
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
File: oXyIfuladLPXOMFccI_s_Wu4xmo.mft (raw, json)
Hash identifier: F3BNxDIH5fS2T7/W+ALrSW2jwYhtN56jWutOVgIZWsc=
Subject key identifier: C8:75:FB:3A:5A:8F:F5:B4:20:A6:F9:9D:8F:43:86:14:A4:EF:B8:80
Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
Certificate issuer: /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
Certificate serial: 12DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
Manifest number: 12BC
Signing time: Sat 26 Sep 2026 17:06:52 +0000
Manifest this update: Sat 26 Sep 2026 17:06:52 +0000
Manifest next update: Sat 03 Oct 2026 17:06:52 +0000
Files and hashes: 1: oXyIfuladLPXOMFccI_s_Wu4xmo.crl (hash: hRtbKsHvOWbs2BIct8yX24ZuPiIRhlro5Sj7oSe2UTc=)
2: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (hash: UmgWUU8NA1nNiK28pvWu8eBpGFgthPvzpWq/tN/hgM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl
rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4827 (0x12db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
Validity
Not Before: Sep 26 17:06:52 2026 GMT
Not After : Oct 3 17:06:52 2026 GMT
Subject: CN=6ab7fbac-aee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:b7:5f:0c:9d:43:d7:23:fe:65:4d:e9:38:
ee:7c:f5:06:a8:63:7d:94:21:9c:3c:c1:b8:fc:e0:
56:ef:61:84:c8:60:fa:bd:55:c5:e5:49:4b:92:74:
5d:33:61:fb:0b:5b:ff:d2:38:03:4c:36:32:67:6d:
fc:3e:ce:cc:0a:75:7d:39:16:18:4b:31:d9:ed:95:
c2:f4:f7:30:98:c8:96:2d:b2:d8:f2:90:7f:7e:c9:
d2:1d:45:c5:8d:3c:33:d0:69:30:ec:78:3c:e9:45:
7a:e9:8f:ba:7e:2f:45:92:f9:fb:b3:79:60:ef:99:
03:d5:66:46:e0:8b:85:37:ec:b4:39:ce:66:fc:ee:
96:58:63:53:6c:0b:70:c0:77:70:f0:bc:87:8e:a6:
a2:ad:bf:8b:e4:b4:31:7e:bc:29:e8:50:3f:12:a2:
0b:f7:3a:ed:fe:9f:04:5a:5b:de:67:d0:a1:88:41:
3e:3b:d9:36:aa:98:55:5e:d6:02:37:9c:54:de:04:
bf:e0:c2:94:84:bd:ce:0d:59:be:2b:e5:48:98:45:
4e:50:af:ef:df:c1:a8:94:f7:49:18:01:0a:5b:06:
6a:ee:3f:b5:74:44:61:34:81:b8:c4:9a:08:91:dc:
b6:59:67:d1:13:0c:7a:2d:06:32:ab:17:0b:99:a0:
64:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:75:FB:3A:5A:8F:F5:B4:20:A6:F9:9D:8F:43:86:14:A4:EF:B8:80
X509v3 Authority Key Identifier:
keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:c0:56:34:c1:27:8b:a3:75:ce:57:18:bb:1b:d8:24:56:cb:
43:1f:73:18:af:ce:17:cd:ad:a1:f9:d4:86:23:ae:bf:16:73:
11:fa:5b:f3:1e:08:1d:b7:3d:46:dc:fc:40:2c:93:81:92:6f:
95:bd:98:bf:0e:d3:b8:bc:1c:3f:7b:8c:34:37:02:91:90:48:
19:5e:b0:0f:8e:cb:6a:14:9a:e6:7c:7b:6d:30:97:75:15:41:
af:9b:3a:e3:c8:fd:6d:18:8e:f3:38:6c:e4:74:71:8b:b2:b3:
ee:ad:c7:cd:4e:5c:b5:91:d7:1c:cf:b5:02:af:82:4d:fe:13:
0d:6f:ca:21:5e:46:b5:31:99:8a:be:cf:21:42:09:a3:75:4e:
0b:67:09:7b:90:05:ae:0c:27:9d:13:65:40:2b:2b:f7:94:c4:
7b:8b:e0:d6:cb:b4:de:2f:86:7c:de:cf:cb:7f:e3:a4:f0:a2:
a7:27:ed:d7:cb:8a:d3:79:09:9a:bd:e5:8a:02:e0:62:b9:6f:
c6:80:52:8a:6c:8e:f2:4a:8f:4d:9d:0f:f6:ed:ec:4e:09:f4:
d1:13:6a:e0:a4:da:22:2a:67:f1:1a:13:12:9b:c7:2e:73:1e:
f9:50:f2:5f:21:c5:d6:b7:a9:5e:f2:57:a8:cf:53:16:21:fb:
ea:81:05:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY2NDYxMTAvBgNVBAUTKEExN0M4ODdFRTk1QTc0QjNENzM4QzE1QzcwOEZFQ0ZE
NkJCOEM2NkEwHhcNMjYwOTI2MTcwNjUyWhcNMjYxMDAzMTcwNjUyWjAYMRYwFAYD
VQQDEw02YWI3ZmJhYy1hZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Jm3XwydQ9cj/mVN6TjufPUGqGN9lCGcPMG4/OBW72GEyGD6vVXF5UlLknRd
M2H7C1v/0jgDTDYyZ238Ps7MCnV9ORYYSzHZ7ZXC9PcwmMiWLbLY8pB/fsnSHUXF
jTwz0Gkw7Hg86UV66Y+6fi9Fkvn7s3lg75kD1WZG4IuFN+y0Oc5m/O6WWGNTbAtw
wHdw8LyHjqairb+L5LQxfrwp6FA/EqIL9zrt/p8EWlveZ9ChiEE+O9k2qphVXtYC
N5xU3gS/4MKUhL3ODVm+K+VImEVOUK/v38GolPdJGAEKWwZq7j+1dERhNIG4xJoI
kdy2WWfREwx6LQYyqxcLmaBkiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMh1+zpa
j/W0IKb5nY9DhhSk77iAMB8GA1UdIwQYMBaAFKF8iH7pWnSz1zjBXHCP7P1ruMZq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9EOTJERDAzOEY0
OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRMUFhPTUZjY0lfc19XdTR4
bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29YeUlmdWxhZExQWE9NRmNjSV9zX1d1NHhtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjY0Ni9EOTJERDAzOEY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRM
UFhPTUZjY0lfc19XdTR4bW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEsBWNMEni6N1zlcYuxvYJFbLQx9zGK/OF82tofnUhiOuvxZzEfpb8x4IHbc9
Rtz8QCyTgZJvlb2Yvw7TuLwcP3uMNDcCkZBIGV6wD47LahSa5nx7bTCXdRVBr5s6
48j9bRiO8zhs5HRxi7Kz7q3HzU5ctZHXHM+1Aq+CTf4TDW/KIV5GtTGZir7PIUIJ
o3VOC2cJe5AFrgwnnRNlQCsr95TEe4vg1su03i+GfN7Py3/jpPCipyft18uK03kJ
mr3ligLgYrlvxoBSimyO8kqPTZ0P9u3sTgn00RNq4KTaIipn8RoTEpvHLnMe+VDy
XyHF1repXvJXqM9TFiH76oEFZg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:07:22 2026 by rpki-client