
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
File: OQo4N6umkSos8p5hDaSVVd8sb6U.mft (raw, json)
Hash identifier: TiIGCp5KTQV520V+7vg+s5zzweQ3iuEZJR/fGrLUKRQ=
Subject key identifier: 3C:E8:7A:85:41:0D:42:D1:96:77:A3:B8:98:34:8E:66:1F:B2:4A:18
Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Certificate issuer: /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
Manifest number: 015F
Signing time: Fri 09 Oct 2026 05:56:59 +0000
Manifest this update: Fri 09 Oct 2026 05:56:59 +0000
Manifest next update: Fri 16 Oct 2026 05:56:59 +0000
Files and hashes: 1: OQo4N6umkSos8p5hDaSVVd8sb6U.crl (hash: l6tOyzCS1+LmKcPsLdE7JEaPnpWAjBgMRA9/ymsAsUs=)
2: 8CC6B54CB44011F0ACFB4D45C4F9AE02.roa (hash: 8h9Rkyj4zjajWzGw5jayk/XGQjzAGuusfuMh7luHUj4=)
3: 4B34CDD888EB11F09EC0EE50C4F9AE02.roa (hash: mcnL8lsesYFVf7+cGRszhKENi52W4KfHZx6RDabUMA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Validity
Not Before: Oct 9 05:56:59 2026 GMT
Not After : Oct 16 05:56:59 2026 GMT
Subject: CN=6ac8822b-caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:17:a2:84:eb:bd:27:6f:d7:89:03:6c:72:
83:b8:00:71:28:c4:7a:da:b2:ec:4b:6c:28:c2:b9:
5a:fd:37:8e:38:77:d0:47:bc:d0:bd:29:5f:c4:76:
c0:4f:87:1b:ef:9d:d7:0f:b8:35:1d:e6:2b:47:cb:
ed:dd:fd:4c:68:20:a8:b9:5f:79:11:4f:df:0c:23:
0a:06:a6:dd:5e:49:5a:e7:44:ba:62:c3:b8:2e:61:
f8:ca:09:fb:56:ff:76:54:c5:d2:5a:ab:84:a6:6d:
42:0e:d5:d0:fa:b5:7b:5e:0a:81:7e:cb:07:c2:8d:
81:0c:cd:7e:a3:d4:93:01:25:29:6b:87:4b:b9:5c:
c9:90:e3:d9:4b:6c:36:2f:70:e8:fa:f2:d1:17:9e:
36:2a:6e:7b:c6:34:0e:4f:35:cf:92:22:64:47:db:
4f:7d:86:87:82:66:c9:28:d0:9f:2b:91:88:3d:db:
9d:fb:13:58:b5:d6:06:00:49:a4:1f:43:b4:6f:85:
2b:7a:53:62:48:20:12:9d:1a:a1:3b:6b:37:b8:62:
a2:46:60:37:ae:6e:ce:a6:5c:77:ee:43:01:90:6e:
65:0e:07:01:7a:d1:bc:2b:a3:40:51:b9:8b:88:ce:
4d:0d:c4:b7:3f:75:28:59:06:77:18:e9:2a:a9:63:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E8:7A:85:41:0D:42:D1:96:77:A3:B8:98:34:8E:66:1F:B2:4A:18
X509v3 Authority Key Identifier:
keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:78:c1:78:f2:64:9c:a8:eb:b4:71:41:ac:21:9c:cf:aa:f1:
7d:97:53:ec:e8:a3:4e:51:c6:23:b9:0b:02:71:21:ea:a2:3d:
03:0a:d5:c9:1b:b6:d0:b9:d2:93:ec:ba:7f:75:79:8b:74:66:
2a:cd:7f:bb:2e:9a:bc:36:87:90:86:cf:3e:8f:28:23:1a:c9:
43:b5:42:55:1e:96:e3:55:19:73:9e:31:98:30:d2:3b:37:71:
9b:36:6b:c1:a4:74:77:28:db:b5:24:8f:75:5a:37:f7:a8:c4:
ec:90:f7:1a:a2:3c:1b:46:66:71:9c:cb:f1:e5:b0:ab:c1:6a:
d5:ce:2f:08:77:50:c0:49:9a:e6:53:c5:a9:19:c7:df:8e:36:
9a:ea:5b:e2:b7:ea:e1:12:87:0b:c6:14:9c:6e:4b:18:73:43:
1e:40:40:5f:7f:df:91:73:32:ce:fb:48:82:32:ff:8b:c8:de:
68:02:86:7e:fb:09:45:e6:11:de:b7:53:dd:3a:c0:96:41:77:
9d:7a:7a:a5:3e:f7:e3:44:bc:c5:49:9b:40:0c:15:a6:c4:13:
08:ad:f4:e1:52:84:f2:71:00:e0:e5:06:1b:39:f0:ad:5f:ab:
36:89:12:b0:8a:e5:76:e4:b2:a6:67:39:62:6d:97:2d:74:ea:
d9:1a:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:51:33 2026 by rpki-client