
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
File: oiK21tBSghQiHUrOpH4axhHvQno.mft (raw, json)
Hash identifier: 6Z+6qr+1A3k4+1Skcc9m8/NcOER+Eu7Ao7FvR2g0mKU=
Subject key identifier: 06:33:C2:D9:BA:35:31:FC:95:93:B6:81:93:0F:F0:CD:2A:E8:2C:7A
Authority key identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
Certificate issuer: /CN=A911F177/serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Certificate serial: 0893
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
Manifest number: 088A
Signing time: Sun 04 Oct 2026 20:49:11 +0000
Manifest this update: Sun 04 Oct 2026 20:49:10 +0000
Manifest next update: Sun 11 Oct 2026 20:49:10 +0000
Files and hashes: 1: oiK21tBSghQiHUrOpH4axhHvQno.crl (hash: igd0xVuh7+QPMCs2YtWcyd9cdUBwubR7kwZ7RkJKH18=)
2: xosLs9gxjLye4Md2p_wN9v341dg.asa (hash: ELumtCiBu3e8hIqFAE5GuOwgdm+a08Wy8PhqYRVWwfA=)
3: 90203ACEDEE811EBA82BEF41C4F9AE02.roa (hash: oot2eMtZy8Bb20t9t+iEwLkFtUPz+/MiX0LVfUtGAbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl
rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195 (0x893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F177, serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Validity
Not Before: Oct 4 20:49:10 2026 GMT
Not After : Oct 11 20:49:10 2026 GMT
Subject: CN=6ac2bbc6-f8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:e4:8c:c6:74:58:ab:3e:81:2e:1d:fe:b5:
5f:0f:fe:a1:9d:a6:c7:6a:2e:5a:60:9e:9f:38:a1:
e7:c3:7d:d6:bf:b1:f5:8f:1f:f1:60:8f:3c:c8:b2:
c9:e5:2e:01:5e:49:2c:22:d1:59:93:ec:26:0e:86:
37:fa:b1:4a:7f:92:f0:1b:71:01:b3:ba:56:6d:ec:
4d:e3:32:e5:3b:7d:a8:ca:34:1f:d0:ab:19:3a:90:
e7:99:67:6f:14:d3:df:99:41:65:49:8f:92:e0:a6:
e9:6c:bf:3d:7a:b6:db:53:7d:b6:0f:2b:75:2b:25:
2b:6e:c7:06:f7:09:6d:4e:22:f8:a1:19:e9:40:13:
c6:6a:3c:81:84:30:18:1f:9d:b4:51:53:ee:e4:9a:
ba:c1:ff:84:24:83:69:86:cc:d1:de:08:d3:00:48:
39:78:bb:d6:c3:35:9d:37:2c:53:69:19:d6:4d:b2:
37:24:0a:46:dd:20:7b:b8:69:45:33:1e:1b:33:b4:
b1:4e:e1:e7:77:dc:85:dd:a9:ef:2c:31:59:8b:20:
eb:06:9e:95:95:67:81:f4:00:34:74:d8:1b:e2:7f:
6d:30:5c:0a:c5:53:93:48:35:da:de:5b:a5:6c:8f:
f6:8c:61:f8:f8:c5:8a:62:c3:0f:b5:cf:b2:ac:7c:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:33:C2:D9:BA:35:31:FC:95:93:B6:81:93:0F:F0:CD:2A:E8:2C:7A
X509v3 Authority Key Identifier:
keyid:A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4e:2b:b9:4e:b9:30:97:9c:a4:57:6f:36:97:b5:f9:18:69:
1c:86:c9:f2:59:6b:11:5e:e6:c0:f1:bb:12:dc:7e:23:f4:10:
cb:66:db:01:32:70:44:dc:ec:a9:f5:11:f0:bc:f7:70:ed:b1:
46:31:0c:94:bd:b8:fc:5a:f2:27:a3:37:76:cd:75:f4:4e:13:
e3:26:71:ea:c3:a5:83:37:8c:1b:25:84:04:98:88:e6:88:77:
28:04:78:8f:34:3d:0f:33:c3:8c:d7:55:75:5d:63:bd:07:40:
4a:39:a7:e0:99:b6:51:ff:a5:f5:e2:04:0d:0e:81:44:4f:64:
0b:16:61:17:d1:f6:43:c9:3b:50:28:86:a1:e1:c6:b1:7c:12:
8a:98:11:9e:da:98:77:f1:80:89:ee:1a:2e:52:86:33:6b:2f:
05:6e:9a:1f:8a:bf:50:2a:0b:eb:97:c4:02:39:e2:18:22:4d:
13:ed:a0:28:bf:b2:20:46:bf:0b:b6:7b:8c:d2:c8:7e:23:1d:
5c:50:cc:51:a2:d8:7e:d3:4e:b1:a6:bc:c0:33:25:9c:ae:3a:
14:78:6f:30:72:b6:61:16:1c:7a:86:c8:d4:c1:85:a3:46:44:
e0:59:f6:f8:2e:fb:52:64:00:40:eb:75:f7:bb:7e:62:af:73:
fe:57:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:36:58 2026 by rpki-client