
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json)
Hash identifier: LRLNxFg5WzIjVnresoVGaCrWWIenrhi5nj9iwY9z2M0=
Subject key identifier: 3A:A4:D8:4A:4F:4F:78:14:C6:4C:6E:43:E2:DB:6E:C4:D9:3C:F1:39
Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
Manifest number: 0225
Signing time: Thu 23 Jul 2026 04:40:44 +0000
Manifest this update: Thu 23 Jul 2026 04:40:44 +0000
Manifest next update: Thu 30 Jul 2026 04:40:44 +0000
Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: 28Urr8dmQgJ+fC7smPxZGIqU0mIbsg8eaeeeZwlViWE=)
2: 9993077459B011F18691C362BD833773.roa (hash: PKDdZUq/eeCrgJp6yfNiqjr8n5K/Gvs8SrQ/lEfK2Y8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Validity
Not Before: Jul 23 04:40:44 2026 GMT
Not After : Jul 30 04:40:44 2026 GMT
Subject: CN=6a619b4c-384c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:ff:56:b5:85:92:c0:e1:74:72:d9:65:24:
57:52:36:35:6e:09:f2:29:d9:cb:60:60:c1:32:87:
83:28:26:fd:fe:49:8e:15:93:81:4e:4f:8e:eb:8f:
60:33:6b:22:12:d9:4d:d6:2a:f1:50:35:19:51:80:
e8:d0:56:4e:8f:b4:f8:d9:66:6f:d1:79:e7:a6:b2:
0c:6a:31:db:91:e7:60:b3:e5:df:d5:01:7d:01:68:
d0:f3:10:7a:1b:a3:f7:02:2d:4c:bc:a9:c6:05:84:
33:67:84:c6:5e:91:b6:93:15:9b:62:4b:8a:67:ba:
0d:b6:1e:47:eb:d1:02:2e:8e:b0:7f:a6:d3:20:5f:
5c:32:f3:57:25:4c:bf:0c:a7:d2:a2:76:50:28:18:
c8:fa:88:08:f3:fe:57:ca:7c:87:2e:fc:a4:31:77:
a2:b8:06:ef:94:d2:57:47:e4:4f:a5:bb:87:5a:0b:
7d:7e:e3:95:00:a8:0a:cc:bd:f4:61:72:6d:8c:22:
56:f3:49:d1:b8:10:2f:c4:bd:4e:29:0b:a0:3e:76:
9f:a4:2d:da:e2:81:af:12:81:1c:1a:47:9e:7f:c1:
7e:6e:c6:65:ad:2f:8b:e0:03:f9:10:ae:f8:57:59:
c2:b6:64:71:e2:25:6f:cb:9d:cc:5e:fb:99:d2:14:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:D8:4A:4F:4F:78:14:C6:4C:6E:43:E2:DB:6E:C4:D9:3C:F1:39
X509v3 Authority Key Identifier:
keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:30:c8:39:d4:31:86:ec:2a:3d:0a:3b:25:bc:ad:30:4f:fe:
46:f6:d8:05:0b:d2:50:a3:1d:f6:4c:8b:0a:33:08:6c:5a:f3:
ca:fe:07:d2:b1:34:26:15:2b:ee:6b:24:1a:c7:5f:44:3f:69:
e0:73:65:56:81:e4:3d:70:47:d1:8f:78:80:28:a2:6d:1d:c8:
0e:ef:5f:8a:4d:77:d2:ec:c1:be:29:82:51:23:10:51:92:4d:
7d:cc:b1:a5:64:88:bd:75:ab:97:ec:3f:28:8e:33:3a:71:e8:
85:aa:3c:ef:de:84:17:e8:79:ea:bf:e0:15:c2:26:73:aa:f4:
bc:41:c2:3a:ac:3b:76:40:d4:a6:7a:d1:69:9c:31:6a:1d:f7:
37:4e:d5:a0:84:96:9b:d4:d4:c5:05:21:47:14:94:34:71:87:
19:79:41:86:f8:33:a2:14:2a:43:95:b7:d0:4e:1b:ed:61:ba:
b1:20:28:bf:36:0f:8d:ae:01:b0:a4:34:1d:4f:db:70:11:52:
51:49:14:05:c2:31:72:24:5a:be:59:3a:9b:41:1f:13:ee:2d:
d0:77:fd:9a:e5:a3:ba:49:e8:eb:22:7b:01:78:5d:66:a0:ce:
9c:77:8c:3d:47:ed:83:9d:f0:e1:2c:f3:f1:32:65:f0:0a:73:
83:f3:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:43:27 2026 by rpki-client