
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json)
Hash identifier: XDziaWZ/BaZnUYC48kUhi6nlVdozfF4146p4rj0AP6M=
Subject key identifier: 96:29:53:70:98:5A:FA:07:AA:0E:0A:A5:26:08:1C:03:CA:9D:E7:E8
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial: 0EC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
Manifest number: 0EA8
Signing time: Sat 26 Sep 2026 17:46:29 +0000
Manifest this update: Sat 26 Sep 2026 17:46:28 +0000
Manifest next update: Sat 03 Oct 2026 17:46:28 +0000
Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: RFsJwg73lhJa8tY0EtbxhMTJwJj4AfvE4bnTpXcOaQ8=)
2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: I42/yCc2sXng95yV5V9rJYMIeKVTpAqNcLtZHIVHLHg=)
3: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: gUZUG0XGqciwniJGSiDxz0DgvPWakTbupjgNjJySVdM=)
4: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: LK9lFz+9N11fqfPC0jVRHD9FeANyPw0tdvt1fpUzGLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3782 (0xec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Validity
Not Before: Sep 26 17:46:28 2026 GMT
Not After : Oct 3 17:46:28 2026 GMT
Subject: CN=6ab804f4-9791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:1b:96:46:13:66:d4:b7:f8:db:33:4b:c9:
d8:1e:ad:40:e9:fe:b7:af:78:b8:64:62:6d:a5:87:
23:bf:a0:51:43:aa:3f:1b:fa:72:41:a3:ad:c4:c2:
d0:9c:a9:1a:d8:5a:3c:40:47:b7:3d:f1:f2:c7:64:
20:15:17:20:6b:73:99:58:2d:c4:77:7b:ee:af:c1:
9c:e7:f7:b2:de:b2:f4:0c:d8:b3:04:9e:21:75:db:
5a:e5:27:c4:2c:bb:1e:f3:84:74:fc:d6:38:4d:73:
60:ae:6e:47:ee:eb:b8:fa:ed:c0:01:3f:17:e6:7d:
f3:14:2d:79:f9:a8:9a:2c:41:6a:2c:9f:fb:f5:45:
44:59:43:35:8a:7f:b5:fd:2d:59:c3:f2:18:2d:72:
e9:c3:1d:37:a8:99:25:e9:b5:86:06:f4:72:08:38:
de:84:73:f2:0b:d0:8a:5b:71:9c:02:74:45:16:ba:
e7:24:03:7c:94:91:71:ec:02:76:e8:1f:f6:60:6e:
4b:19:c0:fb:a7:62:fa:94:80:04:7e:74:3b:e2:39:
cc:2a:a1:df:92:f1:a7:96:a9:c2:b8:8f:bc:4d:39:
41:c2:e0:d0:b1:ac:f9:85:00:53:c6:b6:26:f2:13:
50:ae:4d:70:a7:7e:44:47:49:e0:35:f6:e0:28:93:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:53:70:98:5A:FA:07:AA:0E:0A:A5:26:08:1C:03:CA:9D:E7:E8
X509v3 Authority Key Identifier:
keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d5:92:9c:59:09:3d:26:25:e1:be:c8:80:b1:55:1e:1e:07:
54:a2:15:19:51:87:17:f2:d8:67:5b:dc:cf:6d:bf:2d:de:22:
9c:eb:23:c1:3c:6b:0c:d9:a3:b2:35:27:50:6c:07:22:6e:1f:
0a:d8:1f:cb:fe:2b:e8:40:3f:78:d5:4c:5e:eb:b0:40:9d:62:
13:47:dd:90:d4:8e:b9:ad:60:a9:34:c6:c0:cb:07:76:6c:95:
31:d9:0e:51:64:11:6e:30:8b:e6:8e:1a:e5:e1:86:88:f3:4e:
eb:7e:6d:d0:9d:d7:1e:25:96:b3:9a:4f:15:8c:c6:aa:3f:86:
d6:c9:1d:9c:ff:f2:c8:c6:8b:7e:b9:ff:e9:3c:ab:53:1a:83:
ce:32:c8:b9:02:ca:60:f2:b0:6d:3d:31:3f:bf:6c:14:e8:23:
26:43:c4:f4:f3:3b:3a:6d:9b:f9:ed:3d:07:a1:d5:f6:c6:e3:
71:70:ee:94:1b:f6:4b:ac:95:81:e1:94:77:16:2c:15:41:52:
00:30:da:a8:2f:42:25:4a:30:ba:f0:47:26:56:f9:51:d1:43:
16:c4:ac:2b:f6:43:3c:fe:0f:1a:be:99:c5:32:75:18:fa:43:
3f:d0:f0:2f:bb:5d:58:08:96:65:3d:a1:2d:0d:ce:a1:a4:53:
af:14:1b:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0
QzA4OUZDNTMwHhcNMjYwOTI2MTc0NjI4WhcNMjYxMDAzMTc0NjI4WjAYMRYwFAYD
VQQDEw02YWI4MDRmNC05NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmLQblkYTZtS3+NszS8nYHq1A6f63r3i4ZGJtpYcjv6BRQ6o/G/pyQaOtxMLQ
nKka2Fo8QEe3PfHyx2QgFRcga3OZWC3Ed3vur8Gc5/ey3rL0DNizBJ4hddta5SfE
LLse84R0/NY4TXNgrm5H7uu4+u3AAT8X5n3zFC15+aiaLEFqLJ/79UVEWUM1in+1
/S1Zw/IYLXLpwx03qJkl6bWGBvRyCDjehHPyC9CKW3GcAnRFFrrnJAN8lJFx7AJ2
6B/2YG5LGcD7p2L6lIAEfnQ74jnMKqHfkvGnlqnCuI+8TTlBwuDQsaz5hQBTxrYm
8hNQrk1wp35ER0ngNfbgKJPcGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYpU3CY
WvoHqg4KpSYIHAPKnefoMB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF
ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR
eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACtWSnFkJPSYl4b7IgLFVHh4HVKIVGVGHF/LYZ1vcz22/Ld4inOsjwTxrDNmj
sjUnUGwHIm4fCtgfy/4r6EA/eNVMXuuwQJ1iE0fdkNSOua1gqTTGwMsHdmyVMdkO
UWQRbjCL5o4a5eGGiPNO635t0J3XHiWWs5pPFYzGqj+G1skdnP/yyMaLfrn/6Tyr
UxqDzjLIuQLKYPKwbT0xP79sFOgjJkPE9PM7Om2b+e09B6HV9sbjcXDulBv2S6yV
geGUdxYsFUFSADDaqC9CJUowuvBHJlb5UdFDFsSsK/ZDPP4PGr6ZxTJ1GPpDP9Dw
L7tdWAiWZT2hLQ3OoaRTrxQbFw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:14:11 2026 by rpki-client