
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier: p4xC8+MNzgFFduHXI5SbxcK0ZSRfSUiIN4Kz9qlOchE=
Subject key identifier: EC:25:4F:3F:D2:25:E4:52:0F:05:DC:40:7B:D3:52:45:11:28:0F:64
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer: /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial: 0862
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number: 084B
Signing time: Thu 24 Sep 2026 20:57:51 +0000
Manifest this update: Thu 24 Sep 2026 20:57:50 +0000
Manifest next update: Thu 01 Oct 2026 20:57:50 +0000
Files and hashes: 1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: MT7WkBguQv3cXeT1oPC2g3OqAgBdJRCrXqAWamjCxrE=)
2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: a8Wy1m3Rmhsdw7JgMn9q7U8Wx5LEB2V1AB0BFbhhHE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2146 (0x862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Validity
Not Before: Sep 24 20:57:50 2026 GMT
Not After : Oct 1 20:57:50 2026 GMT
Subject: CN=6ab58ece-65f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:75:ac:91:ae:2e:81:ea:b2:17:ef:56:db:
76:55:34:40:56:36:34:a6:fc:c4:11:3d:28:1e:e5:
5c:b3:b0:9a:6f:10:e9:2f:06:af:49:3a:d2:e7:26:
d5:ae:48:45:d3:d1:ab:e7:e1:cb:7e:f8:b6:b3:c1:
99:d9:a4:20:95:89:ff:2e:c8:10:c4:25:90:c0:c6:
01:ba:d6:6b:46:4c:2c:5b:0c:d6:60:26:29:01:ef:
7a:05:a7:f4:70:8f:97:cb:0c:35:d9:7b:42:4e:88:
60:24:f4:66:77:7f:0d:32:58:97:ff:8d:de:30:5b:
75:f3:0e:24:3b:9f:e9:73:ac:75:5b:23:e3:50:df:
9d:a5:bf:5f:0d:38:60:eb:98:5e:0d:d2:e5:bc:df:
45:51:1a:39:72:5c:15:10:f8:6c:ce:d4:4c:99:d1:
2e:97:ff:85:66:3b:0f:6c:3c:7a:1d:bb:99:ff:83:
2e:07:0b:e1:16:3c:e7:01:8e:04:b1:5d:5f:f9:8d:
11:38:94:0f:e0:22:a7:97:46:2b:55:ac:4f:e4:2f:
a6:03:8a:d1:cd:b0:a8:fe:6d:2c:38:21:52:16:2f:
a9:2d:83:38:73:3d:7e:db:c9:0a:15:52:67:fd:ee:
89:2b:23:d5:61:2b:f3:c9:04:76:c0:7e:e5:28:34:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:4F:3F:D2:25:E4:52:0F:05:DC:40:7B:D3:52:45:11:28:0F:64
X509v3 Authority Key Identifier:
keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:c5:b6:c9:f9:df:c2:77:3c:d9:f6:8a:c4:92:b9:f8:2d:3a:
2e:92:87:c3:f9:02:c2:77:b5:3b:30:7a:ea:f0:41:d4:74:e9:
05:01:8a:58:9e:2c:48:16:83:01:7d:1d:d8:8c:19:cb:ba:97:
b0:a2:2b:9d:92:b5:01:72:5c:f5:3a:4d:b0:b3:c1:cb:ae:1b:
0b:4d:f6:a7:94:82:e8:f7:e0:35:23:ff:b1:58:73:62:01:7a:
d1:27:fb:5a:f1:82:ca:41:8a:68:5b:d1:bf:d1:f2:9d:e7:f7:
ca:61:29:0a:be:26:03:4d:e5:05:3a:d0:48:d2:db:49:3b:75:
cc:c7:b5:52:0d:c0:5d:43:f4:ed:20:73:5f:6e:ca:f2:59:c7:
f9:8e:92:40:cd:b5:fe:d7:4c:9b:30:7d:9f:e1:00:26:bc:a3:
be:b6:27:0b:26:bb:af:ce:69:89:97:a0:12:c4:4d:a0:70:bc:
bc:6f:20:00:2d:ff:bf:25:62:98:17:d5:fd:af:cd:0a:da:ea:
03:57:55:96:6a:6a:b6:33:ff:35:3c:e2:0f:b2:0d:16:06:38:
af:31:a5:ff:a7:98:57:e8:95:c6:85:8d:cf:cf:14:4f:f7:68:
e3:67:56:75:e0:59:04:36:20:af:80:79:70:34:90:18:57:ce:
11:86:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:11:52 2026 by rpki-client