
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json)
Hash identifier: xOIn3oUoX3/B2tSw7mV0UiR+VGNPn3t1F45w6lWJvbg=
Subject key identifier: EE:CA:D3:EB:C2:99:10:DE:DC:35:B1:7C:EA:B8:8A:7C:9D:E8:81:02
Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Certificate serial: 09CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
Manifest number: 09C6
Signing time: Tue 12 May 2026 19:57:20 +0000
Manifest this update: Tue 12 May 2026 19:57:19 +0000
Manifest next update: Tue 19 May 2026 19:57:19 +0000
Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: Z1dGI0CbEkd/3uu1y1ap+bkE11bZwyHIaTJzQ8HQ0po=)
2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: w0Mg38kqxU56tToSKDuvE9izP1apCE3Ik6yrPGcnebw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2510 (0x9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Validity
Not Before: May 12 19:57:19 2026 GMT
Not After : May 19 19:57:19 2026 GMT
Subject: CN=6a038620-1a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:b3:86:31:1c:32:df:87:6b:3e:a0:98:d8:
a3:4d:8c:40:1c:fb:ce:4f:c4:f2:2a:f0:8e:bd:64:
55:fb:64:81:bb:8b:b9:ac:ec:fa:6b:5a:f8:04:da:
c2:3e:44:64:cb:59:17:cc:6d:9b:d5:70:b4:de:a5:
2f:27:44:cd:32:0d:c7:d5:ec:ef:22:4f:25:ad:8c:
3c:07:0f:28:f1:1b:4c:6b:91:ff:90:c5:98:5f:fe:
33:b0:c9:e9:7b:d2:46:9f:f6:54:e0:7e:a1:4d:a8:
46:0b:d6:7b:b8:f3:9f:22:a1:3e:2c:9a:6b:d6:81:
e3:11:8e:86:c1:58:a1:7e:bd:a1:2c:00:67:ee:49:
66:32:ff:52:76:d6:2d:12:e6:6d:38:96:90:4f:33:
ea:b1:be:67:44:61:83:62:53:00:c0:04:27:6d:7f:
7c:8b:1e:a5:27:fa:b6:26:e7:f6:87:6a:89:ae:bf:
31:f2:fd:19:3a:ec:0a:a5:8a:7b:b9:4a:dc:33:36:
77:d0:41:62:1b:54:8e:4a:99:2b:f4:6a:a9:ed:8a:
0c:05:ce:a2:11:99:7b:cc:9c:47:8d:98:a5:a3:49:
71:cd:2d:43:85:8d:02:fd:c7:13:35:8e:54:3e:c4:
3d:17:41:b9:60:b1:c5:f5:75:ed:98:a6:6f:cd:68:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CA:D3:EB:C2:99:10:DE:DC:35:B1:7C:EA:B8:8A:7C:9D:E8:81:02
X509v3 Authority Key Identifier:
keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:49:40:1a:1c:c2:f3:df:45:ea:e1:e1:45:cb:e9:03:5b:c3:
52:16:66:3f:68:bf:d4:0f:d7:92:49:06:6c:da:65:2a:c0:d7:
b2:ee:5f:3a:05:26:ab:16:52:ba:e1:6c:0a:1a:9d:a5:e1:86:
b2:0d:fa:ab:5c:fa:5d:0a:7e:66:a7:fd:32:cf:4a:b9:00:a4:
0e:48:92:31:d8:9b:a6:c4:c9:1f:2a:27:7e:f0:7e:72:49:4c:
c0:ba:67:ca:98:5e:6b:46:a3:d6:ec:b0:23:68:50:1a:fd:6d:
7b:b4:52:78:9a:26:81:b9:2e:be:8a:15:55:f0:14:1f:80:9b:
c5:7e:11:d1:77:f3:24:e4:51:21:92:b7:bd:c1:49:42:d9:2b:
12:f2:be:b3:77:c3:ac:3c:ab:93:2e:7b:7e:ac:5b:1b:67:32:
7a:8a:bb:23:1e:f8:be:70:6c:35:51:05:81:e5:de:e6:7d:b4:
97:39:0a:a0:a4:30:b8:74:22:33:6b:c6:65:d6:d4:59:75:fc:
ce:74:c5:e1:76:1f:51:16:e9:49:3f:43:12:8f:96:25:47:99:
20:50:24:f6:7e:80:d8:58:b4:79:ac:05:b6:8b:3e:7a:50:d9:
a8:98:f3:fb:12:0a:2f:0f:17:08:bf:2a:bc:2f:90:e4:1b:46:
2a:90:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:21 2026 by rpki-client