
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
File: 0MwJjruW320cXCjum1Xwqbgp_ak.mft (raw, json)
Hash identifier: BrZSs7ZqD9DH6y8uKDmvcXKpVtA5ZQKYr9rrhujoOog=
Subject key identifier: C4:07:EB:9B:6F:37:C8:4B:24:DF:37:78:53:B9:C9:D2:65:52:05:80
Authority key identifier: D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
Certificate issuer: /CN=A9142187/serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
Manifest number: 7E
Signing time: Thu 23 Jul 2026 09:38:50 +0000
Manifest this update: Thu 23 Jul 2026 09:38:49 +0000
Manifest next update: Thu 30 Jul 2026 09:38:49 +0000
Files and hashes: 1: 0MwJjruW320cXCjum1Xwqbgp_ak.crl (hash: ysUoY7LYRZKSGTsWTzEw0XqokEPf0cwOdF7xpDe9E28=)
2: CCDDC90CCA5911F0B5ABC06CC4F9AE02.roa (hash: pzoy5b4jAK7WNQHs94s/PsJ8rZ83uQ8ezld7Xwjun4g=)
3: 26CA159E0BB711F1A64B03C6263D8C67.roa (hash: P5tfx0ynD93bH16mM9zmJmGEUghyGxe1+aGIlNRSAJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142187, serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Validity
Not Before: Jul 23 09:38:49 2026 GMT
Not After : Jul 30 09:38:49 2026 GMT
Subject: CN=6a61e129-bb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:7d:8a:61:19:d3:fe:5e:19:c6:d0:f8:f9:
e0:a6:69:3f:03:3b:64:cf:6c:d5:d4:2b:55:5d:cd:
2f:a4:cd:45:6a:44:6a:a8:7c:fa:7f:cf:ef:19:b8:
fe:ae:bf:11:60:4b:b5:84:c3:cb:83:70:d5:18:a3:
11:8c:c6:6a:f1:fd:0f:b0:d4:2b:9f:4f:4f:25:67:
c7:c7:8b:e4:bf:e0:1a:9b:58:36:0e:31:73:18:15:
25:73:84:1f:ff:dd:f5:1d:2e:5a:9d:f4:7f:12:36:
17:e6:aa:d0:1e:e6:c9:26:05:39:cb:93:7d:f4:c6:
9e:ec:a7:d7:1a:fd:34:91:58:47:81:01:10:de:26:
79:6f:c4:df:83:f5:b8:e7:06:5f:05:93:5c:7c:7d:
9e:f6:ac:f9:04:27:2f:de:01:37:29:51:3c:3c:bb:
33:3d:37:08:c0:12:1f:6e:2a:8f:49:3f:3b:93:5e:
57:83:dd:88:76:b6:1e:a7:b2:d0:a2:2e:2b:f4:16:
49:b1:dd:d1:60:7d:26:25:80:22:a7:3f:7b:c8:16:
f4:d2:2d:81:c0:00:bd:ce:f4:ff:e9:37:2e:61:46:
7d:66:2e:21:78:a3:15:b5:6d:24:55:35:cc:d3:fd:
96:b1:d2:8f:7c:60:13:60:a7:7c:e5:35:73:05:52:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:07:EB:9B:6F:37:C8:4B:24:DF:37:78:53:B9:C9:D2:65:52:05:80
X509v3 Authority Key Identifier:
keyid:D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5b:ff:62:8d:e6:f6:26:34:2c:d4:85:2e:12:10:33:9d:e6:
dd:1d:3f:eb:34:b8:c6:79:31:0f:33:71:54:71:04:9a:dd:2b:
95:09:92:fd:62:fe:69:d3:6f:3d:84:8a:d8:7a:ff:52:68:c8:
8f:8d:1e:e5:02:8a:f2:7f:c0:45:ab:ef:e7:51:d9:9e:c4:ae:
4b:10:3a:96:a2:10:95:c4:71:de:1d:6c:7e:a5:cc:3b:1f:9a:
32:e4:ed:b3:88:40:80:f7:85:47:e5:d0:cd:10:ac:df:03:d7:
18:2e:b9:3c:e7:5f:20:f1:18:90:06:3f:5f:e1:8f:2b:b8:21:
ef:9c:3c:48:73:35:95:1a:e2:c9:33:33:39:62:ba:c9:ca:6e:
92:14:dc:e6:9e:d7:90:ca:62:0b:b2:b9:5f:d3:96:d5:86:2e:
56:ed:6c:98:9a:6a:6e:d1:a5:22:eb:bd:f5:f9:9f:4a:a0:32:
c8:88:da:7f:64:35:d2:da:68:c3:f0:ab:1d:a7:7f:38:bc:0b:
fe:00:66:68:07:fb:ed:bb:af:0a:a2:31:46:75:5e:1d:46:7f:
64:e1:3e:46:ca:98:72:5c:cd:60:d1:01:d9:17:75:62:65:64:
1b:29:d3:81:b8:2f:43:26:98:87:3c:bf:a2:95:07:c2:b3:16:
d2:66:71:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:18 2026 by rpki-client