
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
File: owBvXZI9TJzDuBs4ocpnEnR9RAY.mft (raw, json)
Hash identifier: yOdwPSTVJ+eK/myeZRe3Q0H+SbZ1ov0CVr8IsSWevNs=
Subject key identifier: 87:F3:9F:5B:F2:7B:4C:95:C1:9E:19:D7:46:3E:94:42:94:63:87:E8
Authority key identifier: A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06
Certificate issuer: /CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
Manifest number: 02A0
Signing time: Fri 09 Oct 2026 02:03:40 +0000
Manifest this update: Fri 09 Oct 2026 02:03:40 +0000
Manifest next update: Fri 16 Oct 2026 02:03:40 +0000
Files and hashes: 1: owBvXZI9TJzDuBs4ocpnEnR9RAY.crl (hash: 5dTPqlQgMCn3AZIfuqZ756jnBW7oa9vnRGZffsz8m/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl
rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 02:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91185B8, serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406
Validity
Not Before: Oct 9 02:03:40 2026 GMT
Not After : Oct 16 02:03:40 2026 GMT
Subject: CN=6ac84b7c-18a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:ad:1f:cd:e0:c6:64:0d:21:c8:c0:66:35:
4d:c3:06:df:5a:b8:7c:30:e6:b2:69:c8:2e:ca:de:
d1:dc:f7:ed:cd:ab:f7:10:7f:bc:29:98:09:ed:90:
99:b5:50:c8:fc:ee:0b:8a:ce:45:05:ca:98:3a:8d:
33:0d:7b:ee:ad:0c:ef:dd:e5:67:75:9e:1e:78:2a:
c4:6f:8c:1c:e7:0c:00:af:00:35:c1:ac:d8:e3:96:
b3:3d:40:01:f6:92:5f:22:7e:e2:49:33:e9:35:74:
1b:36:29:30:e8:6a:05:ec:78:67:b2:bd:46:17:d4:
f7:ce:98:5e:73:25:5d:8b:ba:cf:dd:52:1c:a1:1e:
15:03:ad:32:f3:03:fd:ac:47:0c:1e:1f:83:b8:ba:
15:5d:aa:16:07:e6:b7:12:90:47:9c:e2:66:77:54:
9d:94:c5:ff:c3:22:6f:51:1a:b6:38:7b:cd:45:db:
5e:5b:f1:a1:61:81:c7:3e:cc:ba:3d:2d:58:09:e5:
b8:34:dc:20:ed:22:d4:34:12:ad:70:c0:0c:cf:06:
fa:63:37:03:2c:3b:ce:64:7d:12:18:3d:c8:4a:43:
c5:ca:50:2e:6a:52:0f:20:8e:5b:bf:48:56:2a:3a:
a6:89:bd:ad:f6:9f:3f:19:bf:01:87:da:ec:6e:7a:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F3:9F:5B:F2:7B:4C:95:C1:9E:19:D7:46:3E:94:42:94:63:87:E8
X509v3 Authority Key Identifier:
keyid:A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7d:84:54:1f:4d:a9:56:54:4c:10:49:15:2f:74:3c:8e:a8:
0a:a5:ed:33:e3:85:32:03:d2:f9:77:79:47:17:2c:24:f0:b7:
66:c7:3a:10:7a:6e:67:68:ca:c7:4e:93:75:96:1b:69:09:fc:
80:f5:d0:a0:14:fa:8c:64:90:2b:63:9d:b8:0c:e9:47:b4:85:
03:ff:51:33:84:d4:c9:11:c3:3b:7c:78:e2:5c:b3:05:31:d7:
a0:b0:61:12:28:ff:a4:2e:4b:cf:81:3b:cf:36:3a:94:3e:9a:
47:f6:50:6e:a5:51:95:ae:82:39:f5:85:fe:2d:b6:1a:68:1f:
8f:e0:c1:69:a1:a8:d4:9b:ea:ba:16:5d:4a:56:43:90:45:10:
7c:3f:85:42:bd:b1:07:ab:77:ca:4a:91:90:6b:12:95:15:7e:
61:fb:36:aa:db:f2:ec:3a:0b:85:cd:6f:eb:cf:fc:cf:70:a7:
b0:96:83:2d:b1:15:48:0b:2e:a9:29:bd:ca:9f:1c:27:34:cd:
e7:45:60:e4:8d:ef:df:44:72:ad:a2:7d:cf:80:59:ea:73:ba:
4c:6f:a2:b7:59:86:1a:30:4b:1f:48:f0:c8:c2:93:14:70:7f:
d6:1d:9b:b2:43:8c:d9:b4:08:ba:10:0e:c9:15:de:a5:ab:be:
cb:ab:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:16:51 2026 by rpki-client