
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json)
Hash identifier: Ff7UNIhxjM+ao2YumR2JgLkn7+loQgvGGB4A67i/90Q=
Subject key identifier: F5:B4:29:F8:B9:C9:3A:A4:7D:07:E0:DB:D5:68:B8:93:F3:0F:B6:D4
Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
Manifest number: 01DF
Signing time: Fri 27 Mar 2026 03:29:16 +0000
Manifest this update: Fri 27 Mar 2026 03:29:15 +0000
Manifest next update: Fri 03 Apr 2026 03:29:15 +0000
Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: fBK1Chl0zrGWWwuJWIgkeEh0LmtejXnu5g0hUnYLQqI=)
2: 8AE913AED18811F08493AE11C4F9AE02.roa (hash: aSymJnexrg1u767E/fsEUjs4CyF2cy6zWX0QemHP05I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Validity
Not Before: Mar 27 03:29:15 2026 GMT
Not After : Apr 3 03:29:15 2026 GMT
Subject: CN=69c5f98c-55e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:3a:eb:a0:5e:ad:2a:4e:0e:00:a0:df:de:
cf:85:75:d4:81:98:0f:a5:5a:d7:3b:df:ef:83:6a:
39:33:58:f7:07:75:b7:05:ac:b4:e8:d0:4c:1a:1b:
90:65:8e:1f:c2:7f:f1:a6:35:70:cc:80:bc:00:4c:
24:ca:2c:e6:84:ff:a9:4a:72:78:27:5b:18:c8:ab:
75:6c:8b:7f:05:ab:2f:d3:4f:f8:cd:97:6d:4b:17:
fe:9a:33:93:fb:50:2f:0a:0c:ef:ea:b6:79:4d:a3:
86:df:f8:7e:76:ed:4b:6e:aa:eb:e8:af:29:5f:81:
44:5a:d1:3b:f9:35:e7:05:35:d8:94:bf:49:a1:3a:
e8:ac:4f:52:09:1d:e8:92:2f:a0:97:a5:27:b5:06:
35:3b:5b:3d:f8:d2:70:06:98:81:d1:7b:ff:0d:98:
86:27:94:ba:6f:0c:36:a3:2d:a5:e9:a1:ad:8d:f8:
69:86:01:34:42:8c:e2:42:9c:65:79:35:b2:1a:84:
dc:fc:1d:44:7c:a8:19:4d:e7:a0:f2:0a:cb:81:5c:
71:f5:55:bf:ea:69:ab:81:68:d4:dd:32:90:77:d0:
42:b4:67:9f:2d:73:1e:66:be:4f:99:93:ed:25:33:
4e:df:f4:37:6e:5a:f0:0a:2b:7f:28:88:28:96:15:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:29:F8:B9:C9:3A:A4:7D:07:E0:DB:D5:68:B8:93:F3:0F:B6:D4
X509v3 Authority Key Identifier:
keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:3b:cb:ca:33:49:62:7b:cb:b3:82:fd:56:97:c4:77:cb:73:
35:21:86:ad:01:d4:2b:6f:1b:d2:16:2c:22:54:c2:1b:6e:b0:
38:62:de:f3:ef:44:e9:34:dd:bd:4a:1a:7e:c5:ab:18:67:be:
ee:9d:19:db:f9:8d:bb:86:59:73:fe:b4:5b:8b:c4:6e:92:34:
fa:42:4b:e9:87:e2:09:3d:58:78:c5:e9:50:10:94:6b:46:b7:
f5:30:2f:d9:43:16:f8:74:b0:d1:58:b4:0d:82:94:e6:fd:af:
44:9d:6d:e1:c5:ad:f7:fa:c0:2e:bf:5f:e1:1f:63:11:42:c9:
b3:a4:c6:2c:26:af:e2:d5:81:e3:54:9d:d3:23:39:3d:df:8f:
da:1d:ba:e0:ae:10:25:a3:26:ad:43:70:1c:ec:53:ac:4e:3c:
62:56:3e:87:f2:da:68:44:48:22:d5:54:92:ab:94:5f:c0:50:
c6:02:c9:7c:b0:41:0e:02:b0:c4:f0:53:20:e5:fd:7f:17:2a:
a4:11:6d:6e:7e:47:ac:2e:34:80:d4:48:36:e7:55:e0:d7:f9:
1f:0d:d0:80:a0:be:e3:84:76:2c:91:23:4d:52:3a:89:80:6f:
5a:e4:b6:5b:ba:d4:b4:a9:8d:5b:53:69:fe:99:96:29:5f:53:
19:7f:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:31:16 2026 by rpki-client