
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
File: OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json)
Hash identifier: qVDgbkz4y6pBDXp5oD3D1+XJtTHsmyemcPQ27OSTylY=
Subject key identifier: 71:81:06:9F:7F:FE:99:BE:05:5C:4F:E9:DC:8B:74:96:3D:AE:88:55
Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Certificate serial: 077D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
Manifest number: 076B
Signing time: Thu 24 Sep 2026 21:34:45 +0000
Manifest this update: Thu 24 Sep 2026 21:34:44 +0000
Manifest next update: Thu 01 Oct 2026 21:34:44 +0000
Files and hashes: 1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: TyCDTjtKBng8ShH3LY6d0FuKDF2Z34HLah9CZ6/PfDA=)
2: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: dXlGJvljbOTRyiUKcUkx49BNHkG/wuJwIqZ/bk6onnk=)
3: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: cPeYwDdd00kAIVqMVLrluyBHMf7E83NSh4S72gm9IyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl
rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1917 (0x77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Validity
Not Before: Sep 24 21:34:44 2026 GMT
Not After : Oct 1 21:34:44 2026 GMT
Subject: CN=6ab59774-7a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:40:76:36:ca:41:0a:c5:04:14:fd:e0:dd:e8:
2b:39:a0:be:3a:8c:1c:40:02:d6:7e:a5:72:14:d1:
64:57:81:04:1c:b9:6e:e8:ee:a1:3a:3a:64:93:2d:
4c:03:1e:a0:0c:d8:19:d9:fe:64:c8:73:c6:a0:ad:
be:87:1e:af:1d:db:1c:f6:82:10:43:6a:c8:26:17:
da:8b:02:88:9f:88:45:c5:2a:20:6f:ce:be:57:f6:
91:c0:a4:31:a1:3c:1b:f6:1e:0e:97:d2:de:39:1e:
b5:c4:bd:88:6f:69:82:76:14:c9:34:10:74:40:13:
7d:3c:18:5b:d2:81:87:d2:14:cf:ca:94:5e:70:c3:
ef:a0:ea:81:bf:ce:79:88:53:74:28:61:ce:68:94:
fd:d1:d0:e9:4c:62:3d:d2:22:12:79:6a:4e:f3:98:
23:9d:fd:53:76:f1:f7:ef:57:ff:70:30:10:bc:96:
39:1f:94:56:3e:25:3b:bc:b4:c3:67:0a:3e:4b:93:
1b:41:86:aa:bf:1a:13:6b:8f:1e:ed:f9:6b:41:df:
42:58:13:13:e3:a8:6a:f3:d2:39:07:bd:cf:91:90:
e2:e2:b1:dc:3e:39:5f:c1:07:78:c5:0d:37:e4:ca:
9f:a2:7d:4e:1f:a5:d8:0f:fb:86:f7:f2:8e:3d:14:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:81:06:9F:7F:FE:99:BE:05:5C:4F:E9:DC:8B:74:96:3D:AE:88:55
X509v3 Authority Key Identifier:
keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:47:ac:c3:c1:9f:3e:b1:c0:fa:c4:d4:5a:80:e1:18:7e:8d:
a1:a0:33:aa:ba:67:e1:3f:bd:61:a7:80:f3:e2:ee:e2:0a:32:
ca:5c:02:90:f5:e9:d8:46:93:25:7e:53:50:04:b2:2e:e1:12:
b4:46:18:3f:57:43:3e:b6:a8:7b:ce:ae:75:a7:be:b5:18:dd:
b4:88:b1:20:06:49:1f:e9:8a:ee:57:1b:e2:5f:46:f1:51:33:
56:e7:4b:d0:41:e6:79:c1:35:ba:5e:df:58:28:5a:ad:f5:03:
ac:2e:25:01:7e:4a:dc:a6:33:8f:73:14:aa:37:6c:61:da:6f:
dd:08:da:f4:42:5f:9a:fe:44:9c:56:71:eb:8d:b1:d6:f3:04:
4f:92:54:7c:96:23:64:1f:2a:54:32:06:a0:d4:62:6d:9a:21:
67:7d:aa:57:09:96:6d:0e:05:54:f2:30:bf:5f:33:d9:4d:03:
41:9e:cc:4c:04:d7:b7:c9:2c:01:74:77:7e:b6:eb:fc:80:ce:
98:34:00:80:23:00:27:f4:3d:d9:b5:dc:e4:24:81:b5:15:cc:
ca:03:31:e9:7c:19:7c:d2:ba:9e:f6:f4:e6:6b:ff:2f:15:22:
e2:04:f4:29:a3:ee:41:d5:dd:9c:24:a8:d3:3d:23:a1:5a:97:
8d:46:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:32:09 2026 by rpki-client