
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft
File: oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft (raw, json)
Hash identifier: Q1tHdQoXgR5SaMlDNVOlmUxekmm/cXpoSZioB46hdzk=
Subject key identifier: 19:00:EB:34:62:81:36:CE:73:21:E3:29:07:55:91:56:C3:01:DA:06
Authority key identifier: A0:28:27:7C:97:08:47:D3:D8:C6:8F:8B:74:68:F3:F2:6C:72:FE:F3
Certificate issuer: /CN=A91AE954/serialNumber=A028277C970847D3D8C68F8B7468F3F26C72FEF3
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft
Manifest number: 0B
Signing time: Fri 25 Sep 2026 01:42:55 +0000
Manifest this update: Fri 25 Sep 2026 01:42:54 +0000
Manifest next update: Fri 02 Oct 2026 01:42:54 +0000
Files and hashes: 1: oCgnfJcIR9PYxo-LdGjz8mxy_vM.crl (hash: FezJjvZ5qqE+XSvfyCyslqoYbx+EHpa5igpSTLPE9uM=)
2: A756B364B0D211F187A0B2C76D11F970.roa (hash: FxNMhwtcR3oWuqNSjH9QDsn5zkl0d7S0gjylTihtbM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.crl
rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE954, serialNumber=A028277C970847D3D8C68F8B7468F3F26C72FEF3
Validity
Not Before: Sep 25 01:42:54 2026 GMT
Not After : Oct 2 01:42:54 2026 GMT
Subject: CN=6ab5d19f-ca01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:4c:29:23:1a:2e:6a:0f:cb:79:0f:48:fc:
eb:29:85:12:7d:1a:56:68:4f:90:33:5e:b0:63:8d:
a2:70:1a:36:01:f6:57:89:e4:61:72:05:20:55:5f:
95:c1:08:d1:a3:ff:3b:6d:ef:95:9d:0e:8b:63:c7:
db:ed:d7:f6:6c:4f:e8:cc:51:81:27:bd:ed:12:9f:
08:9d:73:00:ea:ae:13:68:a0:d7:0e:d6:d4:e5:dd:
75:de:ac:43:7c:20:b9:d6:f6:d3:d8:59:a9:b8:41:
0f:66:ee:9d:91:4e:d2:9f:19:56:d3:62:b4:32:48:
13:66:57:57:5c:13:05:49:8b:77:84:41:28:66:9d:
cc:33:d6:c7:d9:c2:ec:a0:e7:7e:eb:18:7b:58:5c:
a7:24:a4:61:b2:cd:f8:cb:32:a3:b1:9c:b7:da:37:
0f:5d:02:d9:1f:28:43:0b:71:57:d8:bf:45:9a:94:
5b:66:39:9a:d7:3b:54:e9:34:00:52:5b:20:3c:c0:
40:26:a7:16:5b:93:d4:64:a9:43:6e:26:96:e5:60:
e3:bf:1b:44:ed:70:47:16:6e:75:2b:71:c3:cd:c6:
02:1f:6e:c3:a0:16:70:ef:3b:03:b3:8d:29:06:3b:
e3:ed:72:0d:50:63:5c:ca:11:65:42:59:60:2b:95:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:00:EB:34:62:81:36:CE:73:21:E3:29:07:55:91:56:C3:01:DA:06
X509v3 Authority Key Identifier:
keyid:A0:28:27:7C:97:08:47:D3:D8:C6:8F:8B:74:68:F3:F2:6C:72:FE:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:b0:a3:75:15:98:a9:50:cb:ca:91:73:c8:56:46:c8:1b:9e:
f1:96:47:3d:13:87:82:3c:1b:36:a9:44:32:25:d2:95:31:38:
a8:1a:6e:ff:83:9b:5c:45:df:18:cf:6d:fb:cd:72:66:21:23:
b0:71:d2:d6:e2:01:b9:68:70:04:1c:61:9d:9b:84:c9:76:c4:
5e:c3:22:9e:94:79:66:56:5b:ca:25:40:4d:45:dc:be:0b:61:
24:5b:3e:e1:28:04:ec:b4:8d:58:42:da:29:8b:34:0d:c7:e7:
63:ab:87:02:a6:5a:a6:42:ae:0d:a9:af:c7:43:db:e7:9d:34:
07:0b:ce:6b:a4:db:3c:0e:91:82:cf:4d:45:c4:86:79:26:fa:
54:c0:44:ae:6e:d6:e1:eb:9b:7c:15:ef:69:fe:eb:21:4b:03:
0d:d8:ec:e5:eb:3d:cb:77:bd:a3:11:57:37:9e:48:54:48:37:
33:ee:3a:22:ab:02:46:ae:42:52:a2:a7:fe:26:3e:37:25:10:
47:c0:2d:15:3b:8b:3b:9c:7b:42:23:8d:c8:4c:51:19:7a:db:
e6:25:34:ab:14:c3:c7:ba:50:3f:d5:21:20:4a:59:43:50:17:
f5:69:ba:bc:84:d5:ba:b6:49:85:40:0e:05:93:64:a5:e3:68:
b9:97:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:37:34 2026 by rpki-client