
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
File: cnOFPaBj78uOxUSwMg1acHuUwIk.mft (raw, json)
Hash identifier: HSk0exooQsFedplXp0drqTF/7zQI4JhlCFBg3p3HVT4=
Subject key identifier: A4:03:6C:A9:2E:19:76:DE:6F:85:5E:BC:B1:B7:0D:B2:10:58:44:76
Authority key identifier: 72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89
Certificate issuer: /CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089
Certificate serial: 0805
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
Manifest number: 2ED3
Signing time: Tue 18 Aug 2026 15:44:51 +0000
Manifest this update: Tue 18 Aug 2026 15:44:50 +0000
Manifest next update: Tue 25 Aug 2026 15:44:50 +0000
Files and hashes: 1: cnOFPaBj78uOxUSwMg1acHuUwIk.crl (hash: 8KfMzNR5SyGeWNln8GsSI3xJppsnTDr+4C9rE/SMdM4=)
2: 4BB610C2E16511EC8EDF6621C4F9AE02.roa (hash: 1/JNtgxrsCQgMCZg/xoCtiLGpLNRukBhGSMeMiBFJLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl
rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163824, serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089
Validity
Not Before: Aug 18 15:44:50 2026 GMT
Not After : Aug 25 15:44:50 2026 GMT
Subject: CN=6a847df2-3ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:30:f7:3e:f8:40:46:ac:38:d3:e7:42:6e:
7e:ad:d8:ee:1d:ac:b5:13:28:f3:9f:1b:02:6f:7f:
d4:b5:cf:f7:6e:7a:17:97:5c:9b:4b:c5:ae:07:8e:
6b:8e:c7:ca:e4:20:03:a2:46:39:89:37:03:64:f1:
62:17:cd:22:3e:06:a5:48:cf:21:f7:81:f1:43:ca:
84:5c:5b:49:d9:6a:fd:c6:2a:96:45:99:fc:aa:7e:
da:4f:60:37:ec:33:de:d5:4b:ae:5a:90:69:a1:7d:
81:a5:34:a1:de:fc:6a:69:1b:29:86:7f:4f:da:0c:
3d:7e:9a:73:e3:eb:be:e7:3c:11:96:7e:73:c6:f1:
26:69:77:94:e1:d4:78:5b:35:24:20:e4:fc:3a:32:
5b:0d:16:56:f7:75:47:6c:95:ff:2d:74:04:6f:23:
1b:bb:0e:2f:35:7c:ed:fc:18:a1:83:46:5f:73:23:
e5:8a:99:90:a2:52:f2:7c:72:f4:01:9b:eb:eb:1d:
ca:a0:88:bb:27:70:7f:82:64:a7:22:8a:af:3a:4c:
cc:c3:75:8a:5b:95:fd:47:a0:02:c6:8a:a7:55:85:
87:68:54:2e:4f:8d:37:73:85:cb:75:69:e6:fa:9e:
2e:9f:d5:27:91:6b:e5:18:9e:d8:15:75:d5:1a:ac:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:03:6C:A9:2E:19:76:DE:6F:85:5E:BC:B1:B7:0D:B2:10:58:44:76
X509v3 Authority Key Identifier:
keyid:72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:e7:21:01:69:19:fa:aa:eb:81:e4:98:07:75:70:c1:09:d9:
6a:d3:a8:c6:5b:09:4c:f1:53:84:0e:a8:10:4c:37:1f:34:07:
dc:46:83:45:8d:ce:35:e3:90:f4:34:d3:5d:bf:e5:d7:63:79:
6c:51:0c:63:49:dd:0f:08:a2:05:82:1c:d1:40:64:4b:0c:bb:
8e:7e:d7:16:d4:0d:47:3c:fd:e5:b7:0d:db:30:85:8c:02:86:
23:d0:20:da:27:9a:f1:cc:84:60:d6:1d:46:42:27:55:d2:cc:
0d:06:13:55:e5:2c:d1:33:6b:5f:d8:ba:86:24:7c:43:b7:52:
29:97:84:9b:17:a1:3e:69:4c:9b:bc:f8:e4:f8:98:54:12:90:
4e:71:e1:c6:1a:2e:fb:72:e2:24:d2:e0:dc:c6:7c:14:73:a9:
e6:3e:f9:42:99:4f:38:45:56:f4:d1:43:e1:c5:77:2d:e0:76:
35:c3:42:21:cf:b5:a1:9d:66:fc:5b:94:8e:52:d6:72:53:0b:
50:67:d2:c2:5d:ad:80:49:33:ac:a2:8d:82:a6:ae:44:e3:69:
47:3f:12:31:15:30:45:cf:91:d3:9c:a3:65:0f:63:6c:77:0b:
f3:16:44:fd:40:12:88:f1:5a:7b:08:3b:12:1f:93:03:cc:3e:
93:7c:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:50 2026 by rpki-client