
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
File: otDn34iradtuBZowZOTdweb8nRk.mft (raw, json)
Hash identifier: MAUVAXsvk2eECYaEbP9UudnF9b8Dmt3zem1wXaN8o2Y=
Subject key identifier: 60:1B:19:52:A4:CF:AD:AB:D4:65:13:E7:07:87:59:B1:F3:A4:59:AC
Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
Certificate issuer: /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
Manifest number: 97
Signing time: Wed 09 Sep 2026 07:49:40 +0000
Manifest this update: Wed 09 Sep 2026 07:49:40 +0000
Manifest next update: Wed 16 Sep 2026 07:49:40 +0000
Files and hashes: 1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: us9XzYIKobknkQdUzk9CFh5MgZ6SyD5oXiQlco7z3lU=)
2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: TtYj2sjHiscSoHGcXukyvA6H2jH+qg3mM5AVrWsmoS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 07:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Validity
Not Before: Sep 9 07:49:40 2026 GMT
Not After : Sep 16 07:49:40 2026 GMT
Subject: CN=6aa10f94-c0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:ed:e2:5f:3f:75:9f:cd:5a:49:77:40:bf:
b4:2b:8b:0f:7a:44:94:31:a8:0b:19:0a:64:6e:ac:
2a:4b:6a:99:c8:8d:ef:57:f9:25:1c:64:f1:57:ee:
02:2f:86:7f:e2:59:5c:01:cb:5e:4a:6b:5d:a1:9e:
f7:a2:3c:e1:e2:52:2e:5f:d5:65:b1:f3:da:50:32:
fb:57:ba:ff:d8:1f:1d:2a:10:fc:99:dd:bf:36:91:
0d:a6:08:1f:86:30:27:86:22:be:2c:59:bd:36:3d:
98:1f:21:02:01:17:45:31:6b:75:48:34:3f:cf:d6:
d6:97:40:4c:3e:02:e0:f4:3d:e6:20:8f:74:ba:8e:
1a:54:df:14:14:4e:b4:09:41:91:b1:66:08:c5:c7:
db:14:dc:9d:e6:e8:53:68:84:41:6f:08:5c:17:8d:
00:37:e7:40:01:74:72:4c:63:ed:e2:71:51:58:6f:
93:aa:3b:2d:1d:11:0b:9c:c5:57:be:c3:e5:3f:bc:
4f:4e:21:e0:c6:bf:01:f4:7d:39:03:83:72:04:fa:
cb:82:62:13:6e:2f:d1:a9:86:0d:c3:cf:b9:a0:ad:
c8:d7:9f:b0:57:57:b6:74:cf:0c:a1:9f:35:be:25:
2f:99:e0:b9:ac:02:c4:75:4f:25:43:56:98:d5:06:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1B:19:52:A4:CF:AD:AB:D4:65:13:E7:07:87:59:B1:F3:A4:59:AC
X509v3 Authority Key Identifier:
keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ff:03:e4:ed:6e:fd:d0:23:75:9f:f4:ac:36:8c:2f:fd:f8:
eb:ec:a3:3c:ed:ab:1d:15:8f:b9:6d:40:5b:91:87:e4:14:70:
a5:7e:71:62:c6:01:a2:f3:01:e5:84:f2:a5:01:1f:a5:56:d3:
eb:ea:aa:3b:10:31:aa:f6:70:08:be:19:7d:a6:d1:71:fc:e3:
36:db:c6:89:ad:83:88:ef:3c:52:b5:49:f4:5f:87:b8:17:09:
4b:00:8e:51:11:f0:ac:ac:fb:60:3c:4b:eb:22:5b:08:65:aa:
3c:42:54:93:13:4e:d9:6a:1a:6a:a5:57:2d:66:ee:9c:f3:45:
94:d3:e0:59:4f:33:19:ac:5b:ad:c5:77:a9:69:3e:ee:66:57:
9a:1c:6b:08:79:f2:dd:76:14:6f:da:6e:fd:70:1d:73:87:34:
73:60:f3:f0:17:d7:03:8d:54:60:9b:c3:9c:50:0a:37:d1:e1:
76:38:8e:03:65:b2:b2:a8:e8:00:80:5e:71:d7:23:96:71:79:
60:ba:2f:ca:ac:4a:f8:f8:bc:f9:b7:04:3c:f6:ac:d9:73:15:
5d:a9:39:11:0d:a1:95:23:3d:45:b9:9b:35:27:9f:a6:9f:b4:
29:de:90:56:12:b4:6c:a7:49:ed:f7:7e:80:61:62:fb:f5:eb:
9e:d8:a2:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QyRDgxMTAvBgNVBAUTKEEyRDBFN0RGODhBQjY5REI2RTA1OUEzMDY0RTREREMx
RTZGQzlEMTkwHhcNMjYwOTA5MDc0OTQwWhcNMjYwOTE2MDc0OTQwWjAYMRYwFAYD
VQQDEw02YWExMGY5NC1jMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoCPt4l8/dZ/NWkl3QL+0K4sPekSUMagLGQpkbqwqS2qZyI3vV/klHGTxV+4C
L4Z/4llcActeSmtdoZ73ojzh4lIuX9VlsfPaUDL7V7r/2B8dKhD8md2/NpENpggf
hjAnhiK+LFm9Nj2YHyECARdFMWt1SDQ/z9bWl0BMPgLg9D3mII90uo4aVN8UFE60
CUGRsWYIxcfbFNyd5uhTaIRBbwhcF40AN+dAAXRyTGPt4nFRWG+TqjstHRELnMVX
vsPlP7xPTiHgxr8B9H05A4NyBPrLgmITbi/RqYYNw8+5oK3I15+wV1e2dM8MoZ81
viUvmeC5rALEdU8lQ1aY1QaVMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAbGVKk
z62r1GUT5weHWbHzpFmsMB8GA1UdIwQYMBaAFKLQ59+Iq2nbbgWaMGTk3cHm/J0Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDJEOC85NDk2RDc0RUM5
MTExMUYwQjAwMUNFODNDNEY5QUUwMi9vdERuMzRpcmFkdHVCWm93Wk9UZHdlYjhu
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL290RG4zNGlyYWR0dUJab3daT1Rkd2ViOG5Say5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDJEOC85NDk2RDc0RUM5MTExMUYwQjAwMUNFODNDNEY5QUUwMi9vdERuMzRpcmFk
dHVCWm93Wk9UZHdlYjhuUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATP8D5O1u/dAjdZ/0rDaML/346+yjPO2rHRWPuW1AW5GH5BRwpX5xYsYBovMB
5YTypQEfpVbT6+qqOxAxqvZwCL4ZfabRcfzjNtvGia2DiO88UrVJ9F+HuBcJSwCO
URHwrKz7YDxL6yJbCGWqPEJUkxNO2WoaaqVXLWbunPNFlNPgWU8zGaxbrcV3qWk+
7mZXmhxrCHny3XYUb9pu/XAdc4c0c2Dz8BfXA41UYJvDnFAKN9HhdjiOA2Wysqjo
AIBecdcjlnF5YLovyqxK+Pi8+bcEPPas2XMVXak5EQ2hlSM9RbmbNSefpp+0Kd6Q
VhK0bKdJ7fd+gGFi+/XrntiiAQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:32:26 2026 by rpki-client