
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json)
Hash identifier: v3+MiASMNSlu2fVgJMFdAemkOBpV4fRlitb7lbgec4w=
Subject key identifier: 66:87:5A:DA:FE:7C:A4:3B:30:08:66:6A:22:71:C2:AF:5C:E9:5D:89
Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89
Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989
Certificate serial: 0BFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
Manifest number: 0BEC
Signing time: Tue 24 Mar 2026 18:42:18 +0000
Manifest this update: Tue 24 Mar 2026 18:42:18 +0000
Manifest next update: Tue 31 Mar 2026 18:42:18 +0000
Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: WUztltHQRE4jrscHOkJg70mQtIZawOV1WIy3/FfEuXM=)
2: A79D17F2361111EA95391375C4F9AE02.roa (hash: q2GF1CC4p1t2FL0of6+/asb4zOBEZzVUYsIcOysC6Sk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl
rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989
Validity
Not Before: Mar 24 18:42:18 2026 GMT
Not After : Mar 31 18:42:18 2026 GMT
Subject: CN=69c2db0a-1d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:95:93:94:4d:ce:d2:7e:d3:3e:2b:25:9a:
a0:74:40:21:31:26:f0:c8:6a:6c:2f:a4:52:cc:e2:
68:5d:62:c0:31:72:33:47:2f:01:a3:10:c9:47:82:
68:dd:e5:2d:68:4e:01:3c:21:6f:3f:4e:38:13:a1:
c2:14:64:61:99:f3:ca:87:54:18:12:b1:03:a5:07:
c6:c3:42:5f:d7:a1:82:24:ea:aa:85:00:30:ba:26:
3b:8d:ae:61:13:6a:b3:03:ce:5f:ea:da:3a:d8:11:
cd:65:7f:7b:7b:2d:71:ae:27:e1:d8:1f:d6:97:ca:
8c:5a:4e:63:1a:05:19:2d:63:09:64:10:50:6e:ef:
f3:f1:93:50:44:f7:6b:b0:1c:05:e2:43:97:9b:fd:
d7:c2:2a:4e:e2:67:28:96:c7:71:e2:da:e5:0b:6a:
88:73:f6:1c:7a:58:d7:9b:3a:ac:a5:9b:5b:b9:61:
33:b3:d5:4d:be:32:06:dd:1a:58:5b:7c:7a:1f:48:
12:a4:6e:5c:5e:38:e8:87:1a:e9:92:98:71:0f:c4:
d2:8e:0c:4b:dd:b2:2d:63:9e:56:6c:24:b3:ef:8a:
7f:cf:67:22:c8:81:f0:5a:2e:90:f2:7e:e2:0e:ff:
4c:4e:5d:63:cc:83:3f:ef:a2:18:53:58:72:a7:da:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:87:5A:DA:FE:7C:A4:3B:30:08:66:6A:22:71:C2:AF:5C:E9:5D:89
X509v3 Authority Key Identifier:
keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:18:2f:e0:26:6f:ee:5f:ae:20:fe:a8:cb:3f:03:06:0e:48:
23:8e:ff:78:be:ab:43:c4:d7:a7:a3:aa:b8:58:87:eb:e8:b0:
18:57:0b:68:c9:4d:cc:96:5b:1e:54:d2:cd:b8:83:19:e4:5e:
c4:b7:9e:83:2f:f2:0f:89:57:3f:08:6e:65:04:5d:a8:0e:bf:
4b:df:8d:84:99:5e:14:c5:e0:85:4f:3c:ff:a2:2b:15:20:77:
20:a1:80:d6:73:c9:0a:37:cc:4a:13:f6:94:93:6a:29:fa:c7:
77:18:13:c5:9b:2d:72:1b:20:62:ed:23:cc:db:de:a1:31:d8:
4b:87:d1:da:80:49:e2:85:cf:7c:89:a4:11:bf:ee:55:90:cf:
34:7b:40:a9:15:83:d7:07:e0:e0:45:bb:6c:97:3b:d0:41:bc:
33:1a:2a:2d:f9:4d:a7:84:be:c9:c9:36:65:75:74:4e:d1:df:
b3:96:4a:c7:e1:dc:43:a7:f6:40:c1:1a:cc:cf:26:4e:31:aa:
ec:fb:96:de:9e:40:79:af:78:eb:7b:29:f4:47:b4:a4:4a:eb:
67:81:0d:ec:44:8d:0d:79:5d:37:58:53:e8:d7:6a:d3:33:2c:
93:18:f2:fe:07:04:db:bb:67:2f:3a:bb:7e:58:f2:35:4c:d6:
f8:48:04:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:00:12 2026 by rpki-client