8:b1:ca:d1:bc:be:5f:a2:4e:00:23:06:
93:bc:11:49:75:18:cc:7f:fd:5c:16:0b:c2:85:6a:dd:1a:61:
6e:e7:0b:e4:e8:64:6d:a8:09:f4:89:df:30:d2:c3:9e:a3:ce:
e8:e9:40:d1:0e:36:ce:5c:0c:79:23:81:1d:0a:6c:8e:68:f1:
59:ef:9c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:04 2026 by rpki-client