
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
File: oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json)
Hash identifier: g/KiLAFUEXp2int0TRcojAgoQ+SApiiHH49MPqg+6v0=
Subject key identifier: EC:20:92:67:BD:2E:0A:CB:A7:4F:C3:9B:F9:3B:F8:FC:92:6D:2F:C7
Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF
Certificate issuer: /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
Certificate serial: 0A42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
Manifest number: 2255
Signing time: Thu 08 Oct 2026 16:35:08 +0000
Manifest this update: Thu 08 Oct 2026 16:35:07 +0000
Manifest next update: Thu 15 Oct 2026 16:35:07 +0000
Files and hashes: 1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: ywW0NM123cAn13IVcYFGA497izeSZAgtybRVlpvA3PY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl
rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2626 (0xa42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398E5, serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
Validity
Not Before: Oct 8 16:35:07 2026 GMT
Not After : Oct 15 16:35:07 2026 GMT
Subject: CN=6ac7c63c-9475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b6:14:6c:41:9b:16:79:8a:45:60:3b:42:b9:
09:05:4c:b1:5f:c1:c9:70:cc:11:d9:6a:29:b2:d8:
07:98:70:1e:94:c9:cb:1b:02:52:66:fb:0b:30:02:
6b:90:7f:f6:8b:92:32:e4:1e:2b:e1:77:ba:d3:ea:
81:7a:79:c8:42:2e:41:83:fe:28:c1:3c:b3:43:90:
a0:a6:c0:02:ae:1a:72:fe:a9:37:8a:85:ec:da:ae:
fb:7e:ab:14:1a:e1:d8:30:82:98:35:cc:f8:2d:9a:
8b:c3:a4:f7:d1:51:9a:a3:89:26:b7:a2:e5:c8:72:
dc:60:fd:46:b8:56:ea:49:99:8e:e7:e9:96:d1:21:
5a:d8:df:9a:36:6c:81:a4:b5:90:6a:d0:d2:58:a3:
58:b0:50:2b:5a:8a:16:d7:fa:e2:4b:a4:ff:cf:46:
af:bc:40:ad:d0:a5:f0:b5:f5:c1:ea:ca:8c:a9:50:
08:e5:18:bd:c5:25:73:be:79:4a:2d:8c:bd:24:a6:
74:a3:ce:51:89:39:68:26:11:26:d8:9e:35:04:86:
43:14:f0:da:56:ec:88:b1:44:b3:58:b7:7a:c8:a0:
eb:a4:ba:f6:27:16:6c:cf:f7:6c:7c:31:b9:75:f8:
91:db:0c:21:6a:cf:15:e5:bf:6d:b4:1e:12:d1:12:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:92:67:BD:2E:0A:CB:A7:4F:C3:9B:F9:3B:F8:FC:92:6D:2F:C7
X509v3 Authority Key Identifier:
keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:56:d6:0f:de:f6:5f:5e:72:c5:52:fc:69:dd:e8:49:b6:f4:
f1:3a:9c:52:2d:bc:23:59:32:5f:d7:69:fe:ad:d0:97:2f:07:
37:1d:95:1a:0b:68:e4:83:bd:2a:2f:75:e4:f8:74:06:b2:06:
3c:43:74:73:a3:4c:ed:04:6c:1c:eb:5f:e5:8c:ca:f6:26:60:
ea:8e:f9:7f:4f:99:fe:9b:ef:c0:ba:94:e6:1b:46:dc:ef:0d:
8e:9a:dc:a9:12:16:fe:10:29:3f:bf:4f:88:31:49:8f:a1:5b:
cd:31:f9:26:bb:db:3b:21:23:66:7c:2e:7b:44:23:e7:75:f9:
33:9f:84:b1:ab:97:b8:6f:dd:09:0d:2e:1e:5a:dc:7d:d1:2b:
ab:8e:f5:30:d3:60:0a:71:f7:de:77:8d:68:30:dd:d1:1b:4c:
eb:a4:09:0b:19:4e:0b:c9:70:4e:b1:86:df:68:55:e4:3d:e8:
65:6c:5f:87:f3:a1:2f:2a:c0:33:5d:1d:0e:af:d5:dc:32:f3:
9d:2a:77:b9:83:d0:f9:f4:c7:16:9f:18:ec:e8:f2:37:f8:e2:
36:c4:c5:36:16:9d:01:88:c1:4a:c5:d0:73:e9:06:65:f0:71:
08:93:a4:15:84:b6:db:7a:98:c1:4e:42:a8:51:3e:ac:65:2f:
73:28:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:44:32 2026 by rpki-client