
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json)
Hash identifier: oZuUd2mzfhj6Z/l2C/p9mzNWMYBSGEMGUAE4b37tUyo=
Subject key identifier: 48:90:48:93:56:F0:13:44:FE:05:BD:A0:9D:F3:BC:2C:41:B1:2E:0D
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial: 0974
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
Manifest number: 0951
Signing time: Thu 24 Sep 2026 20:06:56 +0000
Manifest this update: Thu 24 Sep 2026 20:06:56 +0000
Manifest next update: Thu 01 Oct 2026 20:06:56 +0000
Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: p9Yh0u/mVXWC4p9VCDhLyVIoT9h+vE8N9LYczWEtguI=)
2: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: O+J9NJa3UAiRFIsaF/1cDe44mda6RPgxat0aYJVT3MQ=)
3: 1845D6647EAF11F1A86AC8B467A30FBC.roa (hash: hAU4qUdvHl3msSyOtoY08felpEvTOnOlkZDcpV81OCM=)
4: 43BCAA10601011F1B53A223F8947A888.roa (hash: UAOZoXUNlqRhbsm6Ye0JLiTSN1KyydXhLfW68ppQgWM=)
5: 1702453A7EAF11F1A86AC8B467A30FBC.roa (hash: kK9g04kyEiFnynqhVR38EeQ3FQu8/W3rZrXFesWAU4w=)
6: 18C57F047EAF11F1A86AC8B467A30FBC.roa (hash: TwfuImduumf2E6CwFlSoq4jZU9n/ol3F3dOv5htetzY=)
7: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: fecuy51h04kA/93Fl9Jso7L2bJu10CuAwHp5PsU5FhA=)
8: 17A584347EAF11F1A86AC8B467A30FBC.roa (hash: cWMVPdtFhLjtPumAhMJx7mxgsrChxX1MDuj/JICmZU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2420 (0x974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Validity
Not Before: Sep 24 20:06:56 2026 GMT
Not After : Oct 1 20:06:56 2026 GMT
Subject: CN=6ab582e0-a6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:a9:c0:58:2b:b9:bd:5a:5e:3d:01:c3:fc:
2b:c8:42:9a:8a:b9:75:f4:c0:68:07:60:88:f1:61:
8d:1a:3a:3e:5a:5a:44:c9:2a:93:1e:c8:98:6d:d8:
1f:5a:bf:9a:8d:e0:f2:b3:a3:fd:e6:a2:6a:fe:ac:
1b:66:51:49:b2:16:9a:72:9f:18:5b:c9:14:2b:dd:
a3:4c:ea:df:ac:e4:d6:9a:3c:55:de:e8:23:02:55:
28:a0:39:de:c2:1c:eb:3f:fd:d3:0b:e6:81:59:1b:
95:12:fb:2d:63:79:2f:83:45:18:21:74:8f:46:91:
6b:d9:81:e2:5a:7f:ee:2a:05:36:79:1f:2e:b2:ee:
13:6a:b8:b8:b1:d3:3d:93:7a:5f:8c:62:c4:f0:6f:
de:ae:89:d4:af:e4:63:df:dc:4e:79:97:c7:b2:4c:
c8:5a:0e:a5:8a:8f:64:e7:ac:d8:30:78:1a:c8:a3:
e6:95:d7:21:a0:b6:3f:85:4c:7b:db:cd:c6:8d:ff:
ee:37:64:aa:d4:be:d2:99:a3:81:37:1c:28:08:e0:
34:2f:0d:13:a0:ef:d7:90:30:47:82:cd:bc:8c:37:
0f:52:84:60:57:66:03:a0:ea:b0:bd:68:bb:f9:e3:
ad:65:96:6d:a1:87:ec:42:53:63:8d:9e:78:54:40:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:90:48:93:56:F0:13:44:FE:05:BD:A0:9D:F3:BC:2C:41:B1:2E:0D
X509v3 Authority Key Identifier:
keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:89:08:ec:0f:29:62:f0:89:c1:56:44:0b:b0:1a:e2:8d:48:
7b:64:57:06:9f:50:29:83:63:6c:b3:2b:de:17:7a:90:23:0b:
e8:ee:19:e8:15:fb:e1:fd:83:cc:51:26:8f:45:fe:e8:51:04:
9c:7a:55:26:36:72:cb:7c:61:31:1d:cc:66:2b:e4:17:3a:8b:
bd:e8:41:1a:90:44:eb:00:3d:6b:8c:f4:ee:3f:24:ab:2c:1f:
60:91:56:77:a3:5b:37:c0:5b:f8:31:ce:e9:9e:a9:b3:d2:a0:
6a:2e:d3:cb:cb:10:6b:99:1e:aa:67:e2:03:78:b1:43:d6:06:
2d:b6:73:fa:5f:9c:90:b4:b4:8a:0c:6d:66:ea:89:fd:2b:5a:
28:ba:59:a1:df:63:5c:b8:4f:5c:fe:86:da:2b:76:95:15:8d:
01:05:8c:aa:a6:0b:90:a3:e1:4a:58:a4:e0:f2:3f:5a:10:b4:
e1:fe:4e:77:30:71:9b:47:87:32:94:54:23:ef:80:9f:b4:24:
a2:4f:fb:33:a6:4c:45:4a:59:7e:26:b4:8c:ee:a0:d3:7f:49:
67:a5:be:a4:57:20:96:7c:40:0b:45:7f:46:ae:89:a1:67:eb:
e8:9f:e4:12:8d:51:9f:ba:3f:8f:4f:ea:f3:83:ba:10:9a:dd:
20:34:bc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:17 2026 by rpki-client