
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json)
Hash identifier: JT4gZwXL+TT6zVZRkPUGziaX6Hf8Js/0EaxJt3hxAj0=
Subject key identifier: 96:0E:FA:BD:0D:0F:0C:B6:13:0A:C6:55:E1:7E:69:91:76:CE:C1:6F
Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Certificate serial: 06D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
Manifest number: 06C9
Signing time: Tue 22 Sep 2026 22:01:52 +0000
Manifest this update: Tue 22 Sep 2026 22:01:51 +0000
Manifest next update: Tue 29 Sep 2026 22:01:51 +0000
Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: OhbcL21o+HtXEmlBu2hzzjt39u1iVXn1nAIGHXPgREc=)
2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: ETTw2SEEobVWxIz7yKusXFe+sIcU4ZIILVbUS/jTLZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Validity
Not Before: Sep 22 22:01:51 2026 GMT
Not After : Sep 29 22:01:51 2026 GMT
Subject: CN=6ab2fad0-3a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:4b:e3:e2:1f:dc:7a:b0:fe:4c:ba:94:5f:
d6:25:ab:07:c2:63:f7:f6:cf:f2:e5:d6:3b:4c:34:
a4:ee:fb:fc:2d:ed:de:b2:67:d3:70:9b:c4:1e:37:
98:61:56:b2:0d:3c:44:a1:27:b0:f6:47:f8:53:6c:
1c:15:69:c9:1c:a7:4e:23:de:ba:bb:a3:0a:5b:d4:
ca:a1:96:39:6e:cd:0f:c8:e6:c4:0a:02:cd:28:16:
8f:a9:71:d3:75:6b:71:dc:be:fc:59:72:cc:1a:b9:
4f:4e:b4:b1:73:3e:c7:40:82:40:0d:2f:73:fd:20:
25:22:8e:01:09:d5:c6:d5:e1:3d:3f:4f:62:b8:d5:
89:de:fb:0f:1b:ac:c3:2f:b6:72:e8:ed:4f:cb:99:
b6:5d:81:c2:6f:54:8e:e4:7f:d1:b2:25:38:4d:b3:
93:5e:39:9f:5e:21:ce:89:b4:13:ba:67:2a:81:2b:
e1:fe:8d:cc:0a:4d:74:13:c2:4f:0d:2d:bb:dd:40:
d4:1f:f4:46:6c:9a:d6:e5:0b:5b:76:f0:bd:40:81:
90:ac:4e:8d:60:e4:76:74:08:38:62:c3:27:cd:a4:
70:e3:9f:17:1f:9b:21:91:ca:55:31:b8:8e:de:49:
76:95:60:13:78:38:a1:0f:c1:f5:f7:8a:77:fe:2c:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0E:FA:BD:0D:0F:0C:B6:13:0A:C6:55:E1:7E:69:91:76:CE:C1:6F
X509v3 Authority Key Identifier:
keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:77:98:69:ea:54:b9:db:5b:98:f9:88:0d:19:a2:db:d7:f2:
0b:c2:ed:65:2a:f5:37:f2:c1:12:3e:9e:df:8a:16:1d:7d:44:
a8:4f:dd:cb:77:dc:df:76:d2:9f:54:1e:91:21:39:a7:5f:ce:
f3:cc:17:ef:bd:7e:18:0a:ec:94:db:18:7a:8f:7c:08:fc:92:
f2:b9:e4:85:17:12:55:43:ba:1b:99:21:a4:8a:12:c5:3d:0d:
21:b3:0c:56:24:e1:c2:11:74:0e:f7:65:d0:94:64:c6:fa:f1:
03:36:35:76:56:ab:09:29:fe:12:e8:e4:b4:30:1f:99:8e:5b:
d4:46:73:cd:41:52:db:52:56:90:64:44:ac:08:19:4d:64:11:
66:4c:3d:b6:d4:fd:96:46:a1:12:2d:4e:bf:70:bb:6b:21:39:
02:62:90:03:13:92:df:6f:c2:34:7d:0d:ee:72:bc:8f:27:8a:
d5:24:df:2c:31:62:3f:83:74:22:e1:28:76:13:11:1e:f7:29:
b4:ce:18:9d:87:70:f5:3d:4d:4c:3f:cc:be:8d:5c:aa:8a:48:
0b:80:bc:86:7c:ac:4c:cb:9d:3b:7b:74:1e:f6:17:af:cb:80:
64:a5:1d:fd:2c:58:a0:ae:a7:6a:0d:6a:49:e3:ee:6d:ea:78:
eb:4b:74:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:40 2026 by rpki-client