
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json)
Hash identifier: 5Wt4DIXokilv5yop67JrOpboR2S8FWEwg0d3QwMMCKo=
Subject key identifier: DB:E1:D7:8A:6B:94:B9:02:6B:D0:45:5F:47:E2:79:1C:8F:E0:F0:0D
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: 02EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
Manifest number: 02D4
Signing time: Thu 23 Jul 2026 02:20:19 +0000
Manifest this update: Thu 23 Jul 2026 02:20:19 +0000
Manifest next update: Thu 30 Jul 2026 02:20:19 +0000
Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: Avz7zl8vyfB/Q8GOR5UirnAgmQfumSGPjLD3mOUkBy8=)
2: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: ZAAc7Mnkor/okk5rhdONOcQdFtaHRUehKntnjNXP9g4=)
3: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: 4a9piE3zoyvSIfp92HY2+LDrMoD2lXfFwMPpviHmbTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747 (0x2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Validity
Not Before: Jul 23 02:20:19 2026 GMT
Not After : Jul 30 02:20:19 2026 GMT
Subject: CN=6a617a63-5ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:77:92:22:57:3e:78:a4:2d:4d:bf:8e:83:
0e:38:55:a6:d4:5f:42:75:a3:0a:68:14:93:b9:34:
83:47:63:e2:ba:2f:01:a9:c7:99:69:bb:6f:1f:92:
c6:d8:fc:be:03:91:e1:9a:30:d8:7e:24:59:1d:40:
86:95:3f:a1:a5:16:be:1e:72:84:3b:dc:dc:fe:de:
e0:50:6e:35:3b:26:0e:36:fe:b3:99:de:4c:c3:1e:
bd:eb:bb:5b:6b:37:ad:0e:8f:99:79:b5:38:3a:77:
84:26:61:3c:74:26:77:41:41:b0:95:e7:86:02:54:
2b:a8:09:18:cf:65:54:c5:fc:c3:96:6b:b6:ea:65:
05:35:ea:21:bf:18:1b:e2:41:4c:0f:b0:69:53:d9:
84:7c:26:cf:09:39:9b:dc:5d:8d:71:f0:a5:76:2b:
a4:61:05:35:69:ea:fb:fd:35:a7:ba:9a:99:1b:21:
63:3c:9b:66:83:11:e1:16:6c:d0:45:bf:c6:bc:91:
1d:5a:89:cb:11:84:ab:22:10:0c:4d:48:35:52:44:
41:a7:73:71:3a:7e:c6:05:95:ab:4d:f9:e7:b0:3f:
0e:28:3a:50:27:d7:be:50:c0:1d:65:bb:17:6c:89:
b5:42:96:61:ac:c2:c1:eb:01:f1:58:5c:77:51:70:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:D7:8A:6B:94:B9:02:6B:D0:45:5F:47:E2:79:1C:8F:E0:F0:0D
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4e:a9:91:4b:25:c4:b5:27:6d:10:4d:16:3b:7c:d5:ca:03:
09:b5:cf:12:0c:c7:f3:86:73:52:fe:93:05:42:e0:72:63:39:
16:c4:f2:42:a6:6b:3b:b2:cd:da:d2:0d:c8:dd:bf:6b:5e:b7:
7a:7f:cb:7c:97:cd:76:87:60:be:ce:cb:7b:ef:99:93:58:d0:
17:64:b5:c3:c9:70:dd:6a:9a:e6:b7:fb:15:01:9e:e4:c2:56:
64:1e:e7:37:60:a9:8b:9e:9f:a2:28:0d:ba:6a:bd:9b:36:4f:
99:80:6b:55:6a:85:96:2f:83:cf:00:fc:44:a8:65:39:65:cd:
e1:9e:c2:42:b3:74:ad:58:c9:d3:8f:cc:b8:a2:c8:10:58:63:
b4:db:f6:e5:bb:e4:d0:7b:e2:c7:bf:eb:72:c6:a3:78:02:e9:
80:35:a4:de:1c:1a:8a:cd:53:3f:84:de:45:3a:7b:3c:46:0a:
ea:94:9c:9b:08:60:1e:30:b3:5f:86:7c:2b:48:5c:05:35:4e:
39:72:89:0a:15:03:45:4b:de:f1:fd:82:ba:2c:b9:cc:df:92:
01:f8:fb:35:78:f6:af:8d:3e:0b:77:7b:61:85:06:69:8e:4c:
8d:07:57:c5:f6:94:e2:a1:3f:c1:ae:b5:67:8c:62:2d:6b:12:
2e:69:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:29 2026 by rpki-client