
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json)
Hash identifier: XwAgbjw+NV9l/2Zf7qpzEupfp1NQpO+eG9WxlOwK1ug=
Subject key identifier: 44:E9:F9:9A:FF:5B:F3:80:5D:82:93:12:9A:38:37:69:DA:8D:F7:F3
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: 02C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
Manifest number: 02B0
Signing time: Mon 11 May 2026 01:36:35 +0000
Manifest this update: Mon 11 May 2026 01:36:35 +0000
Manifest next update: Mon 18 May 2026 01:36:35 +0000
Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: vTVDdqagZr6mbebkbWoynlnepk5rRUd29NhbTephpF8=)
2: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: 4a9piE3zoyvSIfp92HY2+LDrMoD2lXfFwMPpviHmbTA=)
3: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: ZAAc7Mnkor/okk5rhdONOcQdFtaHRUehKntnjNXP9g4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711 (0x2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Validity
Not Before: May 11 01:36:35 2026 GMT
Not After : May 18 01:36:35 2026 GMT
Subject: CN=6a0132a3-8f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:4c:d2:98:3e:a5:04:1a:21:84:84:8c:39:
60:45:fc:fa:ef:e2:06:5d:c9:3b:4c:41:e2:14:d0:
82:05:33:81:e0:dc:d0:93:0b:d2:10:7a:4b:e0:33:
86:5c:a6:99:b7:c9:c8:72:c1:df:ff:44:45:dc:9a:
9c:58:d2:91:73:34:2b:54:11:27:b5:26:e7:c5:6b:
21:22:69:19:4d:77:b2:ce:3d:54:ab:d1:1c:b9:ac:
5b:21:6a:c3:00:e8:ed:c8:0e:79:40:1e:54:35:45:
67:5a:ef:49:0b:0c:c6:05:11:30:53:62:09:d2:93:
0f:bf:1f:3f:bc:30:b9:9a:92:da:b8:9e:4b:77:f0:
9e:c9:c9:13:13:ca:47:9e:b5:97:4e:dc:4b:76:90:
22:23:8f:8b:7b:83:72:dd:5d:25:43:36:f4:81:ca:
c0:f6:57:df:3f:55:35:66:95:18:74:a9:be:da:01:
e4:ec:29:c3:83:e9:75:ff:f5:cc:0d:39:04:7a:e8:
3b:55:4d:5f:d4:04:70:d6:cb:bf:29:cb:3f:00:0c:
6f:28:40:e1:17:64:35:2b:28:4a:57:9f:0c:70:fe:
6b:81:b7:97:0d:00:3d:1f:3d:e1:d5:ae:da:8d:aa:
b8:df:f9:3a:95:ae:a7:4b:ce:24:93:d1:1a:a1:f0:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E9:F9:9A:FF:5B:F3:80:5D:82:93:12:9A:38:37:69:DA:8D:F7:F3
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:aa:ed:a6:87:f8:fb:53:49:2e:ad:3a:f3:08:a5:c5:88:9f:
26:a6:0e:8e:87:af:48:92:35:2a:bd:34:8d:5e:4e:4f:c2:d5:
4b:97:99:bb:4f:d2:49:8c:1f:e2:25:a0:52:f1:59:c4:9a:b9:
d3:d9:f6:f0:8b:03:9f:82:4a:ed:8f:97:ae:33:f1:dc:cd:82:
d4:29:78:12:4b:9a:f4:f6:8b:32:c1:9e:df:6e:f3:31:c1:1e:
2c:ac:ac:38:e1:91:0a:36:65:12:00:31:6c:e9:7b:c5:58:d2:
42:b2:6a:35:97:57:46:bf:6d:83:95:d1:be:4b:fc:f5:bc:ce:
34:c1:68:c2:2e:31:3b:4d:42:8e:6b:2e:ce:7a:bb:20:67:27:
1e:30:1b:43:5a:0e:70:a1:1b:69:8b:b2:59:64:dd:9f:c4:87:
19:a0:0e:62:16:ca:b2:22:2d:16:d3:18:92:2a:9c:23:24:27:
d8:39:de:a5:17:c6:6d:8c:b0:13:ee:e1:5c:e3:90:d0:f1:79:
6b:47:38:53:0d:9b:04:ad:a5:5f:c1:47:9f:05:35:a0:a2:70:
80:82:c3:d8:e1:8c:da:02:18:87:f0:8f:df:ac:28:54:ec:d0:
29:b8:44:d3:59:a6:07:e8:05:27:24:8c:a4:10:00:f1:45:6d:
2a:71:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:37 2026 by rpki-client