
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json)
Hash identifier: DzUsuuVWk/XwRGPVep2qBg5cVuJyBOcJ8ffv8CU3dA4=
Subject key identifier: F1:CE:80:95:BF:A5:C2:41:36:18:BF:F2:5F:D6:C1:85:B0:F1:8C:21
Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E
Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E
Certificate serial: 0874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
Manifest number: 0859
Signing time: Thu 24 Sep 2026 20:54:32 +0000
Manifest this update: Thu 24 Sep 2026 20:54:32 +0000
Manifest next update: Thu 01 Oct 2026 20:54:32 +0000
Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: imnaOmW5dxWNfwHNEd4floe6iP9ZWttjGzyjzJ6YOwE=)
2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: 5MbzWeSizcZ+fI1SVAcYiTyKAUTIOGDA65fh3pICN7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl
rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:54:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E
Validity
Not Before: Sep 24 20:54:32 2026 GMT
Not After : Oct 1 20:54:32 2026 GMT
Subject: CN=6ab58e08-033f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:b5:75:9a:e2:01:94:25:2d:68:6a:32:ec:
a2:51:d2:52:48:b3:bd:8e:6d:10:08:9b:cb:a4:ee:
c2:29:2c:ea:2b:a6:07:fb:a7:f5:2a:55:f8:c3:96:
81:07:ba:2b:13:c9:80:00:5f:9d:43:8d:d4:65:b5:
0c:f2:66:3c:6d:dd:78:6c:70:68:fa:be:0e:b1:18:
e2:73:ac:c4:cf:82:99:9b:db:a9:4b:12:82:ec:77:
e4:ad:f8:68:14:6b:3d:ea:ad:c2:f9:50:b3:fb:bf:
8d:e1:cd:ea:8e:df:e4:f2:88:b7:87:e3:12:be:65:
60:47:63:03:e7:c8:13:c7:7b:8d:ee:e9:b3:e3:79:
da:25:4b:79:7e:8f:a3:29:a6:a7:3d:f8:5e:33:bd:
28:1e:55:6f:eb:ab:83:e3:b3:c8:e3:be:23:67:a4:
84:c5:6c:1d:78:83:78:ae:d0:9e:d1:85:41:c5:28:
b5:dc:59:87:00:a7:e9:36:3a:57:b6:df:ff:98:59:
a3:33:3a:f0:80:8d:42:9e:bb:12:c6:36:1a:3f:b9:
92:92:fa:03:5d:bd:f8:64:33:aa:cc:bc:6a:af:0d:
1d:8d:c0:f4:c7:71:ec:78:4d:d6:d8:35:c3:c9:85:
42:1e:47:44:0f:11:cf:56:af:cd:ec:ff:2f:fa:af:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:80:95:BF:A5:C2:41:36:18:BF:F2:5F:D6:C1:85:B0:F1:8C:21
X509v3 Authority Key Identifier:
keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:43:0f:7f:34:43:86:39:bd:73:7e:7c:75:d8:c9:ba:8c:98:
e7:77:7e:e8:4d:db:af:d0:46:f3:da:dc:f9:0c:e2:f2:d7:59:
7c:68:92:23:6b:24:d7:fe:d1:57:a5:60:fa:b3:3e:16:92:06:
15:3f:cb:97:7b:2e:63:a7:33:20:dc:90:9c:1d:01:b8:f7:b7:
ce:0b:35:b3:da:4a:21:ab:84:e3:12:58:ee:62:d0:40:d6:d2:
92:e9:0d:17:03:fb:08:3c:8d:12:09:64:ce:68:4b:af:61:65:
fc:ac:d6:f4:9f:3e:ea:88:c1:65:83:9f:10:a4:86:83:e5:20:
6c:3e:ca:88:cf:c1:19:9d:95:d0:3e:3b:06:45:b8:a5:d0:79:
0b:f8:d9:34:7d:61:75:50:47:1b:60:45:fb:63:a4:8f:db:8e:
60:02:fb:45:6a:cc:46:12:b7:64:a2:d5:11:ad:24:05:4e:3e:
45:74:e2:a6:a4:fb:f0:8c:7e:f2:1a:35:99:29:30:cf:21:04:
cf:4b:96:b6:ba:d0:38:33:e4:5f:74:76:11:62:71:dd:71:43:
f9:47:ac:0c:de:1d:5d:1c:fa:9e:e1:78:a3:45:43:de:71:f3:
03:e1:cf:d1:e0:d6:e2:f9:9d:32:87:e2:c7:19:b0:c6:29:9b:
af:37:48:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:04:37 2026 by rpki-client