
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
File: O8azIf17YMVg8V19JMrFozdED7Q.mft (raw, json)
Hash identifier: exXaSweO+nXoS1bwnAH+oA/eQfifNXm7LJ5liErnaiQ=
Subject key identifier: 9D:96:C9:8D:FF:4D:81:64:63:42:2A:84:BE:64:08:1E:9B:78:C2:70
Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
Certificate issuer: /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
Manifest number: 07FE
Signing time: Sun 04 Oct 2026 21:20:48 +0000
Manifest this update: Sun 04 Oct 2026 21:20:47 +0000
Manifest next update: Sun 11 Oct 2026 21:20:47 +0000
Files and hashes: 1: O8azIf17YMVg8V19JMrFozdED7Q.crl (hash: btg6Xy9wX2xQjzXlgdHU8NibyQPD/uKauBzhdaGlduQ=)
2: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (hash: By7/GJ4vrsW+p6nlCrl+Q0fqyxwGg35EjwhrqyWk25M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 21:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911980F, serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Validity
Not Before: Oct 4 21:20:47 2026 GMT
Not After : Oct 11 21:20:47 2026 GMT
Subject: CN=6ac2c330-f19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:6a:60:41:c3:1b:04:43:d6:a1:48:13:3e:
77:ee:ed:6d:c2:5e:9d:61:71:91:1d:04:1a:70:23:
31:6b:7a:27:37:d7:4b:01:23:5e:e7:d9:9c:a2:19:
40:2a:c7:2e:ec:e2:33:6e:ad:62:09:e2:49:f3:91:
c3:6e:b8:e5:d6:24:f7:43:30:51:f5:da:e4:b2:86:
06:f4:b2:74:b5:49:1e:e7:c9:01:14:72:8d:a7:8a:
de:09:47:70:7f:85:e9:0e:e9:c9:b4:7e:82:5f:f8:
b2:64:6a:60:86:dc:90:23:d8:a6:7d:1b:a3:61:9c:
eb:f3:34:68:29:44:29:47:d9:c1:e3:7f:9f:88:4f:
07:df:3e:43:44:91:ca:60:93:dd:13:b6:e9:b4:75:
a1:17:35:8a:6b:6d:48:fa:ce:da:25:72:36:e2:e1:
6d:97:ae:a7:86:6b:a9:f2:89:09:11:4b:34:b3:f8:
40:c6:1a:89:75:3f:d7:69:07:87:07:52:bb:b1:12:
42:9a:77:48:93:3c:a2:3a:81:5f:91:fd:0c:45:3b:
5a:82:84:07:37:61:ff:6a:71:0a:d5:a1:29:f6:a2:
70:ce:03:cb:83:bb:7d:ff:69:e0:48:8f:90:1a:2e:
01:94:51:96:0b:56:c4:d0:c9:76:43:c6:fd:75:d2:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:C9:8D:FF:4D:81:64:63:42:2A:84:BE:64:08:1E:9B:78:C2:70
X509v3 Authority Key Identifier:
keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:fe:2a:4a:97:75:a3:dc:99:b0:64:75:d3:a3:45:78:13:f7:
09:65:82:f2:3b:f1:91:db:d0:69:90:16:b4:ed:63:33:9f:ef:
6a:aa:0e:cc:9f:61:ae:95:57:57:5f:d2:4d:02:62:15:f7:37:
6b:40:6f:d9:42:d3:d1:1a:e4:4c:77:25:30:dc:72:72:df:1c:
52:eb:e5:26:03:c4:15:51:ac:02:a3:d0:af:d1:33:86:49:37:
58:f0:60:91:58:4c:0c:94:67:f1:14:c6:02:5f:3f:1e:e9:86:
bf:51:d1:f9:bd:5f:94:89:3b:ad:4c:3f:63:27:6d:c9:01:54:
d4:e4:a1:14:8f:b2:ab:3b:3b:c5:59:f2:6b:55:a0:be:84:95:
34:cb:0b:4b:14:c7:bd:c9:d8:f2:53:e7:87:e1:71:96:90:8d:
c7:57:52:4d:42:ef:14:c9:cf:cd:d9:22:7a:b6:ea:82:d2:db:
72:f6:4e:cb:45:a1:cc:a1:c7:09:4c:0b:54:de:18:fd:2a:80:
c3:b4:e4:1d:b1:37:be:a2:21:3b:16:1f:2c:3c:a3:59:28:cb:
56:a6:fd:de:e6:23:8d:69:07:b4:80:6b:17:df:f1:77:95:9f:
dc:91:8b:a4:e9:c2:c5:05:6d:0b:30:3f:04:e4:28:9c:5a:5c:
b4:b6:56:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk4MEYxMTAvBgNVBAUTKDNCQzZCMzIxRkQ3QjYwQzU2MEYxNUQ3RDI0Q0FDNUEz
Mzc0NDBGQjQwHhcNMjYxMDA0MjEyMDQ3WhcNMjYxMDExMjEyMDQ3WjAYMRYwFAYD
VQQDEw02YWMyYzMzMC1mMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxp5qYEHDGwRD1qFIEz537u1twl6dYXGRHQQacCMxa3onN9dLASNe59mcohlA
Kscu7OIzbq1iCeJJ85HDbrjl1iT3QzBR9drksoYG9LJ0tUke58kBFHKNp4reCUdw
f4XpDunJtH6CX/iyZGpghtyQI9imfRujYZzr8zRoKUQpR9nB43+fiE8H3z5DRJHK
YJPdE7bptHWhFzWKa21I+s7aJXI24uFtl66nhmup8okJEUs0s/hAxhqJdT/XaQeH
B1K7sRJCmndIkzyiOoFfkf0MRTtagoQHN2H/anEK1aEp9qJwzgPLg7t9/2ngSI+Q
Gi4BlFGWC1bE0Ml2Q8b9ddKyZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2WyY3/
TYFkY0IqhL5kCB6beMJwMB8GA1UdIwQYMBaAFDvGsyH9e2DFYPFdfSTKxaM3RA+0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTgwRi8xNjYxN0Q2QzQ4
MzIxMUVCODc1NDMxMUFDNEY5QUUwMi9POGF6SWYxN1lNVmc4VjE5Sk1yRm96ZEVE
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL084YXpJZjE3WU1WZzhWMTlKTXJGb3pkRUQ3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTgwRi8xNjYxN0Q2QzQ4MzIxMUVCODc1NDMxMUFDNEY5QUUwMi9POGF6SWYxN1lN
Vmc4VjE5Sk1yRm96ZEVEN1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmf4qSpd1o9yZsGR106NFeBP3CWWC8jvxkdvQaZAWtO1jM5/vaqoOzJ9hrpVX
V1/STQJiFfc3a0Bv2ULT0RrkTHclMNxyct8cUuvlJgPEFVGsAqPQr9Ezhkk3WPBg
kVhMDJRn8RTGAl8/HumGv1HR+b1flIk7rUw/YydtyQFU1OShFI+yqzs7xVnya1Wg
voSVNMsLSxTHvcnY8lPnh+FxlpCNx1dSTULvFMnPzdkierbqgtLbcvZOy0WhzKHH
CUwLVN4Y/SqAw7TkHbE3vqIhOxYfLDyjWSjLVqb93uYjjWkHtIBrF9/xd5Wf3JGL
pOnCxQVtCzA/BOQonFpctLZWcw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:56:36 2026 by rpki-client