
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft
File: -oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft (raw, json)
Hash identifier: y/BD2GAJMJXbS2pvzZYfxq3oWJ+K4C5Ijat0aP85pHE=
Subject key identifier: C9:11:B3:8A:F5:34:0A:D3:32:86:5C:9F:9A:E9:4C:11:C9:8A:9E:FA
Authority key identifier: FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37
Certificate issuer: /CN=A9167CB5/serialNumber=FA811F52E5195A429D706D19C003237C3209AA37
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft
Manifest number: 01B3
Signing time: Sun 27 Sep 2026 04:24:47 +0000
Manifest this update: Sun 27 Sep 2026 04:24:46 +0000
Manifest next update: Sun 04 Oct 2026 04:24:46 +0000
Files and hashes: 1: -oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl (hash: /ZXfEgbQ/dKcnoyRfydhygc7Ph+VKDzi6ssSju0BoEM=)
2: D16A1B5C225711EF975F6747C4F9AE02.roa (hash: BAf9fhlwdX3zD50Mx3jya6alzijI1cf4ICkH5jjAEpU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl
rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167CB5, serialNumber=FA811F52E5195A429D706D19C003237C3209AA37
Validity
Not Before: Sep 27 04:24:46 2026 GMT
Not After : Oct 4 04:24:46 2026 GMT
Subject: CN=6ab89a8f-9256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:5e:d0:8f:2f:f3:cd:0a:bb:aa:fa:b5:0b:
f5:4e:48:1d:b6:be:5c:60:6c:8b:df:49:fd:aa:b9:
56:eb:75:ad:fa:bf:08:ed:e5:26:58:c0:d6:aa:05:
95:26:19:02:e2:49:dd:5d:c7:be:09:aa:88:22:59:
34:25:0d:95:09:52:17:22:05:98:e9:b6:0d:55:5c:
8c:11:16:c3:15:3f:cb:0e:2c:85:ce:37:64:3d:ff:
7c:ef:8e:07:3a:7a:70:30:43:55:e8:a7:64:61:00:
ab:84:4f:ed:11:5f:8e:ff:8e:6c:45:c4:44:f6:bb:
d6:73:cb:7d:58:85:62:3b:04:8b:2e:34:5e:bf:bb:
6a:6f:58:0d:e5:1f:65:f5:48:ae:e3:98:c1:e7:4e:
9a:83:65:37:28:c6:ee:bd:af:bc:03:1e:b5:28:19:
23:58:4c:89:19:e4:a6:95:33:eb:d3:03:82:36:5b:
6c:50:cc:76:44:bd:35:ce:d3:d7:f5:ad:a6:11:8f:
d2:0a:a8:5b:04:aa:dc:2f:b5:22:6f:02:be:55:e7:
04:98:8e:36:87:4c:5f:0c:25:bc:33:b8:ab:ba:64:
5c:7d:95:53:55:dc:4b:32:0a:35:19:9e:8d:7b:74:
ba:60:22:64:dd:3c:3c:7c:38:a0:f2:58:e6:d3:6f:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:B3:8A:F5:34:0A:D3:32:86:5C:9F:9A:E9:4C:11:C9:8A:9E:FA
X509v3 Authority Key Identifier:
keyid:FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:64:e5:7f:4b:5e:e1:54:6c:ac:dc:3e:ad:6c:12:c5:81:ec:
ba:d0:84:2d:23:64:ab:6f:d6:2f:53:bc:52:51:55:63:53:dd:
87:13:5e:1b:61:a6:db:61:b5:9d:d3:d2:d5:78:5a:f4:e7:83:
80:e1:44:1f:1f:05:80:92:1b:c7:3e:88:75:7b:ef:c7:0d:63:
79:af:e6:b4:d0:e0:e8:b3:33:12:74:6b:55:9d:6e:a2:60:2b:
92:22:93:42:9c:2e:c2:e2:08:70:b6:8a:dc:cc:02:3c:78:74:
52:62:5b:fa:5a:41:56:23:e7:54:00:3e:1b:9f:93:ef:76:ee:
2a:f7:26:b4:36:0b:2b:91:f0:e9:96:1b:a3:ab:e6:b1:a5:3f:
1a:54:23:f6:20:fe:82:10:ea:9f:c0:4f:ca:1e:f0:d5:d5:ce:
38:0a:3b:7c:7d:e7:22:2b:a8:51:6d:33:02:9e:bd:0c:cb:e0:
21:75:f3:a4:1b:85:56:1f:d4:0a:fb:a5:21:e9:9a:e2:99:61:
5d:db:56:97:85:ab:0d:34:eb:eb:16:da:f1:a9:34:55:da:b4:
78:64:40:ac:30:97:a2:27:42:f7:63:ca:ad:ad:3c:c9:06:75:
dd:14:38:63:6d:d6:03:0a:a8:11:f9:ce:91:16:df:1f:f1:4d:
99:70:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:34:27 2026 by rpki-client