
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
File: OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json)
Hash identifier: NFM+ouKyr/3z0UYPq2iqAUczXcJOyUsGHqopFjcs28o=
Subject key identifier: 0A:26:DA:5C:04:FB:83:25:66:4D:4D:C0:DE:13:D1:50:B9:AB:51:F7
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial: 09AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
Manifest number: 1679
Signing time: Wed 28 Oct 2026 18:34:29 +0000
Manifest this update: Wed 28 Oct 2026 18:34:29 +0000
Manifest next update: Wed 04 Nov 2026 18:34:29 +0000
Files and hashes: 1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: 6+Nh4kR0WEK84FgEyB3iUUkXssijI0tL/p0W6H+rGyA=)
2: 4EF2EC842DAA11F181B163FBA3833773.roa (hash: RiW8QYb+ypRvsySpXIpMH3WQO3vwhG1+Rhs2YYcv/J8=)
3: 1245956E2DB611F1B8EF9758A8833773.roa (hash: RDdwLCbOHRei4mq+xzV0XVNXkj7eeYuisNBVo4Pbaec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 18:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2476 (0x9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Validity
Not Before: Oct 28 18:34:29 2026 GMT
Not After : Nov 4 18:34:29 2026 GMT
Subject: CN=6ae24035-7308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:6a:60:06:95:40:03:2f:7d:57:60:86:7a:
80:d8:09:29:60:10:7a:b7:cb:71:76:b2:ef:48:f6:
5f:f8:7b:d3:e7:dc:96:e5:ef:d0:09:a3:89:25:07:
30:b9:73:7f:5a:97:9f:85:1f:36:c5:ae:4c:ed:d3:
3a:fc:63:74:d3:a6:77:66:9f:ee:c7:7c:c8:61:74:
50:a8:6b:69:9c:f0:b6:6b:83:37:86:73:f4:59:67:
87:fb:6a:67:08:58:27:ca:db:e2:4b:13:95:65:dc:
87:a0:8a:70:9f:5e:0c:8e:4b:36:9f:85:e7:bf:a3:
5d:25:99:f8:94:b6:e0:90:9c:de:6a:54:16:01:02:
b7:2a:09:d5:cf:17:86:08:61:72:47:8b:33:08:a2:
6a:a4:4a:62:b1:06:65:c1:36:07:4b:32:67:b0:75:
a8:55:45:41:47:a9:66:f9:7e:0a:36:4d:ed:e2:6b:
ea:a5:56:3e:df:2f:00:f8:33:93:8d:37:e2:21:e1:
a3:a7:69:88:9e:45:7c:77:d2:3b:53:99:ec:ed:f9:
20:22:b0:b6:b2:df:2a:be:b8:6e:ca:fe:09:b3:43:
5b:3e:39:40:7b:9f:a1:ab:27:be:e4:39:70:77:a9:
9b:5b:81:bb:6e:60:1d:e9:6e:a8:0b:ad:d2:72:3b:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:26:DA:5C:04:FB:83:25:66:4D:4D:C0:DE:13:D1:50:B9:AB:51:F7
X509v3 Authority Key Identifier:
keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ca:9b:da:b1:31:98:4a:e6:56:fa:48:b2:11:15:bd:4f:3c:
e5:d1:3f:d8:6a:b7:19:01:e2:6f:46:85:4e:07:c9:38:cc:45:
2b:fb:75:42:05:9b:f0:06:e1:fe:29:f4:94:03:30:f3:3a:4a:
59:26:bb:13:d4:f3:9c:35:71:1f:4b:8a:77:43:64:f4:7f:68:
2e:62:cb:4a:7b:d9:2a:d2:50:66:e3:3d:38:7b:9e:69:94:19:
02:80:5a:a6:8b:8a:22:5f:fc:e8:0f:34:09:bc:d9:10:0a:5d:
3e:ab:63:ef:a5:a4:71:0a:56:ad:a0:f2:55:56:8a:35:6c:e6:
95:b6:bf:03:0c:68:55:bf:26:4e:88:e2:e0:56:ac:fc:0f:5a:
8f:dd:26:1d:c8:85:d2:6f:3a:a5:44:17:ed:8d:fe:8b:3e:03:
4f:37:24:71:55:a2:cc:e4:1b:11:2c:a6:4b:09:22:20:37:50:
14:2b:a1:3c:7f:bf:ca:14:c2:9e:16:bd:a3:ff:2b:a9:29:63:
39:9b:74:de:15:a3:96:84:88:d6:97:a3:ba:11:c5:10:63:54:
8a:10:d5:f4:be:15:5a:7f:29:d1:cb:ec:a8:73:82:2a:52:e6:
5b:05:ae:a0:9d:88:71:de:e1:d2:4b:ab:43:0b:6c:fa:f0:57:
e1:ee:3a:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU0MTExMTAvBgNVBAUTKDM4ODgwREI5MzZBQ0NDOUJENzREM0RCOERGODg4N0Iz
MjhFNTc4OEQwHhcNMjYxMDI4MTgzNDI5WhcNMjYxMTA0MTgzNDI5WjAYMRYwFAYD
VQQDEw02YWUyNDAzNS03MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHtqYAaVQAMvfVdghnqA2AkpYBB6t8txdrLvSPZf+HvT59yW5e/QCaOJJQcw
uXN/WpefhR82xa5M7dM6/GN006Z3Zp/ux3zIYXRQqGtpnPC2a4M3hnP0WWeH+2pn
CFgnytviSxOVZdyHoIpwn14Mjks2n4Xnv6NdJZn4lLbgkJzealQWAQK3KgnVzxeG
CGFyR4szCKJqpEpisQZlwTYHSzJnsHWoVUVBR6lm+X4KNk3t4mvqpVY+3y8A+DOT
jTfiIeGjp2mInkV8d9I7U5ns7fkgIrC2st8qvrhuyv4Js0NbPjlAe5+hqye+5Dlw
d6mbW4G7bmAd6W6oC63ScjsI5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAom2lwE
+4MlZk1NwN4T0VC5q1H3MB8GA1UdIwQYMBaAFDiIDbk2rMyb1009uN+Ih7Mo5XiN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5
MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pKdlhUVDI0MzRpSHN5amxl
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09JZ051VGFzekp2WFRUMjQzNGlIc3lqbGVJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pK
dlhUVDI0MzRpSHN5amxlSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGsqb2rExmErmVvpIshEVvU885dE/2Gq3GQHib0aFTgfJOMxFK/t1QgWb8Abh
/in0lAMw8zpKWSa7E9TznDVxH0uKd0Nk9H9oLmLLSnvZKtJQZuM9OHueaZQZAoBa
pouKIl/86A80CbzZEApdPqtj76WkcQpWraDyVVaKNWzmlba/AwxoVb8mToji4Fas
/A9aj90mHciF0m86pUQX7Y3+iz4DTzckcVWizOQbESymSwkiIDdQFCuhPH+/yhTC
nha9o/8rqSljOZt03hWjloSI1pejuhHFEGNUihDV9L4VWn8p0cvsqHOCKlLmWwWu
oJ2Icd7h0kurQwts+vBX4e464w==
-----END CERTIFICATE-----
Generated at Thu Oct 29 23:04:31 2026 by rpki-client