
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft
File: OhNw-SlQCbrO8HHvmlT91w_RV1o.mft (raw, json)
Hash identifier: nTCzUibyab4W516bfERlM5qEv3fSw9685n4bRh7Q8Mk=
Subject key identifier: BD:3B:3B:6E:C7:1F:4A:DB:AC:BD:97:BA:DB:B1:1C:B5:5C:F8:9A:7F
Authority key identifier: 3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A
Certificate issuer: /CN=A916B889/serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft
Manifest number: 63
Signing time: Mon 28 Sep 2026 02:38:55 +0000
Manifest this update: Mon 28 Sep 2026 02:38:54 +0000
Manifest next update: Mon 05 Oct 2026 02:38:54 +0000
Files and hashes: 1: OhNw-SlQCbrO8HHvmlT91w_RV1o.crl (hash: msiC0+URqVr4xwLGGmUlKyfsVOfpR2vGfXy4OfW617M=)
2: DD9D275A272A11F1AB1203E5AA833773.roa (hash: anG8mjPCe+gcYm3kp5C5iVeJAFEjW4WqpjQcSNgoVCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl
rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 02:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B889, serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A
Validity
Not Before: Sep 28 02:38:54 2026 GMT
Not After : Oct 5 02:38:54 2026 GMT
Subject: CN=6ab9d33f-64e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:f7:fe:f8:c4:db:44:14:b7:cc:7f:a6:20:
b3:60:f3:d8:ad:1f:df:31:0e:1a:0d:ce:5f:9c:de:
5b:71:37:7e:33:2f:cf:1e:8c:6b:ae:02:82:a7:30:
a2:09:d8:2e:1a:6d:76:89:ae:1e:2c:c0:bd:86:5f:
b8:5d:86:d7:a7:36:90:d0:c4:18:af:99:a0:50:10:
57:ee:a5:0b:61:90:34:70:c3:a3:84:9f:4a:19:0d:
7a:c3:1b:6b:6a:99:10:c5:f3:99:9a:a6:dc:9d:b1:
ad:a9:dc:78:71:d5:de:49:67:53:e7:d9:78:d3:00:
28:34:c3:f5:1c:2a:bf:e6:c4:7a:fb:75:7a:29:59:
6c:3d:cd:19:71:17:25:74:f8:5c:96:96:2b:e8:c6:
b0:b0:79:a6:2b:69:0a:c1:ec:6d:17:05:c1:dd:d0:
28:67:3d:c9:3f:f6:c4:c6:75:dc:97:b7:73:82:66:
f1:f4:e4:22:44:1e:51:65:4f:6a:d3:5c:64:e7:57:
58:36:c6:d0:d9:64:ab:1c:5a:66:ca:6c:2b:05:e0:
f3:f9:19:51:69:2c:e7:41:71:4c:a0:e5:a9:53:46:
da:8f:f7:76:f6:f0:07:03:e9:3e:51:f7:3d:92:dd:
43:ba:2d:e5:a6:d7:21:df:35:43:16:fd:ca:67:d4:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3B:3B:6E:C7:1F:4A:DB:AC:BD:97:BA:DB:B1:1C:B5:5C:F8:9A:7F
X509v3 Authority Key Identifier:
keyid:3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:49:8b:29:2a:9a:f8:5f:05:81:c1:2a:18:23:47:be:4d:20:
e0:43:2c:f6:75:76:ba:9d:00:4b:41:8b:00:1e:5e:ac:64:be:
be:5a:40:5c:e4:a0:15:e2:ca:e9:9a:f7:fc:95:82:bb:ea:40:
85:13:55:01:7a:5e:ac:d5:e1:fd:e9:ca:14:ed:5e:15:69:e3:
a6:5b:2b:e8:ef:27:e9:6e:6e:0f:e8:bc:f6:26:74:6c:80:dd:
17:27:0e:0a:58:4c:f7:a4:5a:f9:70:a1:77:2d:b6:8a:ef:24:
e7:0d:5b:38:fc:6e:14:0c:18:fc:b4:a3:00:5e:07:fb:f2:c3:
fe:24:8b:4f:cf:89:92:74:de:e3:1c:06:ea:b9:8e:a5:4d:65:
c0:2a:a4:e0:bc:22:c3:8b:00:97:18:53:44:a1:05:69:9c:68:
9e:a5:01:22:51:73:15:f1:be:c1:54:9c:45:3f:f0:4b:a7:5b:
e3:3b:fa:ba:4a:7f:0b:83:0c:00:2f:18:0b:7d:0e:7d:4e:5b:
48:82:62:e5:39:42:6a:20:d4:41:53:67:63:c7:0c:23:2c:90:
9a:d7:7e:43:5e:73:27:a7:66:95:c8:be:25:d4:99:34:1c:77:
6a:fc:94:23:2b:fb:7d:fe:b1:eb:1a:38:37:b4:9f:c2:0a:9c:
de:44:37:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:46:27 2026 by rpki-client