
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
File: OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json)
Hash identifier: aZUxePh3HW0ek1fA4pBSQZg8oJxtwwRSUTUUKDDKz6w=
Subject key identifier: 04:A6:EF:57:C5:2A:42:2D:9D:E2:63:11:45:07:00:44:05:CC:A9:83
Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07
Certificate issuer: /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
Certificate serial: 141C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
Manifest number: 25D1
Signing time: Fri 02 Oct 2026 17:03:00 +0000
Manifest this update: Fri 02 Oct 2026 17:02:59 +0000
Manifest next update: Fri 09 Oct 2026 17:02:59 +0000
Files and hashes: 1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: XYjnXOrQgkNTjGUJsK2inJlkQTnX8AXUXPIJnnUi0LQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl
rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 17:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5148 (0x141c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
Validity
Not Before: Oct 2 17:02:59 2026 GMT
Not After : Oct 9 17:02:59 2026 GMT
Subject: CN=6abfe3c3-9607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:b9:20:1a:54:3a:3f:18:bd:2d:fe:cc:60:
b9:0c:33:4c:cc:6e:35:c8:14:03:79:7b:0d:27:66:
89:a0:6d:1c:0a:8c:e3:12:e3:8b:0d:a0:78:8c:0c:
cf:27:7a:2e:07:09:b7:ee:c0:dc:76:b6:e1:36:65:
94:d4:f5:62:95:0a:54:93:08:15:4e:ba:a0:32:8a:
8a:0a:80:13:c8:d3:40:ef:9b:79:a3:f5:7b:f9:2c:
85:8d:33:7a:08:b6:6c:1b:20:3e:0f:43:c5:b0:1e:
b6:98:ed:2f:57:d4:59:d9:87:6d:ae:10:cc:92:3f:
ee:63:94:6b:a8:7a:5d:6a:1b:ac:17:d8:46:21:38:
31:5e:4d:86:30:7b:c0:ff:40:a4:b2:31:18:ef:e7:
a1:1a:8d:aa:e5:54:04:14:49:70:c3:9c:02:c4:0a:
3c:a2:bb:cd:23:ef:1b:a0:73:c4:8e:73:31:09:91:
b5:b7:41:85:67:2a:da:e0:b5:c8:28:3e:21:29:94:
b6:b7:48:ae:f2:cd:71:fe:0c:d9:74:b1:3b:88:22:
f4:72:e6:03:db:a5:ce:22:0a:f6:dc:9a:43:72:91:
b9:45:39:75:c3:9b:ba:1f:e2:9e:0f:93:01:87:79:
aa:2e:8d:47:9d:30:66:e8:29:3b:a1:90:39:60:48:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A6:EF:57:C5:2A:42:2D:9D:E2:63:11:45:07:00:44:05:CC:A9:83
X509v3 Authority Key Identifier:
keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:db:4f:da:a1:fa:b3:ee:9e:f0:19:39:d5:be:28:db:96:c6:
3a:2e:2e:a1:99:84:2c:2f:fd:77:c8:99:9d:d5:cd:da:88:87:
08:a1:7a:59:0b:f6:b8:c7:05:c0:39:17:d5:f3:d1:5f:bf:5c:
70:36:19:ce:b0:fa:5d:eb:8f:e1:e1:17:79:26:98:99:67:57:
34:4a:e7:d2:45:f0:5b:af:e6:3d:aa:ca:5a:f5:17:b2:93:03:
be:e8:99:eb:42:6e:c6:19:6a:fa:6b:8c:84:60:9a:ac:a9:ab:
33:92:a6:69:8a:75:2d:cc:cf:64:64:62:56:7f:2e:d9:79:47:
ca:bd:fa:b7:a1:a9:e3:b1:0c:03:a3:80:fc:20:77:65:d4:f9:
e1:9b:1a:a2:d8:78:44:8e:69:ae:83:ff:db:93:14:84:50:79:
ad:e8:51:d4:39:3e:4f:dd:b1:67:6d:1c:65:da:49:a8:56:e7:
2e:54:60:5c:8c:a9:c8:8c:c4:11:fe:a9:2a:0b:ef:7b:f5:ee:
eb:ac:b3:c1:48:82:9c:e3:81:8e:ad:a8:c7:8f:3f:10:30:89:
7d:e5:f9:30:93:b2:8f:ab:28:ba:d0:13:4b:10:96:0b:7f:61:
79:67:b2:4b:f6:8d:20:c4:6d:d7:bb:89:be:2b:45:11:31:32:
88:b1:25:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjAyMkYxMTAvBgNVBAUTKDNBRDhDMERBNEI1RTEzNDNBMzg0NTQ0QjY0NDAxMTg4
NTI2MEZGMDcwHhcNMjYxMDAyMTcwMjU5WhcNMjYxMDA5MTcwMjU5WjAYMRYwFAYD
VQQDEw02YWJmZTNjMy05NjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAusy5IBpUOj8YvS3+zGC5DDNMzG41yBQDeXsNJ2aJoG0cCozjEuOLDaB4jAzP
J3ouBwm37sDcdrbhNmWU1PVilQpUkwgVTrqgMoqKCoATyNNA75t5o/V7+SyFjTN6
CLZsGyA+D0PFsB62mO0vV9RZ2YdtrhDMkj/uY5RrqHpdahusF9hGITgxXk2GMHvA
/0CksjEY7+ehGo2q5VQEFElww5wCxAo8orvNI+8boHPEjnMxCZG1t0GFZyra4LXI
KD4hKZS2t0iu8s1x/gzZdLE7iCL0cuYD26XOIgr23JpDcpG5RTl1w5u6H+KeD5MB
h3mqLo1HnTBm6Ck7oZA5YEiSPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASm71fF
KkItneJjEUUHAEQFzKmDMB8GA1UdIwQYMBaAFDrYwNpLXhNDo4RUS2RAEYhSYP8H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB
N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUwT2poRlJMWkVBUmlGSmdf
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL090akEya3RlRTBPamhGUkxaRUFSaUZKZ193Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUw
T2poRlJMWkVBUmlGSmdfd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL9tP2qH6s+6e8Bk51b4o25bGOi4uoZmELC/9d8iZndXN2oiHCKF6WQv2uMcF
wDkX1fPRX79ccDYZzrD6XeuP4eEXeSaYmWdXNErn0kXwW6/mParKWvUXspMDvuiZ
60Juxhlq+muMhGCarKmrM5KmaYp1LczPZGRiVn8u2XlHyr36t6Gp47EMA6OA/CB3
ZdT54Zsaoth4RI5proP/25MUhFB5rehR1Dk+T92xZ20cZdpJqFbnLlRgXIypyIzE
Ef6pKgvve/Xu66yzwUiCnOOBjq2ox48/EDCJfeX5MJOyj6soutATSxCWC39heWey
S/aNIMRt17uJvitFETEyiLEl9Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:59:11 2026 by rpki-client