
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json)
Hash identifier: HEimjYl62RIx3bgyn5drSsAE3//rT2M38bxLgTz+VpA=
Subject key identifier: A0:10:A7:95:C7:72:B5:7F:6A:88:97:FF:ED:D0:DB:F1:8A:E0:0C:BD
Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Certificate serial: 227B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
Manifest number: 226E
Signing time: Sat 10 Oct 2026 15:51:32 +0000
Manifest this update: Sat 10 Oct 2026 15:51:31 +0000
Manifest next update: Sat 17 Oct 2026 15:51:31 +0000
Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: 3abv6dKaUNXPSWqbv/ki1/65vMzB6fGAl++DGglAg0Y=)
2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: 3t4txeSZlYa+37JaV5Cr2zGhA3jRnET+dGT9cx2QlTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:51:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8827 (0x227b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Validity
Not Before: Oct 10 15:51:31 2026 GMT
Not After : Oct 17 15:51:31 2026 GMT
Subject: CN=6aca5f04-164d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:d7:dc:bf:e4:c1:31:dc:27:1b:47:40:f8:
15:99:87:f7:9b:bf:ae:9a:7c:83:b3:81:22:37:af:
3f:a3:f1:c1:9c:d0:f2:83:42:43:81:ad:22:3f:86:
ed:3a:ae:7e:97:07:88:67:f7:04:e1:11:06:1c:7c:
32:f1:72:9a:c9:94:7d:a0:4b:68:c3:54:cf:88:50:
ea:fb:98:0e:06:f3:94:fe:e3:53:86:f7:5f:d0:b4:
8a:d6:85:b3:6a:f8:70:e3:3f:88:8d:bb:e7:d6:75:
cf:4f:04:de:c0:99:f9:d5:38:ec:61:85:75:17:80:
1d:f0:a4:11:d6:4c:e2:3e:97:42:bc:86:49:f0:4b:
4f:f2:0d:0f:05:75:72:2c:e7:c7:77:25:3a:b3:bc:
8e:89:27:d0:3a:43:28:ed:80:3d:66:6f:98:b3:37:
0d:64:b0:e0:74:a6:6a:3c:51:8c:8a:ff:a4:1f:f3:
91:cc:c4:20:b9:93:2a:62:5b:85:1c:8e:79:78:6f:
5c:2b:9a:84:a1:da:a4:27:71:c7:85:d8:b5:7e:b7:
94:ca:93:54:cf:f6:10:ed:a4:b6:6a:12:29:b4:6a:
0f:53:c2:a4:33:11:fc:81:75:6a:ee:eb:10:42:b8:
95:9b:7f:a1:34:9d:52:8d:aa:07:fb:f0:da:13:f6:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:10:A7:95:C7:72:B5:7F:6A:88:97:FF:ED:D0:DB:F1:8A:E0:0C:BD
X509v3 Authority Key Identifier:
keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7a:cd:76:3d:28:c8:08:b4:e4:81:16:23:0b:fe:10:ff:b0:
6c:4a:5d:04:46:2d:6a:d4:d4:6b:4c:8e:d8:ad:a4:ce:ca:bb:
8e:91:79:6b:c6:02:c9:0f:a6:03:8c:58:66:1d:eb:98:b3:aa:
ac:79:c1:b2:16:22:df:8e:89:e4:cb:93:bb:40:68:c3:6c:da:
68:7f:5a:c2:50:0c:3d:13:ce:3c:be:01:ac:05:27:a2:fb:62:
ee:a1:bc:8d:59:7c:a7:b4:85:98:e5:18:c6:c7:e4:8b:0f:52:
c9:98:e9:88:f7:c6:9a:ec:9a:98:35:04:e0:dd:fb:2f:11:6c:
9d:a5:88:de:17:71:b5:18:3a:a2:a3:c2:f8:28:95:0e:71:56:
c8:ae:3f:7d:af:e5:15:f7:32:61:24:71:c9:49:77:18:c6:24:
b4:f1:fe:68:12:25:89:96:15:ce:d7:48:41:58:fb:1d:59:23:
59:8f:1b:f5:9a:33:fa:e8:6d:c2:6e:79:b9:9a:31:e5:81:85:
0d:2c:4e:49:30:09:cc:b9:06:7a:b9:b2:3d:a0:60:b7:54:25:
42:79:38:98:21:3d:8b:d1:05:98:97:c8:f7:63:e1:ba:15:de:
c0:f5:8f:5e:24:15:3f:a6:ac:64:b1:c8:c2:49:16:64:d5:14:
91:fa:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:35:37 2026 by rpki-client