
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
File: o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft (raw, json)
Hash identifier: 8iGVIyKlNuRaJ73ED4BwoGkiLhjzvb/LRJ8BN2NwaAo=
Subject key identifier: 2D:1F:7F:61:B3:DE:93:E9:09:29:8B:DC:54:26:1A:88:70:49:32:A4
Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
Certificate issuer: /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Certificate serial: 02B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
Manifest number: 02AA
Signing time: Thu 23 Jul 2026 02:33:58 +0000
Manifest this update: Thu 23 Jul 2026 02:33:58 +0000
Manifest next update: Thu 30 Jul 2026 02:33:58 +0000
Files and hashes: 1: o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl (hash: JPOLVpJR+x8QtO1uGSaN1Cr4LDmbYWpuMKHrvyejdHw=)
2: CCCA3842714711EDBB61A87FC4F9AE02.roa (hash: dQes4cKEo3vqUyE4KHkW1L+GW6dnJAq7VF/ynzV3hTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F6AF, serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Validity
Not Before: Jul 23 02:33:58 2026 GMT
Not After : Jul 30 02:33:58 2026 GMT
Subject: CN=6a617d96-6d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f0:d6:bb:3c:eb:d7:6a:e2:f3:d8:c2:aa:fb:
67:d6:77:5f:dd:f1:17:aa:48:d2:43:12:5c:6c:bf:
89:48:32:29:7f:c9:5f:20:7a:fc:8a:79:91:f9:14:
ba:5b:4e:0c:0b:5a:3d:a5:de:a2:5b:e1:52:8a:15:
9c:9a:37:ff:a9:70:1c:fe:65:f9:c8:e4:9c:49:6a:
38:54:fb:a8:fd:fb:05:7c:99:a2:7a:e5:8f:1e:14:
c1:9c:ed:5a:ba:e5:b8:96:a1:76:5b:a0:78:23:c7:
b3:70:cb:18:7c:2d:b6:b8:3a:e3:f7:4f:18:9e:bb:
99:8c:4e:f1:5d:1f:8a:6e:08:04:6e:62:51:79:c6:
a0:dc:bc:1a:10:27:ce:90:6f:73:0c:ae:41:63:77:
b3:c5:96:db:e2:fa:12:d8:cc:2c:57:f2:a6:5c:57:
92:42:44:5c:04:c8:ba:9e:cb:33:c2:9f:54:ea:2b:
81:42:21:d9:06:25:e4:05:ab:92:e2:33:71:dc:65:
b5:4b:00:03:27:9b:bc:a1:b9:fe:20:49:98:b8:d7:
cd:be:d6:23:4e:ac:bd:92:65:14:a1:df:ce:0c:21:
1e:88:f2:fd:04:76:de:40:74:d9:10:f3:09:99:6a:
89:02:cf:ac:99:ae:a2:ca:24:81:c7:7a:a8:b9:3d:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1F:7F:61:B3:DE:93:E9:09:29:8B:DC:54:26:1A:88:70:49:32:A4
X509v3 Authority Key Identifier:
keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:a5:ee:63:c3:ea:32:0e:2c:ab:6f:01:38:5d:a1:db:66:4a:
b0:70:94:60:aa:91:bb:1b:dc:f2:be:16:0c:86:eb:cc:02:c2:
d6:5a:fd:93:51:ff:3c:6e:96:dc:86:e3:2c:aa:f3:a7:79:a4:
4f:7c:db:48:38:50:0e:c7:71:a2:1a:4e:d2:d0:ad:9a:68:9e:
49:ec:07:8c:5c:db:cc:4c:d5:80:dc:32:0c:9f:04:f7:8e:fd:
80:9b:9b:43:e0:05:dc:b5:e9:62:e1:ef:4d:80:17:5e:65:1e:
52:d4:fa:42:7b:6e:dd:b8:d0:19:38:bf:bf:a8:7d:3b:71:34:
d7:9c:13:74:44:d2:a0:ad:86:b8:b6:a8:b2:f1:83:ae:a4:52:
9c:c7:bc:03:e0:29:c7:d0:56:db:a1:e1:b8:a1:4c:5b:4f:6c:
fe:70:c4:58:f9:74:42:50:76:d6:45:1f:62:2f:f4:01:0b:ab:
d3:75:64:ac:17:53:b9:9b:89:c1:97:37:b9:f3:43:d0:34:06:
ff:25:da:a2:94:43:9e:31:71:36:ae:5b:f3:c2:9f:53:db:35:
69:08:6a:d2:76:41:dc:11:bc:b1:b7:9a:b4:c1:54:a2:c8:27:
42:27:7b:9b:e4:5a:bd:fe:24:a8:7e:2d:d5:25:e1:4f:cf:61:
9f:ed:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:41 2026 by rpki-client