
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json)
Hash identifier: pHhnRCZvY/zIC1i2CncLYYBGJik2GXRHOkO6t7wb33I=
Subject key identifier: 1F:88:57:D8:4F:CD:73:E5:13:08:10:F1:F1:BB:EF:3A:4C:A9:39:59
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
Manifest number: 0169
Signing time: Wed 23 Sep 2026 04:46:33 +0000
Manifest this update: Wed 23 Sep 2026 04:46:32 +0000
Manifest next update: Wed 30 Sep 2026 04:46:32 +0000
Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: JO0x3jDqMbkum+fnZ/GCVj94kMWodr9QtzFebs6K5EE=)
2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: tfiaKNp+pGPKNwRyzqNWpYJfVlj5qFTe6lmSja9GxH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Validity
Not Before: Sep 23 04:46:32 2026 GMT
Not After : Sep 30 04:46:32 2026 GMT
Subject: CN=6ab359a9-48ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:ab:bb:95:bc:da:69:f4:69:30:47:48:02:
8f:60:dc:8c:4d:e2:75:e8:27:4b:0b:df:62:9b:9d:
59:ee:b5:04:e6:47:4d:3c:47:9f:5f:8d:81:77:86:
2f:f7:d8:43:55:78:98:b8:ce:12:af:d7:2a:30:e2:
e4:97:72:2e:f8:77:e7:6d:de:ee:f2:59:14:a0:1d:
4b:4f:45:7c:78:43:6c:64:33:c3:a3:a4:09:6e:f5:
1c:ef:47:bc:38:2a:4f:66:27:81:dc:59:81:38:6a:
33:fa:34:87:8d:17:de:67:5f:32:aa:30:d0:8c:4a:
e8:2f:09:25:32:30:b6:2f:f3:fe:9e:20:f7:5c:28:
e9:92:23:bd:c2:4b:72:ca:6d:01:93:04:a9:91:65:
2a:00:1b:4b:36:b7:3a:71:8a:d4:df:31:8e:ad:a1:
34:be:ab:eb:bd:dc:db:65:ac:c1:ca:05:98:a7:da:
3d:6f:a1:c9:1d:34:49:2f:5e:79:41:bc:7d:e3:fd:
e6:1a:6f:84:7c:7b:40:fd:4c:14:5e:1b:63:cc:36:
47:9a:b4:19:67:97:b7:38:70:01:f9:ce:99:97:f8:
d7:1a:e7:aa:db:8d:a8:2b:26:1d:36:2e:3b:c5:58:
5e:1c:b8:17:31:4d:c5:d0:4c:48:ac:7e:bf:f1:fb:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:88:57:D8:4F:CD:73:E5:13:08:10:F1:F1:BB:EF:3A:4C:A9:39:59
X509v3 Authority Key Identifier:
keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:de:aa:3a:ce:32:1f:a3:08:25:94:cc:13:0c:56:2b:49:49:
97:27:62:9c:b6:25:76:3a:42:a8:b5:5d:b0:46:18:35:39:99:
71:ee:6b:fb:f3:47:6c:8b:bb:53:6a:c8:6e:01:b0:fb:df:b4:
6f:b1:12:8d:b6:00:f5:ce:34:a1:9f:1b:56:c9:4e:84:b4:06:
f3:06:c2:4f:8e:31:ac:f5:6b:99:49:34:f7:e7:c3:c8:22:4b:
99:e3:fb:96:54:73:18:ad:1c:18:fc:b5:02:af:d5:f5:7b:7a:
53:82:d7:76:f9:ac:ef:12:db:15:77:ad:8b:40:d0:50:c8:21:
e7:b5:6c:7c:e8:4e:9a:bc:78:d8:65:15:32:db:ba:9d:e6:de:
7a:1e:a9:0c:fe:82:8d:ef:91:22:5c:0a:ff:d4:cd:6d:1f:1d:
02:71:df:f2:56:35:2b:83:5d:e6:a0:b0:3c:4e:49:7f:31:5c:
7b:db:e8:c1:39:20:b8:62:31:ba:86:97:c4:3a:7e:38:c4:bb:
83:54:c6:35:86:ba:92:b8:ba:8b:1d:41:89:74:fe:a3:58:9c:
b8:12:d3:86:a6:fe:56:54:c5:b3:a1:a1:cb:cf:8f:5c:f3:c5:
a5:fb:bb:34:d9:4b:8b:26:37:90:09:1e:a9:28:22:69:79:0f:
e7:31:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:59:36 2026 by rpki-client