
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
File: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json)
Hash identifier: wkbiKtzlWDfwlWkdvT+iX5QJhdLCkPXXyDxB88zVLgU=
Subject key identifier: 8F:31:00:9E:9A:C4:AD:A1:3A:BA:8A:05:4D:92:1E:79:63:65:06:75
Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
Manifest number: 0102
Signing time: Mon 11 May 2026 06:15:24 +0000
Manifest this update: Mon 11 May 2026 06:15:23 +0000
Manifest next update: Mon 18 May 2026 06:15:23 +0000
Files and hashes: 1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: xJ8pVOxxdUPjLv07Mixo/ip+8LV4WUb+2SF4h2hqaYY=)
2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: hdlYLSviqdsjiISi2RWRWAEZ34QocD0U9ocvGaJFxhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Validity
Not Before: May 11 06:15:23 2026 GMT
Not After : May 18 06:15:23 2026 GMT
Subject: CN=6a0173fc-e8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:e1:1a:17:c1:65:83:cc:72:2f:eb:a4:37:
04:8e:5c:41:15:25:e7:3f:9a:51:45:88:37:36:04:
5d:e1:9f:88:4d:ed:92:6a:60:20:a9:77:57:3e:0c:
6c:d9:12:f5:59:58:dd:3c:90:bc:87:ee:aa:5c:4b:
3d:e9:b2:b8:3f:1c:5f:d5:c5:ac:00:f7:a7:c5:06:
9c:e6:0d:3b:1a:c2:13:1a:f6:59:1d:5b:ec:92:a2:
c5:7d:bd:93:a5:b4:0c:a0:45:62:d7:33:37:54:76:
e1:23:e3:c9:89:44:d0:67:50:d0:00:e6:53:7d:2a:
40:f3:a7:59:a7:a0:44:2e:d9:62:9f:f5:b6:ea:de:
a8:d2:98:ec:ba:08:bb:4c:82:9a:c5:13:13:f7:97:
08:86:9c:e5:94:e5:89:72:3b:29:9b:10:f3:72:2f:
7e:80:d0:01:27:a7:df:11:8b:96:46:4e:c9:ab:58:
64:62:53:58:6e:d5:30:9e:da:cc:c4:03:a5:7b:59:
6c:f5:fd:d6:31:67:88:c0:89:55:6a:2c:56:d4:18:
24:56:2a:e2:1c:b0:a4:0b:77:81:66:4b:bd:1a:a2:
54:85:f2:b6:09:10:e4:3e:e3:22:0d:94:9a:be:5c:
1e:f3:29:15:7d:ad:a8:74:f5:31:7f:38:42:bd:9a:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:31:00:9E:9A:C4:AD:A1:3A:BA:8A:05:4D:92:1E:79:63:65:06:75
X509v3 Authority Key Identifier:
keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c0:99:f7:aa:05:f0:89:b0:af:2c:8b:ff:6e:7e:94:25:2a:
27:b5:bb:65:cd:c6:3c:3a:18:5e:1a:da:80:ea:63:8a:83:6e:
2b:69:9c:8d:f1:2a:3e:9a:61:4d:86:c6:6d:61:83:72:e4:6d:
3e:62:a4:91:64:08:3c:30:91:39:51:22:09:6a:c4:68:18:55:
75:a0:e6:d2:04:b5:98:eb:a4:87:11:8f:75:76:e3:9d:e7:24:
74:c1:38:f6:41:72:4c:93:c2:a0:37:df:77:55:b6:2f:84:2e:
a7:f9:61:78:04:cd:40:b2:4b:1f:6a:aa:1b:9e:52:a3:65:d6:
eb:33:2b:88:fb:58:43:18:66:bc:dc:6d:f3:2c:62:03:0d:62:
a6:1a:81:e8:dc:eb:5b:95:db:b8:8d:ee:2d:55:80:66:e1:4c:
20:2a:cd:9d:20:b4:62:39:90:6b:64:fd:9e:f0:a6:3c:0c:10:
1f:c1:1d:91:a3:60:4e:24:83:83:74:9c:7c:0a:93:73:cc:55:
14:1f:6c:82:b0:d6:b9:95:2e:59:5d:6a:7d:ed:de:37:eb:b0:
52:98:88:b6:f3:2c:51:9e:09:ec:71:ed:11:59:71:73:a6:6b:
1e:71:b4:97:80:48:58:60:b3:4b:c0:cd:a8:5c:af:05:a6:9a:
78:ad:9e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:37:23 2026 by rpki-client