
$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json)
Hash identifier: Nty9Do0oPXLS918wnnX/RX7q5rD1sQwIiryBIOAbtyc=
Subject key identifier: 09:48:AB:CE:C0:B1:78:66:B8:A0:68:12:E7:BC:02:6A:14:44:4E:79
Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE
Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE
Certificate serial: 0882
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
Manifest number: 0877
Signing time: Sat 04 Apr 2026 20:26:04 +0000
Manifest this update: Sat 04 Apr 2026 20:26:04 +0000
Manifest next update: Sat 11 Apr 2026 20:26:04 +0000
Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: 47t/ybRw6+SQ7ixgIP67hU8NJR4kkBSUy+wHNnOWduo=)
2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: YlLKPrLBFRAZGSSI/PrP1aG6kr00THkq/rtie7tyqFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl
rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178 (0x882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE
Validity
Not Before: Apr 4 20:26:04 2026 GMT
Not After : Apr 11 20:26:04 2026 GMT
Subject: CN=69d173dc-3f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:2c:6c:c9:83:3a:69:96:7e:1a:ce:cf:15:
3e:76:5c:d9:a7:8c:f0:7a:03:b6:f8:f5:02:30:6d:
6e:14:c0:df:1d:8a:75:49:56:6e:5b:b7:fb:97:27:
6d:0c:d1:d4:d9:1e:45:3a:24:3d:71:eb:69:1e:03:
63:c1:5f:2b:b6:89:7a:b7:33:ae:35:f8:6a:bd:da:
32:3e:b6:2c:85:10:e7:2d:97:a4:20:45:ff:11:94:
7c:04:96:98:5d:d3:14:d3:ed:6b:80:63:64:4a:26:
9e:fd:db:ea:11:f1:97:b7:d6:23:45:37:0e:66:e6:
74:3b:80:ab:17:c2:24:f5:07:2c:05:ad:a0:bc:6c:
72:c8:18:3d:e0:18:43:cc:a8:78:0b:d9:e7:c8:ba:
95:50:08:56:a1:38:0e:e3:6c:44:04:de:a0:88:91:
d2:5c:1c:de:63:06:94:05:a6:d8:35:a8:b1:5f:06:
4b:14:a6:8b:c7:34:b6:f8:b4:9c:7e:12:56:62:a0:
2d:88:2d:6c:91:47:4b:e1:61:89:07:66:56:c2:83:
e4:3c:87:3c:24:a4:8c:b0:9a:8e:89:b8:d4:74:65:
b6:61:48:bd:66:e7:e1:06:b0:c7:8e:14:f4:d6:f9:
b2:0b:d2:80:3b:5f:13:f7:be:3a:84:c7:27:ee:52:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:48:AB:CE:C0:B1:78:66:B8:A0:68:12:E7:BC:02:6A:14:44:4E:79
X509v3 Authority Key Identifier:
keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:af:83:c5:86:18:fe:06:2b:6a:f7:7a:f4:74:5a:2d:14:ee:
df:22:c0:ac:c5:df:c9:42:30:79:38:b4:ac:d1:96:1b:ea:f0:
1a:e5:60:b5:36:4c:96:62:10:36:c7:0d:4c:21:da:38:3b:7a:
89:3c:49:06:41:aa:76:94:ae:53:30:54:3f:93:8b:46:54:6e:
1a:cb:bf:db:d7:2d:bc:7c:7b:24:01:69:e5:45:2d:91:80:82:
33:13:6f:3f:c6:f3:6f:51:9b:1d:0a:20:da:c8:f4:fe:c2:bf:
bb:62:27:e3:9c:97:e4:fa:76:1d:f3:dd:bc:2a:16:58:17:21:
e9:44:e2:c2:86:10:96:f5:44:59:db:5c:4c:25:2d:37:ee:d0:
52:76:41:eb:37:f2:92:fb:11:a9:8c:ac:79:77:5e:36:10:a5:
3a:2a:52:e5:ce:94:dc:48:cb:54:15:9e:f0:91:2f:40:55:9e:
06:d0:f2:58:15:77:00:a3:38:dd:5e:9d:35:4e:9d:54:d6:f7:
c4:4c:c0:28:d5:72:e0:91:a6:08:a7:00:97:c2:90:92:92:e7:
89:8e:aa:ac:9c:d9:2d:4e:7c:95:d3:d9:8f:d3:81:5d:03:03:
a7:67:95:3f:dc:24:ac:e7:e4:6f:e2:5c:2c:35:ec:04:1a:d3:
ab:b2:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:03 2026 by rpki-client