
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
File: o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft (raw, json)
Hash identifier: dQbtcDOGnKIYnObGinuEe3e8ldyJN7PdWvncToJGgvc=
Subject key identifier: D8:97:B7:96:31:86:0E:A8:B2:6A:AB:BA:CA:AC:31:13:75:56:D1:5C
Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
Certificate issuer: /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Certificate serial: 028D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
Manifest number: 0287
Signing time: Wed 13 May 2026 01:51:31 +0000
Manifest this update: Wed 13 May 2026 01:51:30 +0000
Manifest next update: Wed 20 May 2026 01:51:30 +0000
Files and hashes: 1: o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl (hash: WaYVanej04UAOQ9QfNSONrJNIXQIYun0Ec+YUXQtRHc=)
2: CCCA3842714711EDBB61A87FC4F9AE02.roa (hash: dQes4cKEo3vqUyE4KHkW1L+GW6dnJAq7VF/ynzV3hTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:51:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F6AF, serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Validity
Not Before: May 13 01:51:30 2026 GMT
Not After : May 20 01:51:30 2026 GMT
Subject: CN=6a03d923-b293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:23:4b:f6:bf:83:d5:ec:db:bc:e6:cc:7a:
d7:ef:cd:8e:23:16:a8:a1:25:77:91:25:87:8d:17:
8a:68:21:5a:41:96:df:d0:a7:61:46:eb:34:9e:bd:
9b:25:be:24:d9:e5:af:92:73:aa:e1:a7:83:46:73:
69:3c:57:94:5e:67:ba:5a:1f:df:e9:53:91:44:0e:
36:a6:39:48:56:5d:53:e9:76:58:c4:17:65:fd:da:
6a:8a:11:42:45:90:5f:39:65:7c:8e:a7:48:1c:bc:
24:ce:1f:48:3b:b0:3a:f4:96:c4:e4:19:35:5a:30:
59:6f:25:78:73:3d:07:74:24:68:01:26:94:55:ad:
8f:19:3a:25:98:5b:d5:3d:71:64:03:46:fd:a6:e7:
d6:39:1e:b0:31:d3:7c:d3:33:f1:9b:19:80:62:dd:
8d:c5:1d:88:6a:88:68:41:18:00:b0:c3:08:5b:ea:
e8:4e:c9:2e:2e:f7:1f:18:41:f0:4d:04:e1:85:d1:
ed:23:d7:a3:6c:c0:e5:ef:c7:78:12:11:9a:ce:55:
99:df:6f:62:6d:6d:cf:c8:fa:61:2f:fc:f1:49:0b:
64:44:bf:58:54:fb:c4:d6:44:1d:10:06:a0:f4:1e:
cb:2d:de:a4:7e:56:c0:a0:41:05:46:ec:1c:cc:f3:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:B7:96:31:86:0E:A8:B2:6A:AB:BA:CA:AC:31:13:75:56:D1:5C
X509v3 Authority Key Identifier:
keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9a:b8:83:53:2c:19:ef:13:f5:96:34:25:aa:61:1f:ed:fd:
63:e6:b0:cb:c2:7e:fb:42:75:d8:a1:79:11:3e:64:a2:fb:48:
6d:df:be:bf:f5:6a:48:c4:7f:f8:40:c4:ac:9e:cf:6a:58:74:
95:3e:e4:70:11:28:86:e6:cd:a5:09:d0:84:71:2a:72:81:71:
ad:4e:3e:1e:1d:c1:d8:d0:ad:e8:d2:da:19:25:91:3f:eb:a2:
6e:ff:91:d9:46:cb:e3:e4:c0:fe:40:37:49:04:c6:6c:4d:75:
5d:2b:e0:bb:f5:a0:ff:51:87:55:75:a6:99:b0:f7:e6:67:ab:
a6:7e:97:5d:60:b7:03:70:55:cb:a5:88:97:1b:7d:92:79:77:
7c:6f:d7:56:ba:c1:2b:a5:49:69:72:43:e3:67:02:50:d1:62:
d1:a4:aa:52:2a:50:a8:fc:e3:30:cd:a6:66:ad:93:90:45:d8:
36:f5:f9:27:d5:50:4a:24:db:01:17:fa:81:28:0e:2c:54:44:
51:23:76:08:33:fe:f2:0b:62:e6:d6:31:f5:56:55:1a:10:40:
24:58:13:5d:e3:d2:31:9b:21:c5:bd:b2:7c:fd:ef:d4:01:13:
8f:79:a6:15:71:23:51:cf:d0:91:ea:19:fd:4a:60:7a:17:0d:
37:71:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:06 2026 by rpki-client