
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
File: os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json)
Hash identifier: P1czKs6gtG0CVGbkQDaeOHQU/QgYAiSg0VAwhCSv+og=
Subject key identifier: FD:3D:5C:B3:11:64:B6:F8:2E:D7:3E:BA:D3:26:F8:CC:F5:C1:5D:3B
Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
Certificate issuer: /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
Manifest number: 01FF
Signing time: Mon 11 May 2026 03:17:45 +0000
Manifest this update: Mon 11 May 2026 03:17:44 +0000
Manifest next update: Mon 18 May 2026 03:17:44 +0000
Files and hashes: 1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: 8cMYoZ3vC74ZbA1ykzspBZVdPN+FVz/smBQLF12OG3Y=)
2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: jt/Em4DLUT3Wo1hryGzSXiSThIZtCbpBQGAGGsyRT4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Validity
Not Before: May 11 03:17:44 2026 GMT
Not After : May 18 03:17:44 2026 GMT
Subject: CN=6a014a58-3d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:80:e6:85:e4:5a:51:13:d9:7f:63:81:88:
2f:95:ae:e1:bc:75:c2:4f:b0:a0:a8:a2:52:36:df:
59:b2:ef:d9:14:a6:c2:12:fc:e5:0e:de:03:eb:80:
8a:37:19:e0:3b:40:45:2e:bc:47:05:db:1f:bc:27:
4e:e5:b6:f2:d4:61:15:22:98:f1:12:5b:7a:7b:07:
42:ee:1f:34:3b:d9:b4:03:93:45:5c:9e:b9:49:77:
b7:1e:ad:86:47:0e:3a:0f:dd:31:5c:92:3e:10:09:
04:b7:a5:d9:39:26:d1:3a:6d:06:9e:cd:13:89:d1:
57:10:d0:b0:e1:ff:51:50:b0:55:e8:a6:e0:b9:80:
4a:49:33:1e:21:85:59:27:2b:53:9d:32:40:df:d8:
b8:94:5c:13:22:24:75:08:66:8a:04:a0:d9:4e:10:
ed:39:0c:34:4c:27:83:6d:61:67:85:6e:7c:8c:61:
ce:9c:62:83:1f:f3:ad:ef:3e:f2:8e:4f:02:76:87:
dc:42:c1:70:86:5a:d0:bf:e0:79:9d:b9:fa:6e:57:
5e:94:fd:ef:a8:f2:25:a3:32:00:a4:63:1b:a8:27:
cc:f4:dd:09:3c:52:6d:11:c9:71:bc:d5:ac:f8:81:
0b:fa:1d:d1:ad:c2:9b:3e:af:08:0c:c4:68:79:f5:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3D:5C:B3:11:64:B6:F8:2E:D7:3E:BA:D3:26:F8:CC:F5:C1:5D:3B
X509v3 Authority Key Identifier:
keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:f9:9b:bf:75:70:66:d2:f4:46:50:7c:d9:52:7c:63:a7:9f:
97:7c:f3:26:6f:36:e3:ff:6b:cd:57:d7:57:83:83:29:77:3b:
57:1a:c5:85:a2:1a:14:75:65:d2:03:41:84:2a:21:dc:8e:7b:
a4:6e:2c:6d:03:65:47:c7:63:6a:fa:16:0f:e1:a6:20:9c:fc:
58:1c:89:6b:eb:b3:e4:ff:1e:6f:af:61:b5:99:c4:44:d2:72:
6f:92:5f:30:9f:dd:79:8a:21:aa:45:67:14:f3:13:0c:1a:69:
b0:92:61:6d:af:01:f5:81:16:da:a2:2a:29:6f:76:27:eb:56:
65:b9:be:bf:4b:9d:52:97:21:c6:77:7c:24:16:01:9d:fb:b4:
d5:66:a4:57:b5:f0:19:7c:47:03:6e:6f:7c:c3:7f:63:28:89:
ac:9f:5f:3d:b8:d6:98:55:7f:a5:a6:89:60:c9:eb:ad:33:f1:
65:45:bb:99:b4:73:4a:ea:d2:d9:21:70:af:f3:9a:11:13:cb:
1c:51:6d:59:c6:eb:d1:37:02:63:a1:bb:31:02:88:4f:9d:c7:
49:28:51:e6:2b:eb:22:5d:a1:a5:83:19:61:8c:e6:cf:e2:3c:
80:3e:27:0a:27:e0:54:65:22:ed:f9:3c:11:1a:81:17:8e:0d:
38:7c:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:39 2026 by rpki-client