
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
File: otDn34iradtuBZowZOTdweb8nRk.mft (raw, json)
Hash identifier: r7H52kzbw0HTr/00k+GQDq90lkH9Wb1C1C2+EBJxDNI=
Subject key identifier: 6D:A8:84:97:F4:42:A2:36:12:8B:EF:D9:6B:D9:46:DA:B9:DE:5C:5F
Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
Certificate issuer: /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
Manifest number: B1
Signing time: Sat 31 Oct 2026 07:32:27 +0000
Manifest this update: Sat 31 Oct 2026 07:32:27 +0000
Manifest next update: Sat 07 Nov 2026 07:32:27 +0000
Files and hashes: 1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: OCRGXd9TxiJ+xEajbV6HSKFrcI48chrGDD5ce82ul6o=)
2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: TtYj2sjHiscSoHGcXukyvA6H2jH+qg3mM5AVrWsmoS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 06:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Validity
Not Before: Oct 31 07:32:27 2026 GMT
Not After : Nov 7 07:32:27 2026 GMT
Subject: CN=6ae5998b-cf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:b8:0a:50:4f:7d:b9:c1:1c:ed:15:a5:7a:
9b:b4:f3:73:5a:a1:27:68:53:5b:26:83:34:47:79:
94:2e:f5:12:23:11:14:6f:f6:df:56:38:df:12:18:
83:e2:bc:8c:0f:77:8b:6d:a6:52:7e:e1:bf:9f:a1:
59:fa:fb:d8:ba:41:e9:92:ea:3a:82:af:aa:9e:56:
2d:90:8f:50:85:5e:99:8f:76:2a:9b:e5:7e:9d:44:
fb:38:bf:bb:ab:8d:9e:94:f9:dc:32:00:05:11:38:
e3:63:a2:d0:64:63:4d:c0:03:4a:47:c4:b9:53:24:
8b:6e:d1:2a:87:83:78:c6:75:2a:99:82:f5:c6:c1:
7b:73:e2:86:ad:5a:10:61:7c:cd:07:c1:62:8a:88:
97:d9:d1:d8:49:81:a1:1e:05:62:28:78:d1:60:a5:
9a:75:ff:46:58:9d:3a:59:26:e5:83:f9:36:46:ee:
33:62:0f:1c:f6:0a:39:99:b5:63:8c:08:c6:3b:d3:
ff:dc:75:e0:75:c1:97:0a:e7:2e:52:61:c8:de:c9:
53:34:68:14:cc:c0:28:46:85:53:f4:29:ba:c8:d1:
07:d3:ba:cd:37:44:04:5d:87:a8:f1:65:a1:34:dd:
d4:01:60:e4:4b:81:46:ce:66:74:c6:f7:46:3f:bb:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A8:84:97:F4:42:A2:36:12:8B:EF:D9:6B:D9:46:DA:B9:DE:5C:5F
X509v3 Authority Key Identifier:
keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9c:29:e3:79:da:9b:10:6f:0c:70:78:30:06:bc:54:9d:1d:
26:de:07:dd:b7:0c:d7:38:05:ac:93:26:19:0c:0b:5a:4f:49:
c8:e3:a8:88:b0:12:ac:c5:9d:62:7c:3a:f1:52:ee:9b:4f:be:
bd:1c:a4:84:38:59:95:1a:7a:e1:e3:e6:1e:76:82:29:94:69:
b5:6c:5c:a2:d3:27:c7:2c:85:72:d3:46:4b:b9:b5:22:fb:e2:
df:ca:7e:4d:f5:81:41:3f:2c:f3:df:b2:24:72:32:d0:c9:69:
15:a2:c2:a6:10:17:62:d5:47:2d:87:a3:a1:47:3b:bd:9f:0d:
50:69:86:fe:3f:3a:f6:e3:a6:7c:f4:73:c8:02:53:85:9b:cc:
ca:f8:a2:3e:80:35:1d:0e:9d:a8:07:ac:c0:45:9b:d2:a0:65:
f3:ff:26:ae:8c:52:47:b6:a0:de:fd:d1:1e:4a:25:64:94:aa:
bd:c4:5b:fb:6c:34:16:2b:6d:d1:b3:8e:ff:a3:0e:a7:ee:b1:
16:fe:e5:19:2e:f6:ca:90:f8:3a:90:c8:31:f3:34:7f:39:88:
65:bc:67:84:33:d7:13:b5:c9:ea:c8:91:a1:6d:be:5f:bd:f8:
bd:ca:95:a6:f5:b0:7d:f2:08:82:21:c3:33:d0:77:b5:de:02:
e7:d1:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:09:54 2026 by rpki-client