
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
File: 0MwJjruW320cXCjum1Xwqbgp_ak.mft (raw, json)
Hash identifier: 6S2D1GLu/YhSMxYCFQymmeeeAF+TfHwxvmskOzBcSPU=
Subject key identifier: 98:C3:6F:D1:6F:A0:5F:B4:0F:12:4B:9D:47:D2:FE:CC:9E:65:62:A2
Authority key identifier: D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
Certificate issuer: /CN=A9142187/serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
Manifest number: A3
Signing time: Sat 03 Oct 2026 07:58:07 +0000
Manifest this update: Sat 03 Oct 2026 07:58:07 +0000
Manifest next update: Sat 10 Oct 2026 07:58:07 +0000
Files and hashes: 1: 0MwJjruW320cXCjum1Xwqbgp_ak.crl (hash: 3fEQyxfHzPZiMBPL9Q7VjjzQRw4wZey1UbyR0GZApKA=)
2: 26CA159E0BB711F1A64B03C6263D8C67.roa (hash: P5tfx0ynD93bH16mM9zmJmGEUghyGxe1+aGIlNRSAJM=)
3: CCDDC90CCA5911F0B5ABC06CC4F9AE02.roa (hash: pzoy5b4jAK7WNQHs94s/PsJ8rZ83uQ8ezld7Xwjun4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142187, serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Validity
Not Before: Oct 3 07:58:07 2026 GMT
Not After : Oct 10 07:58:07 2026 GMT
Subject: CN=6ac0b58f-d85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:0c:5e:b2:fa:e2:c8:5c:4b:40:eb:87:1a:
be:8a:d6:ef:17:b0:0f:a5:88:67:0c:f4:fb:84:ee:
aa:cc:a1:62:4f:2d:fc:13:d5:5d:11:cd:57:c3:97:
b2:af:0d:16:a3:4d:35:ae:a1:32:c1:d8:d7:4a:ff:
c5:ea:c2:21:3f:05:90:21:e7:bd:42:53:34:30:82:
2a:b2:5b:bd:4d:2b:98:2e:24:d9:c9:8d:46:c0:59:
b6:e2:f9:a3:d6:4e:72:44:16:ad:da:31:95:ab:d9:
c5:7e:f9:9a:75:b6:94:d4:31:c4:20:da:60:87:07:
47:df:53:f5:7a:d3:cd:69:64:aa:8e:26:e9:89:f8:
84:15:98:bf:c6:ab:88:3b:6a:7f:2c:b2:e9:a2:37:
89:dc:7b:36:cf:56:d3:80:29:82:57:6f:9f:d7:84:
a6:b1:33:76:00:67:e8:64:1f:86:f5:aa:97:27:58:
9b:41:4b:15:06:4f:44:d6:e5:33:c1:57:2a:56:de:
40:19:ad:40:09:b3:40:69:4c:82:e9:3c:d9:3d:fe:
1e:6b:e7:7b:0b:35:10:64:46:c9:72:86:59:94:01:
de:d5:80:a6:b6:53:ae:4f:85:31:b2:cb:3f:02:a5:
cc:18:8b:da:fe:bc:64:bf:0a:b6:25:5d:88:57:04:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C3:6F:D1:6F:A0:5F:B4:0F:12:4B:9D:47:D2:FE:CC:9E:65:62:A2
X509v3 Authority Key Identifier:
keyid:D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:4a:8f:db:94:6a:72:0d:97:a8:32:98:20:89:ae:9f:69:4f:
00:ef:71:f5:b3:22:a8:7d:c6:1a:44:fa:65:58:8a:98:b8:1a:
15:9e:2f:52:9e:5c:bf:22:d7:b9:5c:47:b8:2b:ba:10:6c:74:
97:1e:ee:7f:5c:96:50:fd:21:10:3c:7a:7a:91:79:81:df:3f:
8d:e8:53:96:a0:e5:83:c0:a8:4b:c5:5e:da:8e:76:bc:dd:91:
94:28:7b:19:4e:ac:a9:c3:a7:ef:9f:bc:d6:d8:c9:d6:dc:14:
41:1d:be:95:84:28:90:2e:76:d6:ae:08:ec:7f:79:37:12:20:
9d:1b:48:12:bc:47:04:fa:92:f8:13:52:ad:38:d9:82:fe:61:
7e:ed:5b:58:f5:25:49:2f:7d:c5:37:c2:17:8b:cd:46:dd:57:
07:0d:68:80:09:82:59:d2:a9:0c:c7:79:d8:c2:1c:68:ac:b0:
5a:24:7c:11:49:de:0f:30:11:3f:f9:02:10:d9:90:16:79:1d:
3f:d7:86:5e:95:20:51:c2:9a:55:c2:08:54:8c:ad:06:f9:b3:
d7:ab:1b:37:6e:60:aa:01:8c:92:10:9e:a4:0b:0a:04:82:02:
4b:92:0e:46:77:de:d4:8b:9b:b6:bd:34:9f:14:69:ab:aa:f2:
29:4f:6f:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIxODcxMTAvBgNVBAUTKEQwQ0MwOThFQkI5NkRGNkQxQzVDMjhFRTlCNTVGMEE5
QjgyOUZEQTkwHhcNMjYxMDAzMDc1ODA3WhcNMjYxMDEwMDc1ODA3WjAYMRYwFAYD
VQQDEw02YWMwYjU4Zi1kODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthQMXrL64shcS0Drhxq+itbvF7APpYhnDPT7hO6qzKFiTy38E9VdEc1Xw5ey
rw0Wo001rqEywdjXSv/F6sIhPwWQIee9QlM0MIIqslu9TSuYLiTZyY1GwFm24vmj
1k5yRBat2jGVq9nFfvmadbaU1DHEINpghwdH31P1etPNaWSqjibpifiEFZi/xquI
O2p/LLLpojeJ3Hs2z1bTgCmCV2+f14SmsTN2AGfoZB+G9aqXJ1ibQUsVBk9E1uUz
wVcqVt5AGa1ACbNAaUyC6TzZPf4ea+d7CzUQZEbJcoZZlAHe1YCmtlOuT4Uxsss/
AqXMGIva/rxkvwq2JV2IVwS8OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjDb9Fv
oF+0DxJLnUfS/syeZWKiMB8GA1UdIwQYMBaAFNDMCY67lt9tHFwo7ptV8Km4Kf2p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjE4Ny8zMDNFNzcyQ0NB
NTkxMUYwODM5OTg0NkJDNEY5QUUwMi8wTXdKanJ1VzMyMGNYQ2p1bTFYd3FiZ3Bf
YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBNd0pqcnVXMzIwY1hDanVtMVh3cWJncF9hay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjE4Ny8zMDNFNzcyQ0NBNTkxMUYwODM5OTg0NkJDNEY5QUUwMi8wTXdKanJ1VzMy
MGNYQ2p1bTFYd3FiZ3BfYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJUqP25Rqcg2XqDKYIImun2lPAO9x9bMiqH3GGkT6ZViKmLgaFZ4vUp5cvyLX
uVxHuCu6EGx0lx7uf1yWUP0hEDx6epF5gd8/jehTlqDlg8CoS8Ve2o52vN2RlCh7
GU6sqcOn75+81tjJ1twUQR2+lYQokC521q4I7H95NxIgnRtIErxHBPqS+BNSrTjZ
gv5hfu1bWPUlSS99xTfCF4vNRt1XBw1ogAmCWdKpDMd52MIcaKywWiR8EUneDzAR
P/kCENmQFnkdP9eGXpUgUcKaVcIIVIytBvmz16sbN25gqgGMkhCepAsKBIICS5IO
Rnfe1Iubtr00nxRpq6ryKU9v2Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:51:41 2026 by rpki-client