
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json)
Hash identifier: DbfmlTUfPI59djIGamI1Qt5umPCVPCvLKzaNuHkQ5os=
Subject key identifier: 14:A7:F2:31:AF:BA:EF:EA:4D:9D:CA:C1:D7:79:31:74:A9:69:2F:A3
Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
Manifest number: 026E
Signing time: Fri 25 Sep 2026 02:28:15 +0000
Manifest this update: Fri 25 Sep 2026 02:28:15 +0000
Manifest next update: Fri 02 Oct 2026 02:28:15 +0000
Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: DH7lHE/9LQ+JBdh0VQFTvHePpRwfBLDz9fM+fH5ZMFg=)
2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: UJfcT25TpxMsPXblHXFvDdc06o4EalWiUveKOaWphfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Validity
Not Before: Sep 25 02:28:15 2026 GMT
Not After : Oct 2 02:28:15 2026 GMT
Subject: CN=6ab5dc3f-00ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:81:93:9f:69:c8:28:75:d6:f2:75:02:39:
92:78:32:64:15:8f:bd:2e:fa:34:52:90:b6:28:8a:
68:66:54:88:59:2a:eb:1e:ce:66:29:5c:77:4e:cc:
a2:eb:21:16:00:6f:a7:bb:14:4f:d1:a6:65:52:d8:
9b:d2:1d:fc:7d:7f:c6:67:0e:c6:4f:56:fd:56:57:
7a:1a:5d:6f:74:83:00:f3:a2:a1:0d:b5:c6:ea:a5:
7d:62:74:a6:97:de:94:8b:ac:92:c2:0b:1f:65:5d:
b9:ed:c8:13:d1:2f:d0:46:63:2e:cd:32:d3:78:1a:
5f:32:98:bf:09:f6:e1:73:69:7f:d5:2e:84:2c:d9:
64:c4:46:1e:79:31:13:59:ce:ab:95:ad:41:3d:bf:
a3:d4:3b:8e:29:04:70:50:cd:4c:e9:23:ff:ed:5e:
3f:fc:64:da:23:40:54:5d:89:49:43:07:65:b6:83:
5a:b1:70:89:ac:42:59:90:af:0c:af:45:11:d0:b4:
f1:40:a6:93:3f:1c:c6:6c:9f:2f:b5:2a:34:bd:22:
ea:85:bf:f6:f7:cf:77:e6:b6:ca:98:71:db:a0:9b:
7b:cc:2e:f5:ad:57:59:b2:bb:3b:4a:ac:85:46:1f:
5f:25:7f:35:12:13:b2:93:70:08:b6:ac:8b:12:9b:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A7:F2:31:AF:BA:EF:EA:4D:9D:CA:C1:D7:79:31:74:A9:69:2F:A3
X509v3 Authority Key Identifier:
keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:70:1f:93:38:62:f6:ee:e4:f2:03:c3:93:b7:17:b7:46:00:
4b:11:03:dc:be:0d:f2:8c:00:4c:96:d3:01:ab:c6:cd:19:ca:
c4:87:92:41:ef:e9:19:62:3d:69:be:75:31:16:72:07:ff:a6:
0e:ea:c8:fb:c2:54:29:2c:44:12:50:dc:eb:58:83:4b:6f:de:
53:64:c2:70:05:06:44:2f:db:b9:28:1b:41:c3:06:7b:a2:4e:
67:6c:c1:f2:b2:e7:2b:6f:da:06:58:58:23:d3:08:cd:e3:b4:
a5:f2:66:2a:78:9b:0a:c9:22:6a:5f:c9:51:12:ff:c4:f0:c6:
e3:22:56:9b:12:d3:22:f2:8f:50:40:17:b5:0c:5e:b5:64:21:
ba:6a:f2:fc:8a:07:54:f6:d0:f3:43:34:99:33:b1:25:8e:3c:
46:c9:2b:6a:9e:f9:27:e6:78:47:25:6f:ab:b9:17:7d:28:3d:
54:e4:fc:13:db:c6:7d:43:08:80:bb:db:19:8e:c7:08:f2:41:
ee:35:fa:da:21:bd:6c:9c:b8:59:f2:77:5e:40:3b:4d:46:df:
14:11:69:47:95:48:e6:1e:ca:f2:72:e0:7b:3b:53:e7:7d:af:
5d:47:6a:3a:a2:f5:98:86:f6:63:41:c4:e4:88:03:95:08:cf:
eb:85:d6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:59:49 2026 by rpki-client