
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
File: o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json)
Hash identifier: 5h9kfI1Ezl90YbzfmZRwQ+d3o9kuO5lKPGEeKGN1d4s=
Subject key identifier: DC:3A:31:B4:64:77:C8:B6:17:19:77:F7:40:6A:9E:36:51:47:52:07
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Certificate issuer: /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
Manifest number: 01BD
Signing time: Thu 01 Oct 2026 04:52:21 +0000
Manifest this update: Thu 01 Oct 2026 04:52:21 +0000
Manifest next update: Thu 08 Oct 2026 04:52:21 +0000
Files and hashes: 1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: 8osn0Omkq88JlUkNsKjFAEY9wH9Ky4h/uD7Zlc+MliY=)
2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: E+4dNZzrdNIAmtr7QQVR714FjR1jDehtxZlaTTYgGhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 04:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Validity
Not Before: Oct 1 04:52:21 2026 GMT
Not After : Oct 8 04:52:21 2026 GMT
Subject: CN=6abde705-2a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:84:a8:be:b6:b7:65:07:62:38:0b:73:b0:
84:88:53:bc:1d:37:fd:d2:91:b1:89:bf:24:c9:04:
d1:c9:f2:b6:7b:60:75:54:ff:4d:c3:b7:57:9d:a2:
94:e3:22:dd:4b:34:9f:ee:41:30:d7:27:d1:9d:68:
2a:07:59:35:57:62:95:c4:bf:95:06:c0:50:5e:54:
c7:a3:e2:ef:9f:b0:f6:b5:1c:02:3a:9b:46:49:cd:
1f:78:e4:a1:92:41:df:f5:d0:4b:25:8c:02:c9:00:
27:fc:14:1b:13:be:b0:f6:aa:9d:3b:b2:4c:5f:01:
98:f4:ad:fa:4e:f7:12:19:69:57:64:79:e0:49:b7:
c7:3f:98:fb:e4:dc:be:c8:0c:d2:17:2a:f2:12:d0:
1e:31:e2:e5:5c:13:63:b5:54:99:2d:f4:86:77:23:
2f:ab:92:98:74:cc:14:98:dd:3a:87:cd:73:09:2b:
63:69:1d:52:e9:e7:ed:91:97:2e:e3:4e:12:a3:a7:
77:81:78:53:d2:8a:d9:95:ed:15:72:fe:bf:ea:7f:
35:95:e6:88:15:97:83:96:f6:bb:6d:da:e0:b0:91:
d8:d6:6e:20:8f:5e:1b:5c:e2:88:17:76:1e:06:eb:
0e:d3:69:e2:fc:1e:8e:21:5a:d0:74:64:22:d9:60:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3A:31:B4:64:77:C8:B6:17:19:77:F7:40:6A:9E:36:51:47:52:07
X509v3 Authority Key Identifier:
keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:01:19:3f:56:31:80:6a:40:48:48:63:ed:19:0a:7b:03:
86:8c:97:79:d5:2f:4c:83:54:b0:38:8d:40:c3:f8:35:0f:e9:
ca:06:48:1b:38:3c:19:ee:b0:b6:48:20:98:20:32:1a:6a:9e:
6c:c6:4c:2b:d7:08:c9:43:16:0f:a1:06:bf:18:93:c5:71:81:
e9:a5:a0:ce:8d:87:e0:26:bd:ee:6b:20:f8:b8:f7:1f:1c:35:
02:32:ba:c6:f9:43:8d:75:54:96:c9:36:b7:eb:00:75:5b:c9:
f5:bc:9e:90:6f:e9:ba:9c:02:84:a3:a5:01:12:54:a6:dc:0c:
ff:b5:15:93:19:51:70:c3:4f:26:64:0d:78:29:43:34:88:ba:
0a:72:ad:92:b9:9b:4c:ad:78:c1:87:23:2c:be:af:d3:ac:5b:
cc:9c:4c:3f:93:3c:37:3c:b9:d4:30:af:1a:9b:78:a3:57:bd:
6a:bb:fa:b7:e2:6d:1c:74:86:a1:ab:b1:e3:77:97:77:4f:cc:
60:95:e5:46:62:1d:2d:97:01:ad:48:38:27:c7:79:d9:73:25:
0b:66:d4:65:fd:07:52:e5:c7:d4:43:22:24:48:d7:10:73:25:
90:5b:ff:e9:aa:6f:69:41:dc:14:6d:e6:02:8e:83:51:d2:26:
fc:ee:0f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 11:42:14 2026 by rpki-client