
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
File: o9wYjy1VW0FacV8lkDahpg_8uNk.mft (raw, json)
Hash identifier: kF4kc+DWAV5MINF28wX3t69vB1s/6sLSv9wwwHLqYkk=
Subject key identifier: 86:6E:17:AA:C9:C3:7F:A7:98:DA:BB:14:E2:57:91:5F:9A:6C:F6:A3
Authority key identifier: A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9
Certificate issuer: /CN=A91C8F68/serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9
Certificate serial: 030C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
Manifest number: 0305
Signing time: Wed 07 Oct 2026 01:14:59 +0000
Manifest this update: Wed 07 Oct 2026 01:14:58 +0000
Manifest next update: Wed 14 Oct 2026 01:14:58 +0000
Files and hashes: 1: o9wYjy1VW0FacV8lkDahpg_8uNk.crl (hash: ZDTxyG2lGscSuKsBQ+/jearJD+Bf7jF666l4IrqmZUM=)
2: 2A766EA23A3411EDA1B7D863C4F9AE02.roa (hash: 4HjNDDfKFJrgWK5K6rpjz8dvflAC5Isd+SEG9GMgXhw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl
rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F68, serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9
Validity
Not Before: Oct 7 01:14:58 2026 GMT
Not After : Oct 14 01:14:58 2026 GMT
Subject: CN=6ac59d13-0a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:44:e7:0f:c8:29:36:fc:7b:ea:d4:c1:d7:
42:bc:ef:24:32:d0:23:55:a9:b2:3d:b3:9c:37:0f:
41:00:80:a1:53:59:ae:4a:88:5d:3d:a1:34:ed:3b:
7c:7e:62:4a:02:05:a5:28:92:a5:82:91:c1:89:d5:
85:2a:ff:ed:79:29:c8:0b:5a:14:a0:8f:bd:59:93:
41:68:26:3a:9a:f2:c2:df:45:cd:51:3f:76:85:5a:
41:2a:88:2c:66:c3:aa:4b:c5:67:88:5b:0e:eb:cd:
fc:60:c0:c7:e7:36:d4:91:7e:8b:03:e9:3e:97:0a:
35:c5:a9:06:67:7b:3a:30:c1:0b:4a:63:e5:ac:01:
99:cb:3e:0e:ef:69:e8:4e:25:5b:b9:fa:2a:d1:d7:
a2:68:c8:4e:fa:a5:ee:e8:92:a5:38:7e:e6:e4:2a:
40:75:5e:3c:2d:8c:bf:05:96:9f:35:5c:0b:9e:57:
ca:b8:77:9e:37:8b:c3:51:91:a0:6e:81:ba:25:b4:
24:d0:a7:35:8b:de:92:2a:95:78:80:27:ff:65:55:
16:04:f1:d6:a0:81:4d:8b:43:56:8b:80:95:97:61:
9e:36:c0:d0:05:c3:a4:16:5a:04:7c:8c:a1:e5:32:
24:5b:13:95:f7:e6:43:d5:6a:92:85:98:43:7c:e6:
4f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6E:17:AA:C9:C3:7F:A7:98:DA:BB:14:E2:57:91:5F:9A:6C:F6:A3
X509v3 Authority Key Identifier:
keyid:A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:1d:35:d5:9a:65:c5:32:51:be:61:08:bc:f1:91:23:cb:b7:
e7:b8:f6:ba:19:40:3e:ab:17:42:61:53:6e:bb:e3:d8:2b:1d:
42:48:5c:7e:55:98:e0:39:05:b5:5c:cb:77:d1:39:a4:19:28:
11:20:0c:a5:81:50:41:20:d6:31:f2:f6:f4:e7:b4:d0:da:2c:
c8:e7:d1:33:77:a9:ba:0b:c7:78:12:b0:27:b4:d8:a1:cc:b1:
04:da:94:b9:e8:d8:40:70:f0:69:f9:b9:f4:2d:ad:4d:50:eb:
90:82:08:c9:e3:f1:d1:7a:2e:87:b1:83:cb:c0:64:bd:b5:ae:
c0:47:98:e6:b9:85:41:2a:1c:54:c3:17:f0:f2:9c:cf:a7:15:
a2:cb:47:00:64:10:b3:c3:ea:d8:f1:51:55:d6:b6:c2:db:d8:
cb:80:a1:ae:d3:7c:ae:18:15:5a:c9:47:cc:62:af:59:ad:cd:
66:67:0c:54:31:6d:da:00:5d:fe:f9:51:cf:2d:da:d8:98:93:
44:49:c1:da:ba:39:74:a1:ce:ff:40:cb:e6:e0:41:9e:24:ed:
ea:54:96:63:9d:ab:91:c7:f4:b5:c6:2f:bc:76:61:00:7f:ea:
0d:d1:ce:75:43:e7:1a:86:da:72:35:67:eb:d5:20:2c:eb:59:
92:de:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:59:34 2026 by rpki-client