
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
File: OYN8tL7K9qYmyRaulgJBtgnmsgo.mft (raw, json)
Hash identifier: JGdp+miUnDZpSmP32KfnJZ/jIeDx/+9cmpiKGk4qNw4=
Subject key identifier: 9B:27:D1:E4:4E:10:ED:77:E7:C8:0B:B0:D3:E2:00:51:58:CE:0A:98
Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
Certificate issuer: /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
Manifest number: 0211
Signing time: Fri 25 Sep 2026 03:04:21 +0000
Manifest this update: Fri 25 Sep 2026 03:04:20 +0000
Manifest next update: Fri 02 Oct 2026 03:04:20 +0000
Files and hashes: 1: OYN8tL7K9qYmyRaulgJBtgnmsgo.crl (hash: rUPQ53ySiXZhjMc8KS5qOWz/5ZySmY3/96kG7nzl1tE=)
2: C635D41E611411EF9B00D029C4F9AE02.roa (hash: 8EuCC6GeDURLjyKUH1rweshuZkTUvieZrlzCd35Hwu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C3B7, serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Validity
Not Before: Sep 25 03:04:20 2026 GMT
Not After : Oct 2 03:04:20 2026 GMT
Subject: CN=6ab5e4b5-ff36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:7f:da:30:e0:ba:3a:e8:0e:60:66:ab:d1:
56:21:a2:88:74:9c:80:ab:68:96:04:d2:fd:78:e6:
6f:f0:be:9b:4c:fc:ab:cc:4d:cd:06:4d:f6:d1:47:
8f:5a:24:fb:7a:6f:71:37:7d:7c:fe:09:c9:2b:4b:
ce:eb:34:d3:bf:70:dd:ae:da:7d:5e:f5:58:db:2b:
3c:21:97:57:12:9d:5b:ba:45:cc:d5:4d:54:af:5b:
e8:44:da:48:c1:3f:f8:70:e7:c9:20:35:05:71:e8:
24:d0:4c:db:7b:80:92:da:b7:2e:9d:96:dc:8e:c7:
d1:73:c3:a0:10:83:99:38:3e:31:62:10:59:a3:a9:
8a:53:ae:c4:89:68:d3:ab:8b:09:df:7e:50:42:9f:
57:20:60:45:15:11:29:37:71:06:69:0a:e8:65:1e:
3a:22:0b:b1:cb:af:e4:2a:83:a9:c5:a5:46:60:35:
a0:d3:6e:91:66:29:f8:57:c7:cc:44:f1:59:44:19:
cd:f3:83:55:58:ae:4e:4f:2d:c6:45:fb:f0:bc:15:
d1:4b:32:8f:ed:bc:87:eb:de:72:da:89:4c:91:ce:
0d:c6:87:6f:04:01:0e:1a:7d:81:b9:14:e6:b0:d8:
e8:a9:1f:d9:62:09:f9:be:c6:3c:52:97:70:8b:52:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:27:D1:E4:4E:10:ED:77:E7:C8:0B:B0:D3:E2:00:51:58:CE:0A:98
X509v3 Authority Key Identifier:
keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e8:b9:97:92:46:ee:b9:09:95:47:c2:f1:4d:64:db:35:f1:
fb:b5:a3:a4:0a:ba:61:0f:5f:4e:48:74:d7:48:2c:d5:8c:33:
57:59:02:b0:bc:48:34:8f:db:48:d2:ed:13:02:5a:4a:e9:c1:
9b:57:e9:d8:98:d2:f0:e4:d4:24:37:e6:5c:57:74:16:03:d4:
a7:d6:f2:cc:f1:a0:4b:ac:f4:39:2d:4d:0d:78:cf:17:49:77:
94:93:38:fd:5a:d7:31:91:0f:a6:25:84:17:f8:40:c6:76:e2:
89:86:7b:4d:fd:6f:e6:51:c0:be:ea:c6:e7:c8:4c:7a:26:b9:
a5:af:d1:de:11:75:34:a0:9d:bb:91:01:89:ac:5c:4d:73:08:
f1:c0:48:25:e0:21:5d:f1:b7:69:30:31:58:75:63:af:d3:98:
4b:7f:8f:ff:54:21:45:b0:7d:e1:35:1f:5a:c7:25:be:59:44:
d8:db:49:2a:41:f2:4d:6b:c3:6b:5b:48:e6:4f:e8:15:e8:23:
09:85:8f:a3:1f:75:95:0c:bd:e0:1c:d3:9d:3a:43:14:c2:87:
c5:fb:cd:87:44:a1:dc:aa:a5:48:de:c6:56:a8:f7:40:d2:96:
97:3e:c5:f0:8b:1e:7b:8b:16:3c:8c:15:15:37:d3:e5:69:ff:
b9:5e:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:27:41 2026 by rpki-client