
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json)
Hash identifier: 1yB5Ycc6jdd+4Px6UUsZoMavgi3xUlxzMCJF62eakHs=
Subject key identifier: E8:C0:A0:BC:6A:0E:3F:A8:D1:F4:2C:DB:98:F4:3D:54:AE:80:0C:EB
Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Certificate serial: 09B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
Manifest number: 09AB
Signing time: Tue 24 Mar 2026 19:43:48 +0000
Manifest this update: Tue 24 Mar 2026 19:43:48 +0000
Manifest next update: Tue 31 Mar 2026 19:43:48 +0000
Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: PWQSTazujT7WyeTIfLgxUOK/wO7QNuvqxHVQRCCtgOg=)
2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: GefkuCVL5QikekTXf83Gvk/uklG0VM+rKHaD3lTs1U4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2482 (0x9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Validity
Not Before: Mar 24 19:43:48 2026 GMT
Not After : Mar 31 19:43:48 2026 GMT
Subject: CN=69c2e974-3570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:8f:6b:0c:1e:31:48:14:a4:11:dc:0b:cc:
86:92:3b:ac:a1:1e:47:48:53:b9:15:eb:4a:29:73:
c1:f9:22:1c:c9:70:f6:f2:4e:9a:a3:8b:dc:d6:10:
d4:41:07:b4:8f:88:5b:21:39:79:5c:51:df:08:e3:
7c:0b:4c:98:f1:53:51:40:33:57:6e:85:a3:5b:3a:
97:5c:d8:cb:bf:bc:b7:7e:fb:8e:0d:6e:ec:20:1d:
73:70:33:49:0b:20:ee:04:f3:5c:89:43:c0:fc:71:
f9:b7:df:4d:5b:66:79:05:17:7f:f6:c4:57:c9:0d:
60:8a:c0:c7:42:a5:1a:f6:c0:fc:1d:16:56:19:dd:
64:08:78:0a:d3:77:b9:fb:b8:d6:33:f0:d6:ef:72:
57:b8:89:d2:10:b9:e2:61:01:fe:97:11:46:02:eb:
c0:b4:0a:9a:ee:f7:4b:55:09:98:3f:72:49:25:ff:
14:30:13:f4:f7:2d:2d:d8:63:7a:2f:d2:b1:20:38:
04:6d:5c:46:cc:7b:1e:f4:c0:46:e7:42:a3:07:b3:
98:48:6e:23:4d:fd:55:16:04:02:b1:2a:d9:e9:b9:
6a:0f:40:2c:0b:e8:53:92:29:c0:61:42:e3:12:4f:
37:5b:e2:ed:0a:8c:de:ac:48:93:07:3e:e9:34:58:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C0:A0:BC:6A:0E:3F:A8:D1:F4:2C:DB:98:F4:3D:54:AE:80:0C:EB
X509v3 Authority Key Identifier:
keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fc:32:4e:4d:dd:79:ac:0b:c3:20:9a:fe:a6:c4:3f:73:57:
8a:90:b4:53:08:89:9a:c3:a1:9a:c5:ed:62:2c:b8:c2:a8:fb:
d3:a1:81:f6:cf:61:8f:64:45:5c:c2:72:df:86:ed:26:88:50:
3f:71:a3:9f:8a:14:b2:48:c8:d9:f3:49:19:85:fb:e5:8a:ea:
5b:70:78:c8:2c:a3:ce:c9:a8:9b:04:18:b8:48:54:d1:dc:95:
5f:b0:12:a8:59:dc:ec:7a:db:cb:a7:6d:82:98:7d:6e:46:9e:
d8:58:58:58:bb:3a:6d:fe:82:3b:6c:6b:e4:15:79:29:e2:74:
30:2b:45:f8:e2:59:72:f2:97:2e:95:b9:9b:7d:70:38:9f:9d:
1f:23:c6:3c:36:29:bd:64:c9:b6:87:71:9c:b2:00:ac:a4:cc:
84:8f:ce:dd:68:e3:54:ed:03:0e:d1:43:d0:58:ea:12:36:1c:
98:f3:e8:f4:3b:29:aa:f3:39:2c:e3:5d:80:c9:fa:3c:72:c5:
ea:ca:db:d8:07:b4:4f:bb:92:af:13:0a:6f:f5:e6:19:bf:b7:
5b:57:1c:58:b0:27:c6:6b:d1:e4:0e:6a:c6:64:fa:b2:05:31:
94:b7:a4:c7:ae:ac:13:6c:8d:78:67:03:06:f2:5e:3a:40:d2:
d5:cc:6b:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU2MDQxMTAvBgNVBAUTKEEzREZCRTExQUY4QTc4RTU2MkNGQjQ1NzkwMENDQUI5
MDkwQzJCNTkwHhcNMjYwMzI0MTk0MzQ4WhcNMjYwMzMxMTk0MzQ4WjAYMRYwFAYD
VQQDEw02OWMyZTk3NC0zNTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApt6PawweMUgUpBHcC8yGkjusoR5HSFO5FetKKXPB+SIcyXD28k6ao4vc1hDU
QQe0j4hbITl5XFHfCON8C0yY8VNRQDNXboWjWzqXXNjLv7y3fvuODW7sIB1zcDNJ
CyDuBPNciUPA/HH5t99NW2Z5BRd/9sRXyQ1gisDHQqUa9sD8HRZWGd1kCHgK03e5
+7jWM/DW73JXuInSELniYQH+lxFGAuvAtAqa7vdLVQmYP3JJJf8UMBP09y0t2GN6
L9KxIDgEbVxGzHse9MBG50KjB7OYSG4jTf1VFgQCsSrZ6blqD0AsC+hTkinAYULj
Ek83W+LtCozerEiTBz7pNFjaxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjAoLxq
Dj+o0fQs25j0PVSugAzrMB8GA1UdIwQYMBaAFKPfvhGvinjlYs+0V5AMyrkJDCtZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTYwNC9CQ0VDNkM1RUE0
QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VPVml6N1JYa0F6S3VRa01L
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285LS1FYS1LZU9WaXo3UlhrQXpLdVFrTUsxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTYwNC9CQ0VDNkM1RUE0QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VP
Vml6N1JYa0F6S3VRa01LMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe/wyTk3deawLwyCa/qbEP3NXipC0UwiJmsOhmsXtYiy4wqj706GB9s9hj2RF
XMJy34btJohQP3Gjn4oUskjI2fNJGYX75YrqW3B4yCyjzsmomwQYuEhU0dyVX7AS
qFnc7Hrby6dtgph9bkae2FhYWLs6bf6CO2xr5BV5KeJ0MCtF+OJZcvKXLpW5m31w
OJ+dHyPGPDYpvWTJtodxnLIArKTMhI/O3WjjVO0DDtFD0FjqEjYcmPPo9DspqvM5
LONdgMn6PHLF6srb2Ae0T7uSrxMKb/XmGb+3W1ccWLAnxmvR5A5qxmT6sgUxlLek
x66sE2yNeGcDBvJeOkDS1cxr7A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:17 2026 by rpki-client