
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
File: cnOFPaBj78uOxUSwMg1acHuUwIk.mft (raw, json)
Hash identifier: vzG85C0GKS2/BSp7npg7CggFaerYSGvlZoqd6YQJjVw=
Subject key identifier: E2:7E:95:43:A7:B8:61:85:3F:AD:B2:11:46:E1:9B:08:1B:02:A5:96
Authority key identifier: 72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89
Certificate issuer: /CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089
Certificate serial: 081D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
Manifest number: 2F03
Signing time: Sun 04 Oct 2026 15:40:44 +0000
Manifest this update: Sun 04 Oct 2026 15:40:43 +0000
Manifest next update: Sun 11 Oct 2026 15:40:43 +0000
Files and hashes: 1: cnOFPaBj78uOxUSwMg1acHuUwIk.crl (hash: 8zoNYT1Ga3Y1gDtV1RjsMv2PvEt4Ehnto+uChr+PNhM=)
2: 4BB610C2E16511EC8EDF6621C4F9AE02.roa (hash: 1/JNtgxrsCQgMCZg/xoCtiLGpLNRukBhGSMeMiBFJLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl
rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163824, serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089
Validity
Not Before: Oct 4 15:40:43 2026 GMT
Not After : Oct 11 15:40:43 2026 GMT
Subject: CN=6ac2737b-7909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:df:0d:9b:61:3c:be:d8:9c:c5:b4:57:26:
b6:40:d0:5a:26:4b:4b:6d:3d:51:09:c2:fe:36:3d:
a2:ca:93:5b:0e:9f:9d:22:8b:c8:9c:e4:29:6f:49:
8c:7e:7b:7b:54:d1:a6:e2:d1:6a:8f:cc:fb:52:d3:
b5:bd:85:4a:d2:ea:7e:1a:69:d7:a4:7e:8a:d2:c5:
eb:24:d6:2b:43:9c:94:8c:61:cf:a3:c8:6c:2b:ba:
2b:e2:1d:3a:76:2b:f9:05:e7:05:b8:7d:65:b4:6d:
15:3d:5e:27:fe:c6:ea:b0:b6:a3:96:d9:7e:b3:af:
d1:ef:40:b3:98:d7:88:f0:e5:01:a2:88:c5:27:f0:
94:83:96:0c:ec:58:a9:46:2c:e0:23:e6:7c:cf:81:
7c:99:02:12:11:f5:84:ef:5e:74:33:58:7b:15:fd:
82:55:7a:99:fe:56:d4:ae:fa:2a:30:af:79:f2:d3:
fc:e8:19:5d:98:6f:e6:10:8d:04:bc:6b:6d:c9:88:
5b:4a:ef:dc:7c:76:bb:95:22:a1:00:96:48:d9:bb:
fb:12:1c:f8:ed:90:8b:c5:bb:14:ff:53:23:24:1d:
21:63:9a:bc:f7:35:dd:3f:f1:69:4f:6b:38:ae:75:
ba:c5:ca:0a:87:bc:53:28:91:29:81:8c:b3:09:6c:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7E:95:43:A7:B8:61:85:3F:AD:B2:11:46:E1:9B:08:1B:02:A5:96
X509v3 Authority Key Identifier:
keyid:72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:63:66:21:cf:3e:ce:ed:03:91:fa:e7:e2:7a:8b:99:e3:ff:
33:23:4c:08:e3:b5:9d:ef:ac:c7:44:d2:ad:e9:43:85:cd:24:
4e:60:77:53:a7:21:51:ff:27:fc:64:13:0e:cc:f5:cd:7f:33:
33:86:d0:f2:92:17:05:0e:95:7e:c7:36:af:86:3d:dd:d7:72:
6d:9c:ae:9c:26:39:75:82:62:9d:fe:a9:ff:b9:e6:f0:55:3c:
bf:80:c9:69:30:82:c8:14:a0:73:8a:e1:fa:b5:ea:ea:b0:fd:
00:a3:84:db:68:27:7b:81:e8:26:1d:75:11:7a:db:4e:e7:47:
da:87:a6:cb:64:f8:11:4d:7e:8e:9b:d1:d1:20:ca:80:f5:80:
4c:c8:21:77:1d:04:07:77:b8:eb:5d:de:d9:69:fe:7d:7f:56:
2c:b6:b4:e9:c3:53:ec:96:9f:1d:68:aa:8c:6f:73:5a:33:08:
94:51:5e:09:d9:49:54:ff:a5:68:24:a1:f4:8c:6f:e9:eb:d2:
0f:0a:71:27:e2:ad:2d:0c:64:91:08:eb:73:d9:7c:9b:04:5b:
45:a1:f6:84:ce:e7:bf:e4:c9:c8:ee:3c:96:5b:95:cf:73:87:
49:e1:75:87:bf:56:2f:b0:6f:22:1c:30:30:49:fa:ff:29:b5:
0f:ad:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:36:20 2026 by rpki-client