
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json)
Hash identifier: AqypU1SinIAuqqggREyhSdEiCOTHwAOTdNO5fpAWXTo=
Subject key identifier: 58:A3:79:D7:F4:CA:1A:3C:92:16:C5:6A:1D:17:19:F3:99:71:1E:9B
Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
Manifest number: 027B
Signing time: Mon 05 Oct 2026 02:12:57 +0000
Manifest this update: Mon 05 Oct 2026 02:12:57 +0000
Manifest next update: Mon 12 Oct 2026 02:12:57 +0000
Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: sPEOGjyuLfTsfgmDbj0Y3o+U1+gvUBHpI7IN1h9jjgQ=)
2: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: uOBgq1wqwkIdJF6l8fQkWsM2YOmgJUVNC/DA3LL3Uc0=)
3: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: f+SXz/7qnkULN0UO8ykoynDM3JBtbR5ZSL/l0DN40Vo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Validity
Not Before: Oct 5 02:12:57 2026 GMT
Not After : Oct 12 02:12:57 2026 GMT
Subject: CN=6ac307a9-3d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:ed:cf:de:37:02:5a:d4:41:6c:b7:ef:58:
e5:03:f1:a2:13:98:4b:ff:78:18:13:e7:90:78:3e:
11:d3:bf:ef:d6:33:24:2f:c2:bb:d2:c7:4d:3d:e8:
6d:00:ef:f2:10:15:91:4d:89:8d:0f:60:3a:1f:9b:
19:af:91:f5:4d:d4:d8:0e:15:60:e8:cd:ae:14:9e:
e2:f5:9c:04:72:ea:1a:a9:04:7b:69:da:33:70:95:
3e:04:d8:a6:4e:c7:2c:f6:d0:5c:b5:d1:3b:0c:99:
cd:b5:74:eb:f5:57:fd:79:b8:95:f0:01:55:1c:e0:
c8:d5:07:db:cc:3e:48:15:63:29:8d:05:00:a9:2c:
2a:8b:ed:c5:41:a8:92:e1:02:4c:8a:3f:f0:42:29:
63:12:24:54:43:5f:24:dd:5a:66:2e:7f:e4:69:fc:
41:29:cb:c7:42:b8:8e:9d:ce:70:f5:71:f7:13:30:
5c:d9:58:ba:9e:75:d4:8a:53:0b:e0:e0:a8:4b:aa:
26:ba:cc:d5:be:60:be:06:f2:c2:f6:cd:e5:4a:cf:
b9:11:f8:c8:e8:5b:4c:5f:ad:f4:f3:55:b6:d3:e7:
8d:f8:fa:05:82:4b:b4:77:0a:6c:24:f9:ee:ae:f5:
59:65:72:55:fa:e1:e8:49:a7:8b:80:5c:97:ad:b8:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A3:79:D7:F4:CA:1A:3C:92:16:C5:6A:1D:17:19:F3:99:71:1E:9B
X509v3 Authority Key Identifier:
keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:bd:61:25:0d:60:29:d7:3e:40:0f:9a:23:aa:d6:1f:d3:f9:
fe:52:1d:31:04:c6:66:37:ad:0e:a6:5e:56:b0:30:3e:f1:25:
62:35:5d:19:da:47:a9:7d:7b:d6:0b:8c:f4:b3:95:85:50:e1:
55:28:24:43:0e:2c:f6:27:b0:c7:08:1e:09:50:01:83:c3:69:
4b:3f:2c:0d:79:e1:80:9b:fa:e4:9d:89:a5:bd:f8:76:3a:25:
ef:5e:2f:47:49:9c:a7:c1:5c:8c:f4:5d:56:17:73:7c:ea:b1:
fc:39:ff:25:85:4d:53:f8:10:44:9b:95:3e:a9:76:ee:94:86:
ca:32:bd:6d:7f:a0:20:42:40:a6:12:e4:23:51:86:cd:ed:b2:
f7:5e:2a:61:c6:f9:97:4f:a5:e0:48:9c:3c:26:c3:dc:77:64:
01:d7:2c:a9:41:f4:a1:f9:fa:c7:54:3b:07:31:fa:5a:b6:46:
8d:ea:12:04:9a:92:85:bd:0e:c0:06:76:f4:4b:03:8c:38:8c:
44:68:f4:66:b0:db:ae:2a:b6:51:73:99:19:1e:dd:50:c1:c3:
36:9f:de:0a:e1:04:83:03:62:5e:9a:c3:0c:65:a1:40:a7:94:
8f:5f:fc:fd:ec:9e:28:a5:23:fe:f2:34:cf:40:49:aa:cc:81:
16:3b:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:00:36 2026 by rpki-client