
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
File: OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json)
Hash identifier: hJiwzgKoBt805ot4idEqO4zeNS2yrKG3jIzdUzlDsSA=
Subject key identifier: AF:FD:3C:25:4C:05:81:2F:32:6C:68:FA:47:B8:B1:28:9F:1C:58:82
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Certificate issuer: /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial: 1FC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
Manifest number: 1F99
Signing time: Tue 06 Oct 2026 16:00:56 +0000
Manifest this update: Tue 06 Oct 2026 16:00:55 +0000
Manifest next update: Tue 13 Oct 2026 16:00:55 +0000
Files and hashes: 1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: aAtGDHbvbb0C0sbjIXhaZYDZGxy0r3B3jHZyhHwvyYw=)
2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: brx3F+QJqCmHbyv8rdzAimZ77OckcLhAZCr5v55mHrc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8132 (0x1fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1
Validity
Not Before: Oct 6 16:00:55 2026 GMT
Not After : Oct 13 16:00:55 2026 GMT
Subject: CN=6ac51b38-0f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:37:16:91:b7:36:00:fe:eb:9d:0d:32:a3:
67:40:12:fb:97:fa:c5:04:ff:bf:1f:b8:85:85:64:
32:3c:e8:39:a5:4a:0d:59:04:4e:9c:a3:8a:24:92:
e0:6c:f5:1e:44:ba:69:d2:61:fd:c8:91:36:96:8c:
84:0b:e7:dc:b0:4a:54:55:87:d1:0d:17:c3:20:06:
1d:3f:4a:55:9c:6d:7a:91:47:13:bd:e1:04:0f:ec:
4e:d6:78:83:3c:b5:88:d4:33:6a:2e:e1:55:16:9d:
e3:6c:5d:8a:c2:81:ab:92:27:1f:86:ff:66:a7:07:
af:60:2b:21:c9:75:28:99:fc:09:39:ce:de:a8:55:
14:72:9b:ee:49:04:85:e7:d6:ec:e4:f9:fe:70:f0:
c5:68:a2:76:e8:79:33:78:9c:5d:60:0a:99:b8:e9:
07:fa:70:d6:56:c9:51:a8:ce:d0:50:bf:78:c7:95:
7d:a7:4c:18:ad:e1:5b:3b:8f:23:53:53:97:7b:9c:
44:d7:bf:86:6d:2a:4e:8d:54:2a:fd:29:ca:f2:4c:
f4:3c:06:d8:9a:74:02:ec:c0:18:db:63:99:cf:0d:
61:85:5f:04:46:80:29:9b:cd:37:89:00:8d:32:d7:
32:10:cb:18:5b:ab:e2:15:a7:08:b2:01:5b:d5:74:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FD:3C:25:4C:05:81:2F:32:6C:68:FA:47:B8:B1:28:9F:1C:58:82
X509v3 Authority Key Identifier:
keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b2:3b:10:92:6b:ac:09:95:ec:77:1f:94:5d:15:bf:dc:bd:
54:6a:24:6f:a5:32:36:2a:43:57:f9:e4:11:2e:bd:a3:dd:c7:
a1:0d:7e:8d:e7:f2:88:12:2d:12:2a:58:7a:35:51:4f:6e:f6:
a1:8a:a1:86:36:d4:08:c5:79:cc:a3:3b:4c:6d:9c:c7:b9:b3:
74:af:e6:01:04:4b:91:00:43:88:37:f0:e6:cd:f0:46:47:27:
fe:34:76:9a:64:1c:7d:d2:02:d1:f5:de:26:1a:f3:d3:6c:8c:
e1:1a:1a:94:8c:ec:6f:b3:0d:bb:bc:b2:59:82:85:8d:81:d3:
8f:53:bd:0f:94:d8:7c:2a:8a:e2:7a:50:62:78:9d:15:6d:f2:
53:2e:ec:8b:70:77:88:c8:13:67:7a:d6:0d:86:b2:43:e3:ed:
dc:9d:fd:1c:50:02:7c:69:36:93:11:ad:25:7e:d5:31:76:24:
57:5e:50:88:33:56:8c:4b:63:39:6a:d7:64:6f:42:dd:f7:cf:
1e:e0:c9:d9:8e:10:dd:f6:72:c1:b0:80:17:6f:50:1c:dd:56:
7c:3f:4e:30:9b:cd:3f:a9:71:46:26:ec:34:ee:6c:d8:da:72:
6d:3b:ea:4f:02:22:65:b5:1c:35:c3:75:30:6c:37:07:8b:b5:
08:f1:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:55:09 2026 by rpki-client