
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json)
Hash identifier: waJcf3wa11PPy64NfIU1m0+8RZSYW+va7U68YC08guc=
Subject key identifier: BE:47:6F:DF:63:36:76:3F:00:9E:F7:C1:EC:F6:18:0C:E2:BB:16:8E
Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Certificate serial: 05E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
Manifest number: 05DA
Signing time: Tue 24 Mar 2026 22:40:24 +0000
Manifest this update: Tue 24 Mar 2026 22:40:24 +0000
Manifest next update: Tue 31 Mar 2026 22:40:24 +0000
Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: wIFuxhnIxJkkFuIFTe0yXmOYaljtsqxG5A0tZuX1TYE=)
2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: y1fQwZPgOu336Lbyq8hEAWUDlZTJlYYK8G8/vltz1rM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1505 (0x5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Validity
Not Before: Mar 24 22:40:24 2026 GMT
Not After : Mar 31 22:40:24 2026 GMT
Subject: CN=69c312d8-7c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:1a:fe:fe:95:dc:b0:3e:0e:2c:80:d2:be:
50:c3:f1:42:5d:1a:fe:ae:cd:5d:8f:89:39:6b:d5:
88:83:41:2b:dd:87:1c:32:1c:45:e7:47:15:ab:49:
e5:33:ee:09:75:4d:39:ae:0e:a6:df:d7:e8:70:0f:
b6:27:b4:9d:a5:e0:46:9b:c7:92:31:2a:5a:fd:05:
6b:78:06:6a:8a:f8:38:2d:03:31:fc:c9:08:66:5d:
e5:13:e8:fc:9f:ad:f0:d3:53:dd:5e:ae:da:e2:99:
27:87:c7:cb:95:13:95:d4:1b:e0:e2:6b:b2:e9:6d:
e8:07:83:47:dd:53:70:93:a7:ef:c7:4f:90:3c:f7:
29:d0:76:e5:dd:a9:b9:91:1c:81:69:01:1d:c3:5b:
98:e1:11:d2:86:c5:e5:5d:72:2f:84:b0:ab:71:57:
a5:37:b9:f4:a2:24:f8:1d:bd:fa:a9:88:4d:f0:6c:
7f:46:85:58:46:43:68:9d:de:17:8b:90:7a:f1:f6:
f1:2f:c4:a2:41:2a:c1:e2:fe:8b:89:6b:cc:36:ec:
7e:0c:35:40:3c:f8:e7:e5:06:1b:28:47:29:e0:d7:
cb:dc:e2:50:10:48:40:19:a2:0c:07:d0:b1:6e:47:
72:a2:4d:09:31:f2:ad:34:7a:3d:e0:78:50:48:7f:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:47:6F:DF:63:36:76:3F:00:9E:F7:C1:EC:F6:18:0C:E2:BB:16:8E
X509v3 Authority Key Identifier:
keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:89:0c:39:43:45:8c:c9:4d:6a:3d:04:da:e1:77:ac:2d:74:
97:98:44:ea:25:fc:a7:e0:1f:09:a3:f5:55:29:61:a4:1e:88:
39:6d:ba:8e:e6:37:c9:c0:05:cb:dc:61:8b:e6:cf:a9:b9:49:
04:62:b6:f2:1d:5d:95:a6:ad:e7:1d:0f:3c:da:52:36:41:5e:
c0:46:70:d1:23:c4:22:9c:17:b2:e0:23:9f:3b:6a:c1:ce:39:
8d:65:76:7a:ed:fe:93:0d:ed:4d:1b:ac:43:8c:f6:ef:c9:1b:
18:09:7b:75:6f:5d:1d:56:b8:33:1e:4b:a7:15:8f:65:7d:0e:
13:44:2d:7f:9c:27:ba:27:bb:a4:c4:42:81:50:ea:0f:29:0d:
0d:9e:65:55:75:c7:c6:aa:54:72:87:16:9b:b9:f2:e7:46:e9:
ba:d7:41:74:56:a1:fb:8d:49:e3:a3:fe:b8:76:45:fa:60:a5:
ab:49:44:bc:25:b2:ba:a0:ab:ca:17:10:21:c0:69:da:c4:4c:
84:73:be:d8:65:e0:d5:62:ef:eb:eb:48:42:fe:a6:35:4f:b3:
8f:aa:c1:da:69:50:e5:b2:50:fd:55:7b:2c:02:4a:a1:d2:ab:
c3:31:a4:87:23:1c:f8:c7:0e:03:5e:1a:c4:45:46:4f:2b:cf:
8f:1b:e1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:07 2026 by rpki-client