
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
File: o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft (raw, json)
Hash identifier: 3KY3cuq8aOuwVK+Mm9mPJckmnvG74UOVeqw134Ig2Jc=
Subject key identifier: 76:E1:22:A3:51:AF:48:C1:EF:A9:37:D9:D9:12:DD:60:2D:76:71:95
Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
Certificate issuer: /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Certificate serial: 02D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
Manifest number: 02CD
Signing time: Tue 29 Sep 2026 01:33:56 +0000
Manifest this update: Tue 29 Sep 2026 01:33:56 +0000
Manifest next update: Tue 06 Oct 2026 01:33:56 +0000
Files and hashes: 1: o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl (hash: 1l/Aq515jzB1bG6AJYyeEOsmbkyGVf3p9XSgz8QP40I=)
2: CCCA3842714711EDBB61A87FC4F9AE02.roa (hash: dQes4cKEo3vqUyE4KHkW1L+GW6dnJAq7VF/ynzV3hTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 01:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F6AF, serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Validity
Not Before: Sep 29 01:33:56 2026 GMT
Not After : Oct 6 01:33:56 2026 GMT
Subject: CN=6abb1584-bc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:e6:39:d2:da:66:dc:3a:d2:bd:6e:77:12:
d7:e4:c1:1e:90:cc:cc:be:71:06:46:57:fc:de:00:
a9:c4:54:a9:ed:5f:84:8e:d0:ff:d4:07:78:54:5d:
74:4c:be:67:5b:1d:a9:4f:3e:66:5f:f0:3d:7f:45:
dc:4f:b2:61:f5:73:a4:40:5b:d0:1f:7e:2b:b0:72:
e5:3b:c6:14:86:c1:7e:db:47:93:0d:6d:d1:cd:32:
84:b6:8c:cd:4c:1f:ab:b2:82:01:26:18:5f:83:8c:
e5:9d:88:46:08:8e:cc:2c:1a:2c:d0:1a:de:13:34:
86:17:08:6e:f0:8c:25:7f:e0:ed:11:6e:6d:b4:30:
f2:4f:18:8b:da:b7:71:7c:cb:70:cb:b1:06:d8:57:
2c:92:6c:ee:75:1f:12:4d:50:ee:62:d1:4e:00:f2:
29:bf:4b:b7:a7:e9:a5:31:0d:9f:28:e8:c7:d8:1f:
9a:da:d7:9e:7b:93:3f:ca:df:59:6b:ee:72:e9:2b:
7b:1c:35:d8:a3:83:a9:13:a1:0c:eb:27:d4:75:b0:
41:da:75:61:04:46:25:92:24:34:b1:92:02:ad:67:
b3:4a:6b:db:24:4e:33:41:71:eb:e3:72:23:51:53:
a5:ab:d5:6a:58:b4:9e:dd:1b:74:7d:70:03:f3:2a:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E1:22:A3:51:AF:48:C1:EF:A9:37:D9:D9:12:DD:60:2D:76:71:95
X509v3 Authority Key Identifier:
keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a9:97:26:28:ae:b3:ed:da:3e:01:b8:16:94:70:50:fc:b8:
10:71:3e:7c:75:1f:a3:82:15:e7:a0:28:35:8d:58:7a:3b:cf:
6b:fe:05:86:83:16:55:56:43:ec:50:8b:8b:f9:be:b4:cc:c3:
0f:f1:3a:a2:bc:fe:a2:9f:d3:bb:e2:b3:7a:4f:73:73:ba:a5:
94:20:f0:81:37:cc:4d:c1:6c:44:02:6b:f6:21:7f:75:e4:ef:
9a:27:60:ce:e4:88:1c:d9:5c:12:ee:5c:c6:c2:d0:c8:b7:b8:
32:a5:4c:2b:75:37:7a:39:81:4f:74:e6:06:ce:46:92:ed:47:
71:aa:1d:47:f8:d3:29:2d:91:ae:9b:89:28:91:53:8a:60:a8:
3d:9e:36:3a:61:6f:33:44:46:e2:66:b5:14:16:5d:af:30:3c:
6e:f2:e5:a6:da:bb:74:7b:ab:6b:18:66:df:30:da:04:e4:6c:
55:c6:d0:fe:ce:5d:13:eb:ad:d9:db:57:58:5d:47:2f:ef:21:
63:3d:9f:68:54:f1:11:aa:2b:24:5c:c0:08:c5:74:98:68:76:
26:d1:46:41:f9:ed:67:82:f5:38:a8:ec:e4:42:27:41:fb:c6:
b1:eb:91:20:7f:aa:8c:b7:5b:04:58:4a:b4:ca:ff:cf:a8:1e:
8b:dc:e5:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY2QUYxMTAvBgNVBAUTKEEzRDI1MEM1RDUyQzVBOEFDNjdCQTAyMTg4NEQxOTFB
NUQ0QTcxODIwHhcNMjYwOTI5MDEzMzU2WhcNMjYxMDA2MDEzMzU2WjAYMRYwFAYD
VQQDEw02YWJiMTU4NC1iYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkiTmOdLaZtw60r1udxLX5MEekMzMvnEGRlf83gCpxFSp7V+EjtD/1Ad4VF10
TL5nWx2pTz5mX/A9f0XcT7Jh9XOkQFvQH34rsHLlO8YUhsF+20eTDW3RzTKEtozN
TB+rsoIBJhhfg4zlnYhGCI7MLBos0BreEzSGFwhu8Iwlf+DtEW5ttDDyTxiL2rdx
fMtwy7EG2FcskmzudR8STVDuYtFOAPIpv0u3p+mlMQ2fKOjH2B+a2teee5M/yt9Z
a+5y6St7HDXYo4OpE6EM6yfUdbBB2nVhBEYlkiQ0sZICrWezSmvbJE4zQXHr43Ij
UVOlq9VqWLSe3Rt0fXAD8yo40wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHbhIqNR
r0jB76k32dkS3WAtdnGVMB8GA1UdIwQYMBaAFKPSUMXVLFqKxnugIYhNGRpdSnGC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjZBRi9GNkQ4REE5Qzcx
NDQxMUVEOUZERjNEMTJDNEY5QUUwMi9vOUpReGRVc1dvckdlNkFoaUUwWkdsMUtj
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285SlF4ZFVzV29yR2U2QWhpRTBaR2wxS2NZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjZBRi9GNkQ4REE5QzcxNDQxMUVEOUZERjNEMTJDNEY5QUUwMi9vOUpReGRVc1dv
ckdlNkFoaUUwWkdsMUtjWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS6mXJiius+3aPgG4FpRwUPy4EHE+fHUfo4IV56AoNY1YejvPa/4FhoMWVVZD
7FCLi/m+tMzDD/E6orz+op/Tu+Kzek9zc7qllCDwgTfMTcFsRAJr9iF/deTvmidg
zuSIHNlcEu5cxsLQyLe4MqVMK3U3ejmBT3TmBs5Gku1HcaodR/jTKS2RrpuJKJFT
imCoPZ42OmFvM0RG4ma1FBZdrzA8bvLlptq7dHuraxhm3zDaBORsVcbQ/s5dE+ut
2dtXWF1HL+8hYz2faFTxEaorJFzACMV0mGh2JtFGQfntZ4L1OKjs5EInQfvGseuR
IH+qjLdbBFhKtMr/z6gei9zlsg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:42:59 2026 by rpki-client