
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json)
Hash identifier: qKKLa7n/CALVfBr0MjhC1fGzRto8Z2mQYrgkGCa7yVQ=
Subject key identifier: 9E:87:85:D4:2A:BD:95:00:11:1F:C7:F0:A7:21:71:57:27:13:AA:12
Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
Manifest number: 0205
Signing time: Mon 19 Oct 2026 03:44:32 +0000
Manifest this update: Mon 19 Oct 2026 03:44:32 +0000
Manifest next update: Mon 26 Oct 2026 03:44:32 +0000
Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: ifVP03Ov7jsMj8uu5+3AxpYX6ggxWcKNSuYXCv9ICe0=)
2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: vF01duODiwTYz9/MMIZAj5OF+2YRcDoyyVIZ0SFGCBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl
rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 03:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Validity
Not Before: Oct 19 03:44:32 2026 GMT
Not After : Oct 26 03:44:32 2026 GMT
Subject: CN=6ad59220-de77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:4a:f1:47:79:71:c0:1e:95:39:12:4c:59:
2f:04:0c:49:d1:30:65:39:23:50:8e:e9:32:02:4e:
bd:fe:73:6a:fa:e0:a4:e3:98:7c:1b:df:0f:48:d4:
d8:65:42:85:0a:9a:61:3b:ee:b4:d7:db:e0:a2:c2:
72:f3:2b:5f:8a:d5:34:77:b3:9d:b8:c2:d9:11:26:
49:86:69:60:83:92:f6:08:0e:67:89:ce:11:28:08:
53:8d:da:2d:9e:a1:4f:c9:28:7c:23:0b:fb:1c:d8:
0a:9f:50:75:0a:88:e2:66:3a:49:34:9d:2e:2e:7a:
73:62:30:31:f3:5b:9d:c9:dd:56:68:ea:f1:e6:d0:
d1:3a:c2:31:f4:fb:ee:48:d5:23:92:14:56:78:e8:
e8:aa:38:46:76:b4:17:26:24:18:dc:7f:80:62:a8:
a1:15:46:42:de:d1:c4:9f:68:c8:2f:36:f1:a2:36:
44:dd:dd:07:19:00:6c:ad:44:7b:38:91:16:27:49:
1f:b9:35:b5:1d:29:75:be:8a:08:ee:40:dc:11:81:
57:d0:e0:5c:c9:33:0a:a8:c1:6d:a8:d4:19:5c:71:
6c:9e:de:95:4a:f7:71:f9:ec:84:14:9a:04:0b:69:
44:2c:64:71:c2:61:20:3b:79:c2:c9:f9:aa:23:35:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:87:85:D4:2A:BD:95:00:11:1F:C7:F0:A7:21:71:57:27:13:AA:12
X509v3 Authority Key Identifier:
keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:0d:14:d7:a7:11:8d:b2:9d:c0:ae:7d:57:96:30:81:d4:b2:
80:2d:42:fa:d7:c7:0f:75:96:4f:69:c5:b6:71:03:65:9c:8f:
7e:7c:01:4e:50:13:a5:40:46:1b:76:8e:32:20:d5:aa:c0:a2:
a3:c9:13:f9:26:61:d4:71:b9:56:54:e6:43:ce:83:4d:ba:30:
f4:b1:1d:30:28:c4:99:1c:fe:04:54:a4:c9:84:e3:2d:ef:4a:
ef:3a:cf:b9:80:8e:b7:95:36:ee:44:46:73:d2:10:8c:f0:05:
f6:70:0f:d6:96:76:96:16:23:7f:af:08:05:11:6f:1f:05:6d:
ab:af:b1:1d:b7:d9:2b:42:6e:b6:74:ba:1d:8f:46:d0:53:fb:
55:84:12:d3:7c:b2:bd:d4:96:e6:9d:c0:1c:66:65:d2:14:ba:
23:30:73:ab:2c:94:aa:d2:58:6f:ef:e4:58:1b:a8:c4:7a:30:
dd:a2:13:14:d4:4b:2c:1b:78:48:b8:38:33:97:0d:4d:42:ca:
71:d3:93:d2:99:f1:7e:c2:e6:04:6e:a3:e0:8c:0f:71:60:29:
55:9d:39:e1:6e:c3:ed:45:45:3a:8c:bc:1f:8a:c4:13:b0:56:
a1:87:3c:5f:22:97:fb:c6:2d:81:0a:3d:69:ed:4c:b6:16:82:
0a:ff:ff:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYwNkExMTAvBgNVBAUTKEEzQ0IzOThFQzczOTUxNzQ3NjJEOTMwMzNFNzA2MDlE
NjBGNEREQjIwHhcNMjYxMDE5MDM0NDMyWhcNMjYxMDI2MDM0NDMyWjAYMRYwFAYD
VQQDEw02YWQ1OTIyMC1kZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtp1K8Ud5ccAelTkSTFkvBAxJ0TBlOSNQjukyAk69/nNq+uCk45h8G98PSNTY
ZUKFCpphO+6019vgosJy8ytfitU0d7OduMLZESZJhmlgg5L2CA5nic4RKAhTjdot
nqFPySh8Iwv7HNgKn1B1CojiZjpJNJ0uLnpzYjAx81udyd1WaOrx5tDROsIx9Pvu
SNUjkhRWeOjoqjhGdrQXJiQY3H+AYqihFUZC3tHEn2jILzbxojZE3d0HGQBsrUR7
OJEWJ0kfuTW1HSl1vooI7kDcEYFX0OBcyTMKqMFtqNQZXHFsnt6VSvdx+eyEFJoE
C2lELGRxwmEgO3nCyfmqIzXGuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6HhdQq
vZUAER/H8KchcVcnE6oSMB8GA1UdIwQYMBaAFKPLOY7HOVF0di2TAz5wYJ1g9N2y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS80RjI1ODhFNEJC
NDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVYUjJMWk1EUG5CZ25XRDAz
YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNiSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjA2QS80RjI1ODhFNEJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVY
UjJMWk1EUG5CZ25XRDAzYkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYA0U16cRjbKdwK59V5YwgdSygC1C+tfHD3WWT2nFtnEDZZyPfnwBTlATpUBG
G3aOMiDVqsCio8kT+SZh1HG5VlTmQ86DTbow9LEdMCjEmRz+BFSkyYTjLe9K7zrP
uYCOt5U27kRGc9IQjPAF9nAP1pZ2lhYjf68IBRFvHwVtq6+xHbfZK0JutnS6HY9G
0FP7VYQS03yyvdSW5p3AHGZl0hS6IzBzqyyUqtJYb+/kWBuoxHow3aITFNRLLBt4
SLg4M5cNTULKcdOT0pnxfsLmBG6j4IwPcWApVZ054W7D7UVFOoy8H4rEE7BWoYc8
XyKX+8YtgQo9ae1MthaCCv//Ug==
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:19:39 2026 by rpki-client