
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
File: os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json)
Hash identifier: Z4yFLixbKqEQn2bTMVMweRIk3Y6Ce2mahdsrLkzCio0=
Subject key identifier: 06:2C:D5:2B:82:C0:64:96:37:B9:D7:AA:81:4D:F4:3D:A2:CD:A4:14
Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
Certificate issuer: /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
Manifest number: 0223
Signing time: Thu 23 Jul 2026 04:10:30 +0000
Manifest this update: Thu 23 Jul 2026 04:10:30 +0000
Manifest next update: Thu 30 Jul 2026 04:10:30 +0000
Files and hashes: 1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: pYKf7ZdArbpnnuKuaRz2JunGNM8MEab7r3xlbU76axo=)
2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: jt/Em4DLUT3Wo1hryGzSXiSThIZtCbpBQGAGGsyRT4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Validity
Not Before: Jul 23 04:10:30 2026 GMT
Not After : Jul 30 04:10:30 2026 GMT
Subject: CN=6a619436-9a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:fd:ac:42:40:e5:1d:30:21:91:b0:0c:62:
30:02:ea:c8:8c:1d:c5:a2:51:08:dc:5d:8b:85:f4:
f6:cf:c4:e8:5e:da:c6:de:b8:71:36:e7:15:16:b9:
f5:a0:d6:04:ac:28:c7:be:74:7f:90:0d:e6:45:3e:
78:f9:5c:19:99:05:07:86:ef:e5:60:6e:7c:d1:f1:
ca:14:c6:2a:a2:e8:f4:43:67:bb:8a:81:3f:98:1d:
4c:04:7e:91:33:ea:bb:05:e1:11:f5:d2:7b:0e:10:
b4:8f:7e:cd:75:66:6b:67:a3:f0:23:3f:13:51:fd:
5d:c2:de:03:1c:7e:90:b5:6b:1d:46:18:23:4d:7a:
01:e1:d4:8c:69:28:2f:30:b5:ea:76:b6:44:9d:c5:
19:69:68:c1:99:e6:09:10:71:a2:d4:f7:66:97:87:
7d:b1:c1:b4:89:e5:0b:8d:54:64:92:4d:f5:4a:a4:
a0:68:14:e5:87:ab:2b:f4:44:94:70:8a:81:fd:84:
72:6f:ce:b8:9f:3e:8a:14:60:cd:72:f1:f1:6b:e5:
fc:15:67:02:78:82:99:ef:94:36:f6:96:bd:a1:be:
b9:e2:60:b0:70:39:b4:9b:e1:ee:08:7d:06:d8:83:
7c:16:cd:37:2c:64:00:ca:35:39:b6:82:d0:0d:69:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2C:D5:2B:82:C0:64:96:37:B9:D7:AA:81:4D:F4:3D:A2:CD:A4:14
X509v3 Authority Key Identifier:
keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:f2:e9:73:e6:b4:5d:f9:88:61:81:fa:e7:f2:cd:44:f4:d6:
71:6a:6b:b3:d4:58:ff:3b:9e:ae:cb:95:64:55:8a:fa:8b:5b:
f6:49:e6:d8:2a:3d:cb:f4:ef:d2:16:71:39:93:3c:c8:3e:c6:
57:c3:08:67:45:57:2b:6f:ef:82:62:1b:24:5c:63:56:62:50:
b0:f2:09:73:b6:5a:c3:98:4d:3c:ce:ce:7a:0d:35:41:13:28:
63:f5:8d:ad:f3:0d:fa:d8:9f:c7:6a:23:0b:f0:05:06:8f:47:
85:90:b5:96:ef:77:2a:3a:33:e9:fa:13:5a:52:23:9e:1f:65:
35:35:dd:d4:2e:5e:fd:b6:fd:1f:e5:df:17:45:6b:82:85:e2:
ce:dc:f7:01:a9:78:17:d9:ca:45:a0:b9:2c:dd:72:c4:5b:24:
de:27:4c:19:ad:ee:df:8b:b6:32:77:73:63:0a:9e:d5:f5:a3:
d5:bf:0a:d4:34:15:12:ec:4e:14:97:7f:2c:ee:2e:5d:b9:9a:
b5:ef:2a:57:f5:73:ff:6d:1f:ff:31:e3:75:ff:f2:15:77:e5:
c9:85:6f:6c:e7:4c:4e:c3:11:e8:73:46:87:05:a5:cc:ff:1f:
1e:7d:4c:3b:b5:01:97:a0:9e:a0:19:e0:32:c2:44:10:ff:ed:
62:ff:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:44 2026 by rpki-client