
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
File: oSTS0QT3ck-7jw8maUnikFSMAbE.mft (raw, json)
Hash identifier: QeqJHI+Dq5OUbMO9J5dt9Pg9Lo1+gNZGKqG7hkwBwoM=
Subject key identifier: 1F:01:81:83:DB:23:1B:5F:82:CB:8B:96:0C:F6:19:50:EE:7F:9F:DD
Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1
Certificate issuer: /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
Manifest number: B2
Signing time: Wed 23 Sep 2026 06:48:00 +0000
Manifest this update: Wed 23 Sep 2026 06:47:59 +0000
Manifest next update: Wed 30 Sep 2026 06:47:59 +0000
Files and hashes: 1: oSTS0QT3ck-7jw8maUnikFSMAbE.crl (hash: r/H9/1VE83tj+Kb5VyWvK7fAnl9X41xlXpsNYT057yI=)
2: 60F50042A99411F0A4CF2116C4F9AE02.roa (hash: wg4WDf8sbivCuwbmBy1I5oZUwGy7RezhuhBYVLggq7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl
rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
Validity
Not Before: Sep 23 06:47:59 2026 GMT
Not After : Sep 30 06:47:59 2026 GMT
Subject: CN=6ab37620-6a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:9e:56:01:3c:c5:d2:be:66:58:c2:71:0c:
b1:95:34:2c:a1:b8:13:74:ea:e5:22:23:c5:55:e1:
53:44:a9:63:32:fd:af:06:10:1d:4e:ca:28:46:52:
6c:0e:e9:4f:93:a7:ba:16:f8:43:f6:24:1f:67:87:
d1:f9:96:c8:09:36:b6:d0:e0:a8:b5:f6:b3:3a:57:
11:4c:ea:53:fa:30:6d:0b:c6:6b:c0:c8:eb:2d:35:
66:45:c0:f0:59:98:68:7d:b6:d7:dd:9f:38:40:7c:
13:26:fe:e4:3d:f0:af:8a:e6:f1:cf:4d:7f:1d:73:
6d:e6:48:10:09:bb:db:ba:7f:bd:4a:ff:ae:56:09:
79:d3:ad:f1:45:88:7a:a6:41:fd:bf:4f:a5:66:88:
0b:20:ab:09:f8:99:93:90:93:76:a1:21:36:34:45:
b2:4c:6b:31:28:00:2a:74:f3:0f:77:49:38:bc:1c:
b2:54:05:3b:31:1a:be:c7:31:3f:f6:a1:ba:fa:01:
02:25:11:cb:70:c6:22:6d:a7:fb:46:61:2d:44:a4:
dd:ef:4b:53:93:60:ef:f7:35:db:ef:b8:cc:09:2d:
77:90:07:ed:1a:be:fb:e1:38:55:31:fb:58:b1:94:
6b:b3:5f:94:0c:89:55:ab:6f:70:df:17:08:e5:c5:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:01:81:83:DB:23:1B:5F:82:CB:8B:96:0C:F6:19:50:EE:7F:9F:DD
X509v3 Authority Key Identifier:
keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c7:ab:ab:19:a9:4a:45:8d:dc:ff:1c:c8:2e:85:df:dc:50:
b1:e8:25:ce:20:c9:31:00:ff:fe:38:b1:8c:18:85:59:74:24:
2a:a0:a8:12:b7:59:00:a5:5a:60:9e:ff:f0:48:0f:fd:5b:ad:
8f:eb:5b:7f:be:93:6a:4a:e9:b3:0b:d0:f7:28:31:db:73:6b:
d6:65:96:ee:e1:17:9e:10:c1:62:a4:38:cf:07:bf:da:a8:08:
45:b1:e8:37:82:d6:a9:4e:2d:90:5b:70:c6:b7:40:39:e5:ac:
8d:03:74:73:d0:cd:e7:02:8b:d6:ff:38:77:05:b4:0f:43:d1:
79:a7:44:a7:cf:04:ea:72:4d:d9:af:93:2c:a3:82:06:44:f8:
04:12:2f:ad:d5:76:fa:e3:3c:86:da:66:d1:c4:ed:dc:4c:aa:
a2:03:0d:e3:3f:85:7d:58:48:8c:d2:c0:61:38:1a:ed:e6:28:
38:2c:0d:22:08:f2:38:35:7a:3f:11:4e:fa:c7:b5:e5:85:73:
20:43:ce:bc:26:3e:36:cc:07:a2:be:1d:82:33:80:41:fd:eb:
4e:28:b9:73:21:81:50:25:f4:bc:05:49:df:94:00:43:e8:81:
0d:49:64:e2:86:1c:15:fd:85:b8:fc:1e:72:52:9f:04:af:e6:
8b:fa:3c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:53 2026 by rpki-client