
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json)
Hash identifier: i8g27C5ZDvxCTGg5amu6SjOI2/wEkfBRGrkSyornm0M=
Subject key identifier: 65:22:26:36:54:F5:E5:CF:2D:41:38:F7:C5:0C:42:A0:FD:D2:D6:D7
Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
Manifest number: 81
Signing time: Wed 25 Mar 2026 06:57:41 +0000
Manifest this update: Wed 25 Mar 2026 06:57:41 +0000
Manifest next update: Wed 01 Apr 2026 06:57:41 +0000
Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: GThGS9z7zeEOCQfz3Pm40ZzqcUQHe2/43v4JeYGA6HM=)
2: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: ysVuW5LnYi59x1lz18NXRjV3JavVPishhatCefOBZLg=)
3: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: 377aBWt/4YjE0cdxFMi4oiB5yI0io2fUU0WHhpm9ooo=)
4: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: PG7OBR6GyNLrIjZOfwPBfDBaGVKv/qZwCkbhTbs1CAg=)
5: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: V8o99dNNhmaM2c88PY3odEi8XIfBLs9AedcwcTXfAbs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Validity
Not Before: Mar 25 06:57:41 2026 GMT
Not After : Apr 1 06:57:41 2026 GMT
Subject: CN=69c38765-5a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:e5:8b:1d:9e:ea:0c:7b:21:67:e4:ee:64:
38:cb:07:07:e8:76:a5:16:d5:2c:dd:bc:84:b2:fd:
17:20:65:fe:8c:72:78:45:d2:b8:fe:e3:79:dd:79:
ca:66:dc:bf:db:9d:4d:5d:1c:f1:81:26:b5:42:c7:
cc:7e:af:9c:77:f6:66:8b:f5:4a:02:7c:b4:04:28:
71:35:d5:f0:36:69:c5:5f:9d:d5:d6:0b:4e:88:57:
fa:17:aa:66:d3:7a:6f:d5:5e:d1:e7:88:50:03:69:
d6:0e:8b:a5:bf:bf:e5:67:24:26:af:09:20:67:77:
ba:4e:8e:37:7d:c1:a1:31:c8:37:92:fe:f2:fb:b4:
95:9e:a5:15:f6:00:f1:fd:0e:c5:1d:3f:7e:38:d0:
15:74:e0:ed:69:76:e1:0f:55:a2:66:f9:0e:ef:4b:
9e:77:c1:90:6a:28:06:13:db:1a:de:eb:38:f7:6d:
2f:1f:ab:3b:4b:c7:74:8b:93:41:04:28:cb:60:c3:
54:28:69:61:a5:9a:d7:3f:04:ff:e5:14:1f:63:ff:
87:0f:95:fa:f5:41:65:5b:d4:53:fa:41:90:86:d0:
11:9d:86:aa:7d:ad:c0:51:47:95:7e:b2:e8:9b:1d:
6a:27:b0:61:a8:6e:28:80:10:9b:71:0b:44:2f:cb:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:22:26:36:54:F5:E5:CF:2D:41:38:F7:C5:0C:42:A0:FD:D2:D6:D7
X509v3 Authority Key Identifier:
keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:c0:42:13:3e:ec:45:c6:0c:a7:7b:63:f7:e6:62:ef:37:cd:
93:33:cb:66:e3:6f:f0:ba:ec:33:c3:80:29:78:7e:a1:61:c4:
64:0f:06:94:16:4a:0b:88:d0:f1:8b:8b:50:13:0a:0e:37:c0:
5a:ae:9e:6f:da:b2:d3:4d:f6:7a:8f:0c:f2:22:0e:03:99:66:
18:36:d0:7f:d6:c0:d1:5a:06:0e:dd:d3:f1:ed:43:05:7a:36:
46:51:e4:cc:7d:26:e0:8f:b4:55:33:e4:19:f9:9e:95:76:1c:
17:30:e0:a4:a5:e9:a4:53:a2:75:34:b6:e1:ad:c4:bd:37:c7:
96:b2:a8:41:ec:79:46:f1:00:d9:5d:c4:17:44:f9:12:ca:f5:
e1:27:a1:2a:bd:f7:bb:ea:0f:e1:59:32:5f:85:b0:b4:8f:d7:
4c:d1:f6:82:8b:e7:66:ed:9e:f8:90:51:fa:2e:a5:cc:f0:0e:
04:7b:d8:39:89:9f:a6:25:d1:93:49:7b:40:b1:68:db:22:80:
6b:02:19:cb:03:a4:8a:39:44:a5:ad:f8:d8:54:79:12:e3:f7:
aa:23:14:ef:a8:de:c3:2a:7b:66:fa:0c:cb:b3:d8:fc:00:2b:
9f:12:cc:4d:35:5a:f5:89:62:45:af:17:91:ac:21:f7:58:94:
30:e7:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:15 2026 by rpki-client