
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.mft
File: oSr_scTP4RQWBnP0ZldP_2n8iOo.mft (raw, json)
Hash identifier: hlEWtCL5PO2UQnFq/PbjyFKPQ86lhT0w5xS89Lx3ztA=
Subject key identifier: 9F:FB:98:62:9D:C8:81:1C:CB:0F:9C:FE:4E:15:C5:BE:94:7D:74:09
Authority key identifier: A1:2A:FF:B1:C4:CF:E1:14:16:06:73:F4:66:57:4F:FF:69:FC:88:EA
Certificate issuer: /CN=A911C34D/serialNumber=A12AFFB1C4CFE114160673F466574FFF69FC88EA
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSr_scTP4RQWBnP0ZldP_2n8iOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.mft
Manifest number: 04
Signing time: Fri 13 Nov 2026 09:24:56 +0000
Manifest this update: Fri 13 Nov 2026 09:24:55 +0000
Manifest next update: Fri 20 Nov 2026 09:24:55 +0000
Files and hashes: 1: oSr_scTP4RQWBnP0ZldP_2n8iOo.crl (hash: viIbYh5qstpAdWw+USBY5HjT4+QVRGTwW1eh5OjfJWg=)
2: 962D7238DCDA11F180597FA41366CEF9.roa (hash: oS+Jn4u/6S2099r9+7qgL1o4mkIh1f4TTnHojWyZlcw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.crl
rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSr_scTP4RQWBnP0ZldP_2n8iOo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 09:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C34D, serialNumber=A12AFFB1C4CFE114160673F466574FFF69FC88EA
Validity
Not Before: Nov 13 09:24:55 2026 GMT
Not After : Nov 20 09:24:55 2026 GMT
Subject: CN=6af6d768-3f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:ae:c6:6b:3c:73:0f:8b:17:b5:f6:d0:44:
50:89:5e:2d:a5:c4:f2:53:64:05:48:2c:c5:86:90:
dd:d0:a1:02:15:d4:cb:f7:c3:e3:d8:22:f0:8d:70:
e1:80:df:b6:b7:29:8e:6e:f2:c4:01:29:1b:a1:06:
de:53:73:b3:81:cf:bd:45:7e:d4:1c:6b:eb:fd:08:
f0:87:0d:50:11:e7:fc:66:88:05:5d:5f:26:27:65:
29:3d:07:c9:15:ba:07:44:d7:8d:51:bd:49:c1:6b:
f0:fc:7c:9d:cc:24:6f:3d:c8:ca:de:1f:79:b7:51:
df:10:13:fc:12:58:24:8e:47:8d:7c:32:d7:ef:e3:
2f:ee:10:96:d6:3c:a3:c5:00:38:60:d2:a1:27:b3:
50:22:49:cc:c7:89:b4:d2:8e:32:fb:0d:5b:f6:75:
72:2b:06:88:42:93:91:a3:e1:63:4d:3c:f9:62:c8:
5e:73:b7:0f:20:8d:d4:a4:b5:82:49:58:da:4b:53:
76:99:87:8d:08:fd:65:da:db:27:af:09:3a:1f:45:
13:76:2b:56:e0:a3:c2:4d:57:48:27:f3:4b:03:dc:
23:0d:16:3b:02:df:20:51:2b:28:6d:8d:1b:8d:ae:
a3:e7:37:1a:c5:01:29:bf:fe:93:13:64:bb:82:89:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FB:98:62:9D:C8:81:1C:CB:0F:9C:FE:4E:15:C5:BE:94:7D:74:09
X509v3 Authority Key Identifier:
keyid:A1:2A:FF:B1:C4:CF:E1:14:16:06:73:F4:66:57:4F:FF:69:FC:88:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSr_scTP4RQWBnP0ZldP_2n8iOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:69:aa:c9:e8:55:42:a1:59:93:c5:38:a9:f4:76:ec:b1:b3:
17:4c:7f:07:50:ae:69:ec:df:f6:c5:98:40:82:b4:3c:95:74:
07:2d:97:33:7d:08:3c:54:60:d2:58:b1:40:38:c1:2a:b0:ba:
d9:59:18:95:a9:67:63:f1:69:d9:ff:23:2b:d0:9d:eb:36:c8:
aa:ee:e6:4f:d9:7d:cb:df:18:cc:56:58:f4:09:37:8f:f1:4b:
65:73:55:ff:35:ae:18:78:a4:db:56:5e:fb:f6:0d:ff:d0:8f:
9a:48:ab:37:39:c4:ad:9e:fa:e1:3b:b2:ee:db:4e:e0:c5:ec:
7d:c7:e7:98:11:78:ee:6b:fd:f4:8c:b2:f6:a3:20:c9:9b:72:
0d:d7:00:6b:f5:9d:6b:82:ba:91:5e:7b:e6:3d:79:f2:5a:1a:
0f:7c:20:c5:c9:54:67:5d:fb:ef:85:c4:6b:c8:cb:54:70:73:
36:7b:29:79:1e:14:84:07:08:81:ca:8b:c0:19:2b:cd:44:7f:
05:a7:32:93:53:2a:52:b0:49:ac:7b:a6:70:db:9d:8b:29:90:
cb:cf:09:b1:ed:83:04:76:9f:58:b5:ad:34:e1:1d:71:79:a6:
76:70:5f:9b:5c:f1:a9:d7:95:11:54:ad:b0:93:c2:db:ad:71:
11:ab:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:05 2026 by rpki-client