
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json)
Hash identifier: 9PQJIEMZPJxBeAQPw9DvAILStMZV+7WKLo19yIDAB6s=
Subject key identifier: 06:7B:F1:EE:B8:AA:97:AD:50:0B:04:9B:38:F8:3A:E4:DB:52:C7:7E
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial: 06C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
Manifest number: 0696
Signing time: Tue 12 May 2026 22:44:58 +0000
Manifest this update: Tue 12 May 2026 22:44:58 +0000
Manifest next update: Tue 19 May 2026 22:44:58 +0000
Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: ghDhJdx3EOAufpeSz8LYqNEEskwyEWUKNdLq3VSBF2c=)
2: 05646F7C268211F19B4B306BB2833773.roa (hash: HZzicft3bos6w7OuWhMV24pkNyMhlarAtyII9OEKTS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Validity
Not Before: May 12 22:44:58 2026 GMT
Not After : May 19 22:44:58 2026 GMT
Subject: CN=6a03ad6a-2181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:d0:b6:8c:98:4d:bf:51:38:2d:7f:89:b7:
75:f8:38:3c:25:b5:11:7a:a2:4a:76:47:5e:5d:84:
cd:62:bc:f9:74:56:6a:29:bd:07:8f:a9:2e:97:77:
8c:dd:aa:56:a3:8a:b5:b5:94:10:e1:84:b2:f7:43:
f9:7d:80:52:7e:a6:49:f2:c8:46:05:76:9a:a4:2c:
58:13:ec:3d:8a:16:bf:9f:78:2f:81:6c:27:54:99:
fa:d7:54:27:fe:26:b0:45:38:fb:6f:46:9a:5d:3d:
8b:3d:72:7c:5a:1d:a3:a1:2b:8d:f8:d4:c1:b3:50:
bc:a0:c9:ae:b6:7c:24:1d:65:7e:7e:8a:1f:64:6d:
42:29:55:51:5c:5f:81:a5:2a:33:ad:4b:2c:d2:cb:
ec:72:9e:77:b8:2d:09:60:a2:70:a5:a9:e3:56:e3:
10:34:48:ab:21:ed:4d:3f:b3:ab:7a:ff:45:34:78:
b7:8a:23:48:3d:b2:b8:44:19:bf:dd:3d:6a:4b:c8:
74:9e:ea:5b:a9:7c:31:91:f3:6c:84:65:14:a1:af:
5a:69:90:8e:3c:18:81:82:f9:ea:72:f1:b1:d5:dd:
7a:6b:3c:c0:88:29:e7:67:a8:3e:04:7c:1f:96:41:
4a:bf:8d:b4:b5:ed:db:c4:ac:8f:89:62:bf:02:63:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7B:F1:EE:B8:AA:97:AD:50:0B:04:9B:38:F8:3A:E4:DB:52:C7:7E
X509v3 Authority Key Identifier:
keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:ac:49:68:69:c6:d3:17:18:56:60:38:9a:bd:87:f5:ec:b5:
f2:84:4f:dd:99:0a:fd:95:d5:20:c3:6e:be:72:f5:fa:48:4a:
0d:e1:51:16:c9:b5:92:7f:f7:0e:00:36:7b:15:12:03:84:f8:
ee:9d:f1:81:82:cc:67:ac:59:a0:9d:4d:d2:d0:8e:03:cd:3a:
69:c0:9c:5f:cb:0a:08:5b:6a:2f:36:92:8f:53:99:b6:63:b9:
9e:6f:93:69:0a:0f:fc:86:bf:45:6c:df:ff:e4:df:06:56:43:
60:d2:5d:67:61:08:2f:2b:67:8f:32:39:b8:42:68:b4:1e:f0:
1b:af:b6:f2:c3:ae:a0:08:60:04:94:57:b8:ab:8a:6a:5b:73:
82:34:16:e3:4a:3b:b6:02:bb:d4:af:7e:73:e3:45:92:df:85:
a0:3b:6b:de:3e:b3:51:ad:ed:98:98:8a:d4:0e:3b:8f:b7:6a:
15:20:9e:48:94:f8:95:e3:6f:22:dc:b4:b7:4e:be:81:39:7b:
b9:84:6b:7a:90:49:16:0e:fa:3e:60:94:bf:22:f4:ca:59:8b:
fa:22:92:a4:0c:c1:92:ff:d0:71:c8:a9:98:9b:c1:0b:0f:3f:
86:54:e2:1e:df:f9:72:e4:0f:e8:73:11:86:0a:98:e4:f8:60:
c0:d6:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:30 2026 by rpki-client