
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier: 5Bao9jqEj60mnkeyFD99lDSNm8ZY8F4VXJc/BaOHICo=
Subject key identifier: E1:C0:ED:43:B7:FA:9A:19:1D:B5:3A:D5:B4:03:6F:6D:E7:AC:DC:7F
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 0318
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number: 0286
Signing time: Sun 27 Sep 2026 02:43:09 +0000
Manifest this update: Sun 27 Sep 2026 02:43:09 +0000
Manifest next update: Sun 04 Oct 2026 02:43:09 +0000
Files and hashes: 1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: aokWOpsOw9QFRjTLfe0HeoFHq8J4s6dk870Z2tDqzTc=)
2: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: SYFTPDFr7LN35U/gebZm+cm1jSEOdDw/ts0Jc9H4NkQ=)
3: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: IqfXkMnj8uGfdCn+beW+9o36zBKAVet07b4tkBjSXV0=)
4: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: w7xvtRmpzUbr8JgK3UFIlzl77CVDLrjcc7Gh+fzdIN8=)
5: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: jTaoK/9ZfbV3RhpV4K59uEmZ4z35REbUAdYTCvW5auQ=)
6: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: u55hQRiwUoLbf82ToZOywDnWMRlS9BpxwCPoCivIco8=)
7: BA917E94D65F11F090E652930BB43E13.roa (hash: 1K/PdX1BRrVHh8XufguLAU4ALPmlwz8oCRHa0WcJP6U=)
8: 49FC44B0162A11F18FE9298B373D8C67.roa (hash: zOKxQxHBIClXa7SK7lv75vi8fEUHv381/lbkm79W98w=)
9: FAC35354610611EFB6324A30C4F9AE02.roa (hash: FqAfFj1Tl22vJwoCZnFEARrScAUogzoTdgh+P1prj9o=)
10: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: oTOrED2V9vZn9qb8N0LH0Sx58NuFVTBUIOpttu2MXWg=)
11: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: sg/PZjzTpz4UXrJ5M++piAcm3f5OkkNiXbIxTQjYcQY=)
12: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: ZOW+e6hIHzkmr+e6qFgnn41jrQPPj4OwONpdz5HcpDw=)
13: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: Nla2jOROMyL7ZvHl9XXDHQ8v7Tf0J7Qb5Yh4lPB6G08=)
14: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: tgWNFtii+Zc83iPIGPSMYRpyk9K7VuUWU7rCDmoIp90=)
15: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: 6XAi7gM1Xpz2gjUW0XmMeYKCRI5I+iCkq9l2pCZ8bjA=)
16: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: wV4TOeBb8Yf87AHJqxIiiwZT4YbWOsXLWCv25sOzq68=)
17: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: dt5esh4YiRNAZirmy+skM3OnPaDSuZwtvyic2vepcxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 792 (0x318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Sep 27 02:43:09 2026 GMT
Not After : Oct 4 02:43:09 2026 GMT
Subject: CN=6ab882bd-7f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:96:97:c6:d6:d4:1d:c7:0c:b0:ea:49:cf:
4b:9f:9f:51:8b:b3:32:cf:47:a5:e1:12:46:92:39:
64:6a:65:81:0e:7c:21:f0:68:81:d4:22:d9:4f:92:
d8:f6:42:3f:13:db:d3:11:c8:ea:8a:d3:4a:98:e9:
75:1b:da:02:60:a9:dc:6a:65:8e:cd:bf:2c:83:d1:
40:ea:29:c7:be:c6:95:f3:11:94:b1:5c:9b:85:62:
df:74:5b:af:6f:b2:23:2c:ed:fd:d9:1f:2a:93:de:
9e:44:b6:bf:6c:9f:0d:6a:4e:b5:e5:16:d9:9d:69:
c6:50:b6:0e:3f:f0:88:b8:b3:36:ce:91:6b:b6:89:
4b:1e:d5:0d:76:72:b5:82:e7:b7:a8:4d:18:5b:fb:
60:21:bd:89:a6:39:4e:ca:a0:6c:f4:0f:bb:ca:2f:
06:3a:9a:9c:e4:da:4a:8a:f2:97:1f:51:92:77:8b:
83:c7:0d:ae:dd:d1:39:90:75:0d:57:fe:f9:60:4f:
1f:28:bf:0b:42:0a:f0:4e:5a:13:4b:7b:8b:b8:c2:
d9:f9:8e:0e:ca:64:bf:6b:65:21:fa:16:81:97:cd:
55:2d:64:5b:3f:ea:85:11:2d:41:34:c4:87:cb:e8:
23:ad:9b:b9:28:5f:57:e8:e3:0e:ed:91:30:d1:7b:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C0:ED:43:B7:FA:9A:19:1D:B5:3A:D5:B4:03:6F:6D:E7:AC:DC:7F
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:01:97:69:53:fd:1b:36:51:79:1b:e8:ff:fc:07:71:72:1e:
cf:aa:86:c8:26:73:3a:37:d9:4a:a6:60:eb:5b:a6:a7:85:9e:
29:8b:f9:16:4c:1c:45:42:ee:25:8c:61:9b:73:8e:c1:c3:70:
0a:04:bb:7a:c0:68:14:2e:6f:75:6e:4f:f3:cd:79:d7:c3:0c:
ef:bb:1b:7d:34:31:53:58:99:ba:70:92:40:41:6e:70:99:04:
e3:b4:96:23:4f:22:58:ab:53:cd:ea:f7:fa:52:60:b3:6c:75:
51:b5:71:44:6c:f1:aa:9c:fc:a7:78:8d:af:b1:82:c7:bb:fa:
94:93:c6:70:74:c9:00:23:68:1e:1b:15:06:ca:f8:bb:7e:7f:
91:ef:b2:ab:3a:40:a6:03:d9:16:69:ed:11:e9:00:c5:a5:56:
99:86:a2:ab:a2:fb:81:a0:52:1e:ac:56:5a:fb:67:a7:d9:75:
8d:ff:cd:8e:b4:5d:91:73:da:0e:cc:f6:94:90:6a:5a:77:2f:
28:69:a6:a2:47:87:d4:35:dc:3b:71:65:d2:8d:e6:42:45:7c:
34:f4:a9:76:bc:5c:81:38:b8:86:c4:4c:df:2b:07:a1:58:e4:
48:1e:84:cd:f4:48:a6:9f:bd:d9:1a:3f:70:bf:69:ba:a7:1c:
d4:3a:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 02:24:37 2026 by rpki-client