
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json)
Hash identifier: E5kGj5l8UZ0KfMAhxNkFtFgCsKN7/LekluM9hLbHxhA=
Subject key identifier: 93:01:96:2B:3C:51:73:3E:83:5A:61:9E:1E:FA:2F:58:EA:A7:B6:0E
Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
Manifest number: 01FA
Signing time: Wed 07 Oct 2026 03:44:25 +0000
Manifest this update: Wed 07 Oct 2026 03:44:24 +0000
Manifest next update: Wed 14 Oct 2026 03:44:24 +0000
Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: w+76jgeruxACqCrsFFKyDtyIfnCLFTmjU0kn/8yfwA8=)
2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: kEA6yeUhDISU7WpJDe7H86w819sEogR4lALDsAB0ROU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Validity
Not Before: Oct 7 03:44:24 2026 GMT
Not After : Oct 14 03:44:24 2026 GMT
Subject: CN=6ac5c019-0daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:4b:aa:d4:98:67:e2:24:d9:08:5c:05:4d:
14:3a:91:60:d3:32:d9:47:22:8f:73:98:b8:da:2a:
af:f6:13:94:fe:45:4a:61:19:6e:83:54:a7:0e:34:
4f:97:7a:1b:52:14:39:87:95:31:c5:3c:f4:f6:51:
6c:f2:2f:73:27:f4:cb:96:85:91:5c:30:28:e2:3a:
62:af:94:1f:9a:3a:a3:30:2d:5a:05:eb:ce:4b:92:
40:34:aa:2c:3b:89:ea:e0:93:7f:a2:4c:61:2e:33:
4d:9d:6f:9a:c2:63:ce:28:ce:b4:3b:72:fe:1a:3b:
3f:8d:86:88:9a:fc:34:a2:da:6d:28:53:6d:c1:b9:
73:5f:b9:53:69:90:5e:48:60:5b:fd:cf:8c:a4:e9:
be:44:49:c6:51:98:fd:65:1b:43:d7:5b:27:a9:de:
5a:e8:c7:73:42:9a:0d:2d:7a:fd:2e:20:63:7e:e1:
81:98:bb:cb:ea:73:f9:5e:a5:9f:c2:a2:a7:be:a5:
05:34:16:7a:6b:6c:a6:fb:86:fb:3c:d0:37:1a:4e:
bc:39:a6:33:ee:b1:b8:5b:d8:4a:25:e9:93:c8:22:
19:91:b3:9a:50:69:ae:96:2c:35:7b:08:dc:04:32:
b2:90:64:05:4f:5d:46:d0:92:93:f4:b7:3c:e9:62:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:01:96:2B:3C:51:73:3E:83:5A:61:9E:1E:FA:2F:58:EA:A7:B6:0E
X509v3 Authority Key Identifier:
keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bd:97:21:a9:21:cb:34:da:a7:ca:3d:40:fc:69:1c:d4:32:
de:04:3e:d5:9d:f8:de:f4:c8:f1:55:b4:d2:75:76:75:24:3b:
9f:04:b9:d9:84:50:ab:d3:5e:45:c7:04:90:fa:05:24:e7:6d:
02:70:e6:77:2c:3f:bc:cf:d3:b8:2e:de:b3:ec:85:0d:be:5b:
4f:5f:af:29:b4:5c:38:4b:5f:9b:c5:90:9f:fd:40:98:22:67:
96:39:6b:17:d7:79:c5:2d:91:23:16:c2:eb:fb:55:60:a4:8f:
71:20:f3:3d:5e:4f:f7:0b:54:94:d6:ce:cc:77:88:08:3b:46:
6c:7f:88:05:9f:07:74:f9:ba:20:55:a5:82:cf:90:e7:6f:d8:
6c:84:d0:c8:b1:35:d5:a5:8c:bd:2e:56:b7:2e:1a:b9:14:8f:
16:0e:cb:d4:91:1b:33:5b:31:d4:27:de:77:b0:74:44:81:45:
42:94:fa:66:3b:58:e3:5d:ce:ea:0c:da:ba:5c:dd:8f:2d:11:
b6:e1:0d:05:0d:4d:03:0d:07:9f:41:f4:25:c2:d6:bc:b4:9a:
01:ac:d5:9e:12:2e:ec:ec:cc:8e:ef:a0:9d:16:af:bc:b0:6a:
8b:d9:0d:f0:e7:cc:1d:91:c8:d4:e3:c6:4d:32:24:fb:89:65:
76:31:f9:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFOEQxMTAvBgNVBAUTKEZDRTAzMEVCMzAyMDNBNTEwQ0RCQ0Y5QzdDM0E0MzAw
M0JCREZBNjIwHhcNMjYxMDA3MDM0NDI0WhcNMjYxMDE0MDM0NDI0WjAYMRYwFAYD
VQQDEw02YWM1YzAxOS0wZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFtLqtSYZ+Ik2QhcBU0UOpFg0zLZRyKPc5i42iqv9hOU/kVKYRlug1SnDjRP
l3obUhQ5h5UxxTz09lFs8i9zJ/TLloWRXDAo4jpir5QfmjqjMC1aBevOS5JANKos
O4nq4JN/okxhLjNNnW+awmPOKM60O3L+Gjs/jYaImvw0otptKFNtwblzX7lTaZBe
SGBb/c+MpOm+REnGUZj9ZRtD11snqd5a6MdzQpoNLXr9LiBjfuGBmLvL6nP5XqWf
wqKnvqUFNBZ6a2ym+4b7PNA3Gk68OaYz7rG4W9hKJemTyCIZkbOaUGmuliw1ewjc
BDKykGQFT11G0JKT9Lc86WLPIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMBlis8
UXM+g1phnh76L1jqp7YOMB8GA1UdIwQYMBaAFPzgMOswIDpRDNvPnHw6QwA7vfpi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U4RC82NEIxNkE5OEJG
NDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09sRU0yOC1jZkRwREFEdTkt
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19PQXc2ekFnT2xFTTI4LWNmRHBEQUR1OS1tSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0U4RC82NEIxNkE5OEJGNDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09s
RU0yOC1jZkRwREFEdTktbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtL2XIakhyzTap8o9QPxpHNQy3gQ+1Z343vTI8VW00nV2dSQ7nwS52YRQq9Ne
RccEkPoFJOdtAnDmdyw/vM/TuC7es+yFDb5bT1+vKbRcOEtfm8WQn/1AmCJnljlr
F9d5xS2RIxbC6/tVYKSPcSDzPV5P9wtUlNbOzHeICDtGbH+IBZ8HdPm6IFWlgs+Q
52/YbITQyLE11aWMvS5Wty4auRSPFg7L1JEbM1sx1Cfed7B0RIFFQpT6ZjtY413O
6gzaulzdjy0RtuENBQ1NAw0Hn0H0JcLWvLSaAazVnhIu7OzMju+gnRavvLBqi9kN
8OfMHZHI1OPGTTIk+4lldjH58w==
-----END CERTIFICATE-----
Generated at Wed Oct 7 06:00:43 2026 by rpki-client