
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json)
Hash identifier: EobTLPwV8M9nRCKUxK1xzLXwHmBXh+jnWnmaTdKMIns=
Subject key identifier: F1:70:1E:CA:A9:30:B4:61:65:1B:B8:20:A2:6A:01:88:09:46:22:9F
Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Certificate serial: 0BDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
Manifest number: 0BCB
Signing time: Sat 26 Sep 2026 19:06:51 +0000
Manifest this update: Sat 26 Sep 2026 19:06:50 +0000
Manifest next update: Sat 03 Oct 2026 19:06:50 +0000
Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: q0+M4FgUJgJdQr7Ah36qABPwzNXO+vMUdV9/ZJo4jwA=)
2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: /PARiH5eaZ2ETFC2Zi05FfcP/mxQcmCWaQAj9q8kZlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 19:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Validity
Not Before: Sep 26 19:06:50 2026 GMT
Not After : Oct 3 19:06:50 2026 GMT
Subject: CN=6ab817cb-8af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:ef:87:6b:a7:c1:dd:a3:e5:aa:19:f4:9a:
13:dc:24:7f:a8:dd:d1:a9:fc:62:2f:f7:a1:dc:87:
31:7a:f0:a5:2c:06:98:36:21:81:22:5b:f4:0b:09:
d8:b1:d9:56:cc:16:32:63:4d:2e:8f:2d:76:8c:50:
dc:57:9c:1c:c2:5c:ef:c0:b7:89:cd:ed:83:a2:c0:
4c:d0:1a:c4:8d:11:7b:1b:b7:3d:45:0b:6f:6b:46:
c7:ce:3b:95:05:3c:ae:41:32:6d:8c:6f:ba:dd:18:
b4:f8:ca:2a:cd:b6:59:42:1e:4f:2d:d8:9d:69:ac:
a9:b0:e8:06:e4:23:a6:32:12:cc:b3:8a:5f:e6:5d:
b4:7a:67:96:bb:90:ad:93:51:34:d0:a3:5a:5b:86:
c5:7e:eb:be:be:6f:f4:13:fc:db:ec:de:09:b5:bb:
c4:22:4e:b9:62:6b:57:fc:dc:07:bb:14:1a:38:08:
f2:34:6c:f7:1d:4f:ae:28:4c:5f:3c:6e:25:14:58:
fe:91:da:ac:d5:c5:84:3c:de:6a:b7:da:aa:38:de:
df:96:2e:88:85:e7:be:de:f8:64:36:f5:2d:81:a6:
90:16:ca:fe:0f:66:05:80:9d:c7:b0:49:48:cf:33:
8e:f9:d4:f0:bd:e3:23:3e:44:51:bf:e7:87:a2:f5:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:1E:CA:A9:30:B4:61:65:1B:B8:20:A2:6A:01:88:09:46:22:9F
X509v3 Authority Key Identifier:
keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:e6:c6:a5:63:08:29:2e:5d:2b:67:68:59:fa:8d:51:1a:91:
c2:d0:27:ce:45:5d:38:22:69:2b:f8:fe:ba:b0:fc:45:d9:46:
7f:52:3d:c8:be:22:4b:63:b2:ad:8a:70:23:53:ad:98:bb:31:
56:9a:cf:e1:9d:3b:27:d0:90:9a:26:43:02:1d:14:cf:1d:ff:
8e:68:38:fc:89:8a:bf:a2:6c:b4:72:d6:1a:b0:77:ab:75:b0:
db:88:26:04:10:17:a4:d5:d1:5a:6e:d6:e7:e5:1b:76:c8:c4:
4e:85:8b:47:aa:72:3f:c3:66:bb:dc:51:46:7d:f4:7b:0c:0a:
a4:46:7c:a0:a4:19:8e:75:99:17:f7:5e:4b:cf:50:3e:ae:ac:
8d:16:a4:7d:88:f8:1b:77:7a:7f:12:65:53:4f:26:6a:19:a5:
f6:f8:cf:7b:21:ff:d6:26:4e:f9:d1:83:b4:e0:72:dd:bc:74:
0f:ad:af:91:ad:43:fb:1e:22:a5:9a:96:e2:98:3a:52:60:14:
f7:e9:f6:cc:84:93:6f:a8:15:28:78:d1:58:1c:1d:ff:e8:6d:
64:51:2d:2e:29:44:67:6e:9f:b6:c0:84:3e:5a:5c:1e:94:1d:
21:6d:cb:55:a8:c2:9d:4c:d1:f5:a0:1b:c5:6b:46:26:c4:a5:
c7:e3:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:24:07 2026 by rpki-client