
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json)
Hash identifier: mpCs/xp6hvB0Dp1HzEbH+5Km9fvWQNAWMbzg6/0qqkI=
Subject key identifier: 13:4B:87:08:C8:FD:B4:03:A2:33:F4:55:92:A6:2E:7F:1B:96:65:A4
Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
Manifest number: FC
Signing time: Sun 11 Oct 2026 06:50:54 +0000
Manifest this update: Sun 11 Oct 2026 06:50:53 +0000
Manifest next update: Sun 18 Oct 2026 06:50:53 +0000
Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: 2XlMhdKxSEPJOupsoBQNiFCYuqR09PI0vW8NZgNS7/w=)
2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: HBHirPwIg8T3HMiSC7xRXD2o3Qo0xRqSAK0Lb8fw1XM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Validity
Not Before: Oct 11 06:50:53 2026 GMT
Not After : Oct 18 06:50:53 2026 GMT
Subject: CN=6acb31ce-85fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:e0:43:f6:b5:cc:6a:84:b8:57:50:50:0b:
d7:9a:c0:66:f2:a0:54:d2:01:74:10:d0:d9:4f:8f:
e3:43:d8:05:9e:25:ab:c8:f7:ed:b5:3d:bd:e1:04:
c4:63:2c:e7:23:39:d4:19:5f:c2:f1:af:ba:ab:a8:
de:3a:b0:1d:9d:d5:b3:2b:f0:fa:98:88:a9:e1:69:
5e:5a:86:bc:03:7d:ac:5c:b2:88:33:18:90:89:06:
d7:71:fd:5e:c0:9d:b4:93:bf:b1:ca:ac:53:97:74:
c0:8d:4e:d6:b6:19:8d:e5:5c:d1:88:a8:fe:91:4e:
b1:71:07:0f:75:6f:93:2d:39:09:8a:63:c0:c7:07:
6a:17:fc:5c:90:69:d0:0a:1c:8c:d4:a4:48:ae:e4:
26:91:6a:82:5c:d5:20:fe:c8:e9:f4:d8:42:c6:b2:
42:f2:a8:f7:ee:1a:10:c6:f0:61:03:14:7d:2e:11:
0e:96:e4:a9:e3:3f:b6:56:0a:44:09:e3:32:46:16:
8e:38:d8:59:52:bf:80:76:1f:93:aa:4e:c0:0f:07:
c9:27:5c:a2:16:97:60:d2:41:ec:e1:1a:c1:00:cb:
95:42:f5:0b:bf:75:1f:0f:cd:d4:cb:07:1c:8f:17:
95:21:39:6e:3e:56:ac:1d:ff:35:1d:2d:d3:81:5f:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4B:87:08:C8:FD:B4:03:A2:33:F4:55:92:A6:2E:7F:1B:96:65:A4
X509v3 Authority Key Identifier:
keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:09:35:d4:da:37:34:8c:30:34:71:d8:eb:fd:a6:09:f1:a3:
a8:72:e2:51:d9:8a:ef:17:aa:8d:f2:be:5e:5a:9d:45:ff:64:
37:a3:77:43:ef:a3:bd:4f:38:6c:2f:df:09:59:34:7a:92:ab:
3c:d1:53:b2:ea:96:17:7a:cd:6d:dd:20:96:58:de:95:3e:7d:
7e:cd:1e:59:42:94:96:40:67:de:be:79:24:e4:43:f7:25:f4:
5e:ed:3a:47:1d:f4:c1:58:91:ac:92:2a:64:01:28:c2:51:04:
45:96:a1:76:80:74:a7:bd:05:a9:5f:69:f0:53:55:e2:28:97:
ec:06:70:28:9d:b0:3b:66:4d:6b:41:cb:1c:f2:a3:51:42:3d:
89:17:23:7c:3b:e1:d3:4e:e9:63:37:0f:3d:c3:2d:59:16:0e:
c2:e8:ad:d9:c7:e1:b6:55:3f:c0:d3:cc:e8:2a:4b:36:00:5d:
ee:4a:27:bc:28:d0:bd:55:d2:07:bc:89:f9:05:9d:c3:84:5f:
32:c7:51:e8:52:40:1b:c0:66:18:7f:fa:7a:1f:21:4e:bc:ad:
d4:0d:d7:c9:7a:a6:dd:38:cc:5e:99:e0:cb:64:52:a5:f1:36:
f5:06:2d:a1:2a:e9:b2:23:fd:e3:21:92:d4:b8:24:81:26:e9:
b7:a6:2a:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc1MEIxMTAvBgNVBAUTKDNCODM1ODUzNUJDNjI4NTY0QUY1NkYzMUQ4NzU4NjQ4
RTFEMDQzMDQwHhcNMjYxMDExMDY1MDUzWhcNMjYxMDE4MDY1MDUzWjAYMRYwFAYD
VQQDEw02YWNiMzFjZS04NWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArXngQ/a1zGqEuFdQUAvXmsBm8qBU0gF0ENDZT4/jQ9gFniWryPfttT294QTE
YyznIznUGV/C8a+6q6jeOrAdndWzK/D6mIip4WleWoa8A32sXLKIMxiQiQbXcf1e
wJ20k7+xyqxTl3TAjU7WthmN5VzRiKj+kU6xcQcPdW+TLTkJimPAxwdqF/xckGnQ
ChyM1KRIruQmkWqCXNUg/sjp9NhCxrJC8qj37hoQxvBhAxR9LhEOluSp4z+2VgpE
CeMyRhaOONhZUr+Adh+Tqk7ADwfJJ1yiFpdg0kHs4RrBAMuVQvULv3UfD83Uywcc
jxeVITluPlasHf81HS3TgV+j/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNLhwjI
/bQDojP0VZKmLn8blmWkMB8GA1UdIwQYMBaAFDuDWFNbxihWSvVvMdh1hkjh0EME
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzUwQi82NEQwNzc0ODQ2
OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9PNE5ZVTF2R0tGWks5Vzh4MkhXR1NPSFFR
d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL080TllVMXZHS0ZaSzlXOHgySFdHU09IUVF3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzUwQi82NEQwNzc0ODQ2OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9PNE5ZVTF2R0tG
Wks5Vzh4MkhXR1NPSFFRd1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHwk11No3NIwwNHHY6/2mCfGjqHLiUdmK7xeqjfK+XlqdRf9kN6N3Q++jvU84
bC/fCVk0epKrPNFTsuqWF3rNbd0glljelT59fs0eWUKUlkBn3r55JORD9yX0Xu06
Rx30wViRrJIqZAEowlEERZahdoB0p70FqV9p8FNV4iiX7AZwKJ2wO2ZNa0HLHPKj
UUI9iRcjfDvh007pYzcPPcMtWRYOwuit2cfhtlU/wNPM6CpLNgBd7konvCjQvVXS
B7yJ+QWdw4RfMsdR6FJAG8BmGH/6eh8hTryt1A3XyXqm3TjMXpngy2RSpfE29QYt
oSrpsiP94yGS1LgkgSbpt6Yqew==
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:47:32 2026 by rpki-client