
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json)
Hash identifier: dAOgVjPSPOwoTLRApTfezQb3vJN5danV9KjjHRcj6yI=
Subject key identifier: 5B:10:44:98:50:EB:71:C2:EF:6E:58:5F:F2:E2:30:62:78:8C:46:DE
Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
Manifest number: FB
Signing time: Sun 11 Oct 2026 06:57:31 +0000
Manifest this update: Sun 11 Oct 2026 06:57:31 +0000
Manifest next update: Sun 18 Oct 2026 06:57:31 +0000
Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: 6JVgPTtIE6z/XHATODk+YOdaqFQbO3toZj9rF+LWwao=)
2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: xuTjK+fWz73yqU/m4ZT9uQGoIAPUGqWFOmnzfiePcSo=)
3: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: JA5c+7d2qZTIm69DCdbstQqBEizQ9Ks5KiXF+78kjhU=)
4: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: 53ZWjWlrVEqMyyvIGIAG0rSeNEbjukC62nS0Gg37TsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Validity
Not Before: Oct 11 06:57:31 2026 GMT
Not After : Oct 18 06:57:31 2026 GMT
Subject: CN=6acb335b-d515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:84:9c:24:fe:9a:3c:a5:0b:9f:8b:9a:8f:
b4:10:63:8b:e1:2b:bb:84:43:31:20:a1:08:e2:c1:
0c:ad:23:8e:53:8b:3d:ee:e7:6d:10:32:7b:32:22:
e7:95:48:08:56:10:2b:83:64:aa:5c:0f:ce:05:38:
f1:f0:3d:ee:e4:9d:b9:1c:70:1f:21:c7:d1:19:7c:
e5:86:fe:23:20:4a:54:6c:3c:26:2f:ee:75:9e:98:
0b:98:0a:61:b3:f9:99:0a:c0:8b:43:1a:44:7f:95:
76:f8:97:03:0f:5c:8f:c6:b2:31:5b:11:86:77:e8:
bf:f2:de:27:b5:b8:09:6e:59:64:3f:32:47:f7:62:
04:fc:ce:fa:07:61:d2:fb:8f:b8:ef:79:41:00:8d:
60:ca:00:30:5f:48:4c:8a:0f:c4:92:da:fe:88:de:
00:23:21:43:30:51:90:d9:c0:27:da:46:45:26:cd:
85:bc:da:e9:51:47:4b:e4:c8:c0:b2:65:ed:85:82:
f0:74:60:83:79:af:ab:bd:dc:34:d5:ea:9b:ed:7d:
03:b5:52:f4:13:9b:16:d6:81:e6:88:76:40:f9:b0:
3c:ce:cf:25:b2:5d:a3:cf:21:bd:d7:43:bb:0b:a8:
0d:e9:b3:79:70:a4:35:b6:04:dd:d1:d7:bc:2e:e7:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:44:98:50:EB:71:C2:EF:6E:58:5F:F2:E2:30:62:78:8C:46:DE
X509v3 Authority Key Identifier:
keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:0e:82:00:ae:fd:2a:7e:77:1c:91:99:9b:c4:8c:7d:e0:96:
05:e0:54:62:8c:f0:e7:67:a2:92:68:b3:d6:3f:7d:5e:c4:fd:
6a:eb:bc:f5:05:c7:cf:4d:36:28:13:1d:b6:48:80:bc:bd:38:
09:94:4a:c8:f7:68:25:f9:92:82:80:3f:46:e6:96:d7:61:5b:
c6:82:f0:77:d4:dc:f1:8e:96:40:d0:a2:09:7a:ad:22:86:05:
ec:61:06:e0:e9:93:53:65:86:04:33:a3:72:f1:3a:fd:97:16:
4b:35:f8:07:07:08:e4:ab:f9:3b:b2:5e:62:88:3d:ca:83:70:
fa:48:bb:41:8f:b0:ac:11:77:10:d8:da:a4:67:be:6e:2c:82:
b6:a9:f5:12:08:83:b8:a7:0d:c8:8c:62:8c:79:97:de:5b:f9:
92:9c:2f:13:02:1d:74:54:7c:53:b9:c3:b1:ba:6a:fc:f0:79:
00:d5:5a:87:31:2a:19:e2:3d:5f:73:1d:74:6b:b4:79:64:79:
30:54:bc:e7:29:e5:cf:1f:dc:88:c9:40:a2:6b:97:a2:3e:06:
a5:a6:9c:bf:75:a2:29:e6:dc:ed:31:44:b1:0a:ba:b4:20:e8:
4c:51:04:41:85:e5:16:fe:2d:ae:58:93:54:82:0d:1a:e3:fb:
b6:97:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:37:28 2026 by rpki-client