
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
File: os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json)
Hash identifier: eHVqPzU9nX6i8Eu1HlTTu23qGdp5tcSPqtNJpOtRgaE=
Subject key identifier: AA:4F:D9:DC:A6:A6:2A:76:C6:0D:CD:E3:72:DD:9F:D6:A9:DF:6E:F7
Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
Certificate issuer: /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
Manifest number: 0243
Signing time: Wed 23 Sep 2026 02:27:28 +0000
Manifest this update: Wed 23 Sep 2026 02:27:28 +0000
Manifest next update: Wed 30 Sep 2026 02:27:28 +0000
Files and hashes: 1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: R4ymPIYpznqxQI/5udypPwJVN4lCdgUdQtGsJFMlAYk=)
2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: jt/Em4DLUT3Wo1hryGzSXiSThIZtCbpBQGAGGsyRT4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Validity
Not Before: Sep 23 02:27:28 2026 GMT
Not After : Sep 30 02:27:28 2026 GMT
Subject: CN=6ab33910-f3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:05:43:00:0a:bb:5d:4a:e8:67:09:a2:be:
18:4c:e3:c4:40:15:2c:bf:f1:9c:2d:50:80:8b:61:
9f:59:ee:f5:8b:20:8b:61:f1:44:00:c2:f4:7e:25:
a6:92:ad:d0:c1:64:01:9f:b7:0e:98:0a:45:b8:37:
dd:be:f3:15:0a:a7:d1:58:fd:8c:a8:13:1a:c9:01:
e0:01:a8:1c:b6:90:bd:67:67:32:2b:29:46:9a:01:
48:b9:d1:0e:24:38:10:90:73:45:35:93:bb:71:03:
d9:4a:ac:c3:6f:10:f6:52:5a:dd:ca:2a:60:1f:f1:
da:74:91:c3:65:b9:69:71:9b:69:48:18:ed:dd:e3:
fe:ea:9a:8a:45:a4:fe:2a:b6:39:04:63:00:fa:42:
bc:93:d7:15:75:76:0c:d7:3b:18:d0:d9:07:ae:78:
86:f5:50:91:bd:e6:85:f3:43:97:51:50:ee:ca:cb:
c6:40:e1:dc:ea:44:84:9b:16:f7:af:60:d3:77:19:
8b:20:36:68:72:86:14:53:4a:d1:9b:a4:40:0f:f9:
4f:f7:29:c5:f2:bf:51:ad:cf:ec:af:68:6b:a5:8c:
6b:1d:28:42:1d:ff:f3:a9:f9:27:2c:8e:6d:29:57:
ae:7f:96:d0:e9:d8:07:88:89:1e:aa:b9:a9:96:18:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:D9:DC:A6:A6:2A:76:C6:0D:CD:E3:72:DD:9F:D6:A9:DF:6E:F7
X509v3 Authority Key Identifier:
keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:1e:af:84:a5:e5:5f:49:31:3e:cc:e7:4a:66:a0:c3:a4:71:
a7:89:80:82:b8:eb:a6:8d:85:f3:c5:18:94:97:27:fe:5e:f5:
04:c5:e8:3c:69:83:a7:c1:7e:99:36:fe:a3:3b:3d:0c:9f:cf:
49:74:71:36:6a:ff:bb:67:f0:9e:b2:ee:d1:36:3b:cd:1f:1a:
f9:ba:c7:d8:fe:c1:88:10:53:45:b9:58:b5:7c:35:ab:7c:c7:
c1:84:f1:04:03:db:f3:41:05:ed:d7:93:3e:11:27:04:5d:a4:
ab:f6:0d:ed:c3:4a:89:98:7e:40:78:6d:69:25:4f:7d:3c:ed:
ad:5a:44:54:29:00:cf:d5:c6:5a:d3:d7:e4:e8:27:bf:28:d6:
bb:62:d0:f9:1c:67:b9:f0:8c:4f:bc:13:07:6a:e1:fe:33:0b:
6e:63:77:dc:8b:ed:2a:d8:85:87:a6:5b:e3:ba:40:83:3e:b3:
eb:ac:a5:9b:ae:02:24:42:bc:7f:c4:1b:02:56:a5:d6:e9:da:
36:67:b4:00:d6:c8:19:39:c4:3d:7c:f0:12:87:51:6c:cd:30:
6c:cc:a7:0a:f4:b0:cb:40:5e:11:0b:09:b1:6d:da:ee:be:ba:
73:90:fa:13:67:3f:15:48:6e:68:93:76:fc:41:f6:ad:07:6e:
c5:51:86:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRDMEQxMTAvBgNVBAUTKEEyQ0QxMEE0N0VENzIzRTFDNDhCNUY1MEQ2ODBDRjRG
NjdGQ0IxRDMwHhcNMjYwOTIzMDIyNzI4WhcNMjYwOTMwMDIyNzI4WjAYMRYwFAYD
VQQDEw02YWIzMzkxMC1mM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqnAFQwAKu11K6GcJor4YTOPEQBUsv/GcLVCAi2GfWe71iyCLYfFEAML0fiWm
kq3QwWQBn7cOmApFuDfdvvMVCqfRWP2MqBMayQHgAagctpC9Z2cyKylGmgFIudEO
JDgQkHNFNZO7cQPZSqzDbxD2UlrdyipgH/HadJHDZblpcZtpSBjt3eP+6pqKRaT+
KrY5BGMA+kK8k9cVdXYM1zsY0NkHrniG9VCRveaF80OXUVDuysvGQOHc6kSEmxb3
r2DTdxmLIDZocoYUU0rRm6RAD/lP9ynF8r9Rrc/sr2hrpYxrHShCHf/zqfknLI5t
KVeuf5bQ6dgHiIkeqrmplhhi3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpP2dym
pip2xg3N43Ldn9ap3273MB8GA1UdIwQYMBaAFKLNEKR+1yPhxItfUNaAz09n/LHT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BNDcwNzg1RTU3
NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9vczBRcEg3WEktSEVpMTlRMW9EUFQyZjhz
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29zMFFwSDdYSS1IRWkxOVExb0RQVDJmOHNkTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEMwRC9BNDcwNzg1RTU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9vczBRcEg3WEkt
SEVpMTlRMW9EUFQyZjhzZE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEh6vhKXlX0kxPsznSmagw6Rxp4mAgrjrpo2F88UYlJcn/l71BMXoPGmDp8F+
mTb+ozs9DJ/PSXRxNmr/u2fwnrLu0TY7zR8a+brH2P7BiBBTRblYtXw1q3zHwYTx
BAPb80EF7deTPhEnBF2kq/YN7cNKiZh+QHhtaSVPfTztrVpEVCkAz9XGWtPX5Ogn
vyjWu2LQ+RxnufCMT7wTB2rh/jMLbmN33IvtKtiFh6Zb47pAgz6z66ylm64CJEK8
f8QbAlal1unaNme0ANbIGTnEPXzwEodRbM0wbMynCvSwy0BeEQsJsW3a7r66c5D6
E2c/FUhuaJN2/EH2rQduxVGG1w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:21:20 2026 by rpki-client