
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
File: oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft (raw, json)
Hash identifier: Vk/yQ8rclSyU2t0oTAwOdTaw02v8K649Y/vWwn1s2CQ=
Subject key identifier: D8:2B:59:EF:51:2A:9E:0A:7F:65:C0:9B:55:C9:DE:1D:1D:F8:47:DA
Authority key identifier: A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F
Certificate issuer: /CN=A9159558/serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
Manifest number: 50
Signing time: Tue 29 Sep 2026 08:54:22 +0000
Manifest this update: Tue 29 Sep 2026 08:54:21 +0000
Manifest next update: Tue 06 Oct 2026 08:54:21 +0000
Files and hashes: 1: oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl (hash: DAL+I8+YEqTyJQxcv9Da4APkPguWyy11Z+ysiiEkGVs=)
2: C8482E4C435C11F18454B6E5B6833773.roa (hash: kpOLgyl4KEGTvF971USy71Gh3dYWWDj9RJbZtYOEjJg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl
rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 08:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159558, serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F
Validity
Not Before: Sep 29 08:54:21 2026 GMT
Not After : Oct 6 08:54:21 2026 GMT
Subject: CN=6abb7cbd-6bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ad:1a:95:06:84:f6:cb:57:eb:a3:2d:b8:ee:
21:84:ae:97:36:b4:62:7c:be:91:e8:8b:60:17:02:
9f:1d:69:8a:16:80:47:1b:77:29:16:53:31:09:c4:
40:83:10:2b:8e:08:c3:af:ed:ae:bb:5c:60:86:95:
9c:1e:be:47:9e:00:3f:70:91:89:62:d1:9d:b0:f5:
15:60:d3:07:62:9b:a0:f1:2c:a5:79:53:c7:ad:ac:
cb:f7:93:01:1b:d8:98:3f:cb:bb:8e:af:a6:f8:17:
30:46:3f:95:2a:dd:56:cf:9f:64:d6:8d:b9:cd:b9:
ce:b1:fe:6d:ed:3e:c9:e1:b6:95:a5:62:10:35:52:
db:dc:20:58:e1:22:11:28:2b:bc:0b:a1:61:62:0c:
f4:f8:92:a6:13:6c:bb:31:eb:ec:92:3f:4f:c7:02:
04:ac:3c:61:14:0f:63:b3:ee:2e:32:ec:4f:27:e8:
c8:07:8d:95:ea:35:3a:7d:e0:56:2e:b9:b3:e5:3b:
7b:8f:f9:12:89:f8:e2:2c:80:d1:b6:80:17:71:1a:
06:e9:e8:14:0c:63:ba:77:b2:14:c0:5a:7c:99:3e:
b8:4b:4a:ac:94:b1:66:b1:ea:f7:0d:30:d0:e6:13:
58:5c:66:de:14:3f:0c:a6:56:bc:69:67:66:d2:e3:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2B:59:EF:51:2A:9E:0A:7F:65:C0:9B:55:C9:DE:1D:1D:F8:47:DA
X509v3 Authority Key Identifier:
keyid:A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:4a:86:13:34:8c:dc:8d:07:e3:2a:18:6f:6b:d1:2e:db:c6:
da:e4:4a:1c:d1:30:98:5b:8e:55:21:99:6a:22:ab:06:01:f9:
e9:32:6d:a4:54:60:62:14:e3:ed:3c:a9:f2:2b:35:b5:bd:b1:
88:d8:2a:9c:1e:6a:23:75:f0:11:81:98:37:83:88:ae:42:03:
24:08:d5:5d:1b:b2:a0:c4:e9:87:3e:aa:ca:3b:8c:eb:26:aa:
53:5e:78:a3:88:70:f9:70:8d:2a:07:2e:22:07:85:9e:b0:c2:
bf:a2:2f:23:cb:9e:03:c9:8e:a1:5e:e3:c6:76:38:d7:8c:35:
1d:47:dd:19:e3:3b:e6:57:60:a1:76:9f:53:b0:17:f3:2e:ea:
29:94:82:27:8a:c5:3b:75:28:34:f3:54:86:65:2d:a2:40:04:
5c:fc:4d:a1:da:77:8e:93:67:50:ce:b5:00:c3:dd:6b:b3:7a:
5f:2d:d3:91:58:07:db:29:4a:b3:48:a9:0b:a4:45:af:83:3b:
8d:8b:ad:7a:87:3d:79:8c:50:19:0d:6b:8e:50:85:08:a8:99:
81:c3:88:67:06:80:0d:26:b9:90:11:d9:9d:f7:53:28:74:76:
f2:10:18:97:f9:2c:fa:11:4c:00:37:fa:4d:c3:5d:6f:aa:f2:
b4:70:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:27:11 2026 by rpki-client