
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
File: OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json)
Hash identifier: 2WB8/CFplpZvyBk8c0PUdW083lTSXFlxhLiViYAHRf0=
Subject key identifier: 6F:57:23:32:80:DC:CF:74:FC:CC:19:F3:C6:5C:35:5C:F6:C7:0F:5B
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial: 09A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
Manifest number: 1663
Signing time: Tue 06 Oct 2026 18:34:39 +0000
Manifest this update: Tue 06 Oct 2026 18:34:39 +0000
Manifest next update: Tue 13 Oct 2026 18:34:39 +0000
Files and hashes: 1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: Kb3KxmIS5bwm4/Wvi2tFDIvqfSWFyP1ou2OMscbJ98A=)
2: 1245956E2DB611F1B8EF9758A8833773.roa (hash: RDdwLCbOHRei4mq+xzV0XVNXkj7eeYuisNBVo4Pbaec=)
3: 4EF2EC842DAA11F181B163FBA3833773.roa (hash: RiW8QYb+ypRvsySpXIpMH3WQO3vwhG1+Rhs2YYcv/J8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2465 (0x9a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Validity
Not Before: Oct 6 18:34:39 2026 GMT
Not After : Oct 13 18:34:39 2026 GMT
Subject: CN=6ac53f3f-f40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:b1:83:32:33:7a:5c:11:c3:fe:13:49:ac:
59:2a:5d:44:38:3b:00:2e:0a:e4:12:67:0b:15:77:
b7:c0:4e:e4:5c:c2:50:1f:a3:9d:3b:91:2e:e4:18:
9b:b6:23:61:b2:34:e6:f9:30:e3:58:5a:68:1d:c6:
72:4c:fc:a2:e9:c1:f3:14:82:aa:fe:4a:6e:ad:c9:
cc:0b:fc:f9:dc:36:af:87:bc:31:f6:3d:9a:e6:c0:
5d:3f:a0:cf:58:af:19:2d:41:b9:84:d9:0a:e2:fe:
4d:2e:99:fa:88:74:14:61:44:fb:2c:fa:d5:f3:67:
ce:28:4c:20:bb:dc:2b:c1:79:04:42:06:03:6e:1c:
a1:1f:f6:ac:c9:3e:44:60:a1:23:40:51:db:6c:46:
39:67:69:cb:ca:26:f1:78:1a:d0:43:fe:11:1c:6a:
0a:d0:be:37:47:f6:ee:b8:25:6a:12:3a:9f:2c:70:
4d:96:2c:5b:53:5b:15:cd:d0:bf:66:aa:e2:91:e4:
60:da:b6:6d:51:08:cd:da:34:32:9a:6e:fb:19:48:
c3:ee:2a:6e:ea:cd:da:0f:ee:89:c3:8c:cb:9a:81:
05:64:66:ce:d6:e6:42:b7:04:b3:ea:6c:f0:3e:fc:
e3:77:64:5f:f7:7c:ed:65:e8:4b:10:64:64:fc:a0:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:57:23:32:80:DC:CF:74:FC:CC:19:F3:C6:5C:35:5C:F6:C7:0F:5B
X509v3 Authority Key Identifier:
keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:fd:62:ba:27:fd:67:c1:9e:14:67:81:72:bd:78:13:76:b1:
46:5e:a4:54:a0:1a:7b:23:21:4e:15:c6:db:45:2f:4a:69:97:
98:d4:25:9b:5e:f0:24:52:a5:93:73:99:20:71:db:00:df:5b:
7f:aa:2d:dd:8a:82:52:9c:8e:47:d0:b5:b8:60:02:37:80:9c:
86:f0:fd:61:d1:b9:6b:1c:2a:99:f4:72:12:d8:53:61:78:46:
f0:0c:07:cd:08:54:a0:13:c1:d2:20:51:a8:14:5e:12:3f:ea:
8c:2a:48:6a:52:4c:33:1f:b9:d5:18:99:fc:d7:27:24:30:91:
7d:74:c3:00:2e:c9:f8:6f:eb:2b:e9:da:4e:4f:21:e8:5d:73:
b4:5e:fb:33:fc:54:fe:37:3f:76:c2:7f:b2:0b:66:67:46:8a:
69:37:eb:e4:68:d1:91:27:aa:94:a9:88:7f:06:7e:ba:b6:ec:
ca:0e:dd:78:43:14:a8:1c:39:f6:0a:99:5c:2e:c7:b9:c8:53:
07:36:4c:0c:10:02:0d:27:61:44:c3:fd:1d:c8:78:29:3b:2f:
41:4b:8f:a3:a1:85:62:07:41:f2:a1:b3:bc:e0:0b:39:c9:75:
38:43:d4:b5:d4:7a:83:fd:27:a7:58:2f:39:dd:8e:2d:ea:ba:
8a:1d:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:27:35 2026 by rpki-client