
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
File: otDn34iradtuBZowZOTdweb8nRk.mft (raw, json)
Hash identifier: DMBYEELO2Qzhic7Ff32F119VeUo7k0TzSui0uS5wKhk=
Subject key identifier: AC:0C:56:D9:05:16:A6:17:B7:BE:13:C5:56:24:C6:80:73:D3:47:40
Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
Certificate issuer: /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
Manifest number: 9E
Signing time: Wed 23 Sep 2026 07:04:46 +0000
Manifest this update: Wed 23 Sep 2026 07:04:45 +0000
Manifest next update: Wed 30 Sep 2026 07:04:45 +0000
Files and hashes: 1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: s8AL1PeTgr/ZlQ61G3P4YvlAdCkJIDI+rC4LVtOwKUQ=)
2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: TtYj2sjHiscSoHGcXukyvA6H2jH+qg3mM5AVrWsmoS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Validity
Not Before: Sep 23 07:04:45 2026 GMT
Not After : Sep 30 07:04:45 2026 GMT
Subject: CN=6ab37a0d-2ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:16:d0:7f:09:17:ba:51:0e:5a:0a:b7:8a:
55:c7:60:fa:b8:c0:17:9a:e6:d0:79:0c:7b:0b:8e:
fb:0b:a7:b2:e5:e6:57:98:b6:bc:9a:db:e7:38:ef:
7b:90:43:b6:f6:f9:47:49:8e:a1:b1:0a:9f:cb:14:
20:bb:f9:74:67:c5:df:dc:f6:f0:c0:6e:9f:3d:c5:
54:46:a4:87:26:92:96:0f:a6:3c:5f:03:e8:c4:ae:
c7:5b:e3:42:8a:d0:8e:f1:52:e0:32:73:1c:06:38:
da:21:bc:12:24:88:f3:55:55:90:36:4d:53:84:c6:
e9:fa:f1:20:21:95:dd:f0:4a:e5:47:41:8c:be:ce:
6f:d7:ef:74:23:2c:4d:e2:c5:60:a9:92:e0:f6:6a:
d5:47:6f:12:ee:2a:46:2d:63:47:64:dd:76:ee:2b:
51:48:6a:03:55:b7:cc:75:f2:d4:0d:2d:08:52:55:
af:9b:bf:0c:c1:2b:10:7e:d2:b8:c6:54:17:09:11:
7f:d1:fd:c7:10:c3:7f:d3:7a:e0:26:ee:05:b7:f8:
c7:30:a6:38:15:2e:7f:36:29:71:e8:39:1f:5b:28:
80:25:35:99:96:19:90:cd:d1:c3:06:01:5d:ee:c7:
97:e7:b1:d7:d3:05:90:79:fc:3d:cb:c7:80:24:3d:
cb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0C:56:D9:05:16:A6:17:B7:BE:13:C5:56:24:C6:80:73:D3:47:40
X509v3 Authority Key Identifier:
keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:db:bd:5a:c1:d7:4e:1a:ba:5b:06:48:45:4f:4b:f7:f0:24:
03:08:fd:9a:53:95:f5:47:f4:33:e1:c3:08:5a:9a:9d:e6:3b:
15:a5:8a:e6:1e:a0:f0:c5:e9:6b:cf:95:c7:6c:b7:40:53:7f:
75:ca:c0:12:d1:99:18:24:29:28:8d:40:ba:be:0a:f7:55:c2:
30:cf:4b:c8:92:5d:da:6d:4e:11:7b:6f:72:81:0e:df:f6:ed:
ab:6a:6d:2f:0d:61:e5:05:50:8a:cb:66:fc:77:c5:b3:2b:b5:
12:9a:0a:8b:47:31:91:99:bc:31:b1:3c:9f:05:ce:2c:68:b1:
30:a2:a5:62:7e:de:90:55:1b:f3:78:8c:fd:ce:2f:a0:37:9f:
34:b4:39:a1:53:02:fc:33:8b:a6:9f:14:b3:ce:b5:b3:31:35:
dd:e5:82:28:b4:be:e5:77:04:2e:2e:43:95:16:23:60:e5:f1:
ad:2b:97:5b:cf:27:db:b6:86:cb:09:c9:14:02:de:92:a7:d8:
84:be:f9:00:68:5b:42:50:65:8a:c6:c3:3f:9e:b1:61:39:46:
22:82:83:aa:5a:55:3b:5d:21:76:bc:c2:a6:01:09:cf:ab:35:
fc:2d:46:26:08:b4:1b:10:76:19:b8:28:36:36:cf:15:73:24:
9b:6f:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:45:53 2026 by rpki-client