
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
File: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json)
Hash identifier: g1zAi3LPwgZe8t9aewHBigfXHzoXu4QAFeZlpNzIAjM=
Subject key identifier: F6:4F:32:2E:59:EF:33:92:66:EE:EC:EF:15:8B:83:76:43:47:55:CD
Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
Manifest number: 01BE
Signing time: Fri 25 Sep 2026 04:00:18 +0000
Manifest this update: Fri 25 Sep 2026 04:00:17 +0000
Manifest next update: Fri 02 Oct 2026 04:00:17 +0000
Files and hashes: 1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: 8lRcJFm3cEqlvDBVjtS+lCLziplMNyKg4ddYbyEUjJ4=)
2: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: bBRgeoJFOTsw5hp8kgYYTkK5TSUnK2Vy5m1Wc3Y7a1U=)
3: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: zqlfy9HVkC0tWWkbY6EOJGv08eFtviVe1xJwivkGFv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Validity
Not Before: Sep 25 04:00:17 2026 GMT
Not After : Oct 2 04:00:17 2026 GMT
Subject: CN=6ab5f1d2-dcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:d7:fe:24:e4:60:19:e4:fd:8e:68:6d:ac:
96:9e:b3:6a:1b:a0:5d:1e:95:09:7f:f1:b9:1d:b5:
f5:a4:1d:07:21:0b:40:d9:8d:a3:59:53:58:e3:36:
53:c7:95:80:b6:43:81:b9:43:32:52:47:b9:a0:91:
0c:1c:ef:73:cc:06:54:a5:1e:f6:8f:fc:c1:55:04:
32:d1:3a:c1:05:9c:59:8b:3a:47:1b:ac:92:82:1a:
44:21:65:58:db:d8:72:1e:e8:e7:31:a9:ba:e2:2c:
77:8c:8a:78:e0:95:bd:4f:68:ac:3e:a0:ea:93:f0:
e7:36:3e:f9:94:82:d7:d2:f2:92:80:39:50:90:d4:
8b:be:44:dd:2d:ee:31:28:d2:e0:75:26:36:e6:13:
c6:4f:62:9c:ab:37:48:34:bf:48:4a:4a:f7:e6:78:
7b:50:33:8e:d9:48:9c:7d:2d:a8:c5:72:f0:56:78:
f2:eb:38:d1:05:1e:15:c9:ac:0a:8c:51:5d:6f:01:
c3:04:08:e3:fa:72:47:f6:b2:20:46:48:99:fc:2f:
84:b6:a1:be:29:b0:dc:75:c2:ba:2b:cb:a2:a9:ee:
f6:4b:1d:b9:bb:30:91:9b:f0:64:bf:78:02:7b:f0:
97:f1:f6:4e:82:a3:ff:d2:56:01:45:65:f0:93:c3:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4F:32:2E:59:EF:33:92:66:EE:EC:EF:15:8B:83:76:43:47:55:CD
X509v3 Authority Key Identifier:
keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:70:fe:5b:f3:0b:c7:60:ef:93:44:10:c4:7d:a4:6b:17:e4:
76:62:ec:42:da:7f:9c:fb:3d:63:50:8b:cb:e1:d3:e6:91:12:
3c:36:c8:40:78:59:90:e5:51:c7:f6:41:45:96:de:ed:89:1e:
13:8a:e5:89:4f:ab:97:15:5a:e9:bd:e9:27:6d:80:6d:e6:27:
58:7e:5b:11:30:f9:3c:60:ba:52:06:7b:29:56:4d:71:3c:98:
f0:b6:a0:cf:d5:f5:76:51:4e:63:4c:a8:c4:1d:66:94:e9:d2:
42:c0:30:36:38:22:32:1a:00:cf:29:17:44:ba:6e:27:1d:b2:
e8:2c:30:04:84:c3:f7:0e:04:0b:a7:14:cd:6c:d7:11:12:b7:
9d:57:11:ad:b3:e5:2b:d2:e8:62:70:66:2d:9b:c6:f9:1c:33:
54:f7:80:17:c5:db:9e:ac:e8:41:6b:4f:c4:88:b0:d1:6c:ac:
51:63:b0:c4:fb:ad:6c:0c:b1:6c:21:e4:6e:e0:0c:4c:c4:70:
e6:52:6f:e6:ea:47:34:d4:33:29:04:16:ff:39:11:64:bf:61:
80:83:aa:54:39:ac:7a:64:fd:28:54:c8:b6:a8:28:df:25:c0:
76:08:3b:fd:af:e3:cf:41:10:1e:a8:a9:73:bf:3f:d8:ff:bb:
29:67:c7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:07:19 2026 by rpki-client