
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
File: oL8weU5q5J7AaNUDjPmv9UNdHdI.mft (raw, json)
Hash identifier: ZqdJIoO4qEiemTE7P0nCcGXN7MAMyzKa2jkC3Uq5rik=
Subject key identifier: 82:D3:22:24:DA:EE:96:C4:B1:CB:25:97:54:2A:E4:3D:38:D1:38:27
Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
Certificate issuer: /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
Manifest number: A9
Signing time: Wed 23 Sep 2026 06:55:51 +0000
Manifest this update: Wed 23 Sep 2026 06:55:51 +0000
Manifest next update: Wed 30 Sep 2026 06:55:51 +0000
Files and hashes: 1: oL8weU5q5J7AaNUDjPmv9UNdHdI.crl (hash: z/PDmYESti/dFPvArzPuct3H3BtqHCnZB9G9JsL7ES4=)
2: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (hash: aZcuk92cPHBLPT7kL0kkLxHikI+2JffenZZL+WJEXRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Validity
Not Before: Sep 23 06:55:51 2026 GMT
Not After : Sep 30 06:55:51 2026 GMT
Subject: CN=6ab377f7-c8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:e9:06:ed:75:04:48:dd:d0:3d:be:7a:e4:
83:f8:f9:75:06:a3:4f:c9:44:48:06:b4:34:3a:5f:
27:1c:b4:94:19:65:2b:ad:69:80:25:72:ce:b0:c6:
f1:4a:cc:62:e9:e8:d9:a3:ee:9b:ea:3c:1c:ff:e0:
eb:03:2a:cb:a1:93:66:0a:e9:e5:dd:02:6d:07:dd:
c5:9a:d0:f6:60:e0:64:7f:e0:51:ed:e5:29:30:64:
fa:13:a5:4a:48:d0:55:89:29:b0:d3:2c:6d:65:58:
ce:08:0f:62:6d:79:3e:38:1a:4e:36:2d:f4:dc:3b:
52:7c:eb:27:72:e6:08:b7:c6:e7:02:ff:94:e1:c6:
e4:8e:69:ea:29:ae:af:c1:8a:63:c0:2f:d2:d1:9c:
70:d3:1d:a5:12:ef:a2:d3:6c:10:c4:96:fa:3c:2b:
8e:61:80:e2:83:22:9f:e9:62:f5:8e:cd:72:19:3d:
ba:23:e9:08:b5:97:d0:bc:51:87:91:dd:b9:51:87:
d0:66:69:ee:3a:2a:01:f7:7c:90:72:84:4c:17:5f:
7d:09:f6:3c:b1:fa:12:a9:78:38:d3:05:24:ff:24:
ca:98:c9:a2:78:17:63:07:ee:84:9d:c4:cc:2e:ff:
e3:eb:74:d3:4d:d1:c7:ac:f8:c4:51:5c:51:0a:cc:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:22:24:DA:EE:96:C4:B1:CB:25:97:54:2A:E4:3D:38:D1:38:27
X509v3 Authority Key Identifier:
keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:82:ab:f3:40:76:df:2c:3e:c8:c3:db:00:f2:73:9f:74:0e:
91:9c:70:18:70:fb:38:23:17:97:55:ec:77:62:52:40:8a:e5:
21:6c:01:f9:83:8e:96:00:e3:79:08:3e:7b:1a:b8:9d:7d:a6:
34:6d:db:79:20:e7:07:0b:c3:95:54:84:c3:eb:3c:04:42:81:
1f:53:3d:5a:7c:35:05:27:23:07:aa:c5:1c:5f:77:2f:0d:e5:
fe:6c:6c:5d:28:d9:28:99:28:77:66:6f:b6:0d:82:aa:cb:5b:
09:1d:51:de:95:8e:a7:72:2d:63:ee:3f:c0:19:4d:ea:1e:8c:
0f:81:e1:68:5f:9a:80:55:e3:bd:82:da:68:c4:c2:b8:4f:43:
c1:10:dd:94:9c:4a:c3:2e:84:f4:aa:8b:cb:73:c4:13:1b:07:
be:d0:1a:27:53:6e:40:7a:1c:b7:07:b9:b0:ca:b6:36:0c:9d:
35:2f:41:74:7e:7a:9a:89:0e:3d:cc:8d:4b:84:44:2e:59:9c:
9a:a4:f9:cc:27:25:24:b3:d1:20:6a:e9:0d:ae:17:99:63:b8:
a9:88:0a:14:56:af:82:27:93:41:f0:df:b7:7a:66:79:dd:c7:
7e:f6:34:73:2b:bf:c6:f8:15:f9:b1:0a:b9:61:92:2f:2d:08:
35:c8:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:39:23 2026 by rpki-client