
$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
File: 8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json)
Hash identifier: +UeJJxz00uJnxC/ctcM7P0QzFJcXWqJIaSSWzmc838E=
Subject key identifier: 73:B1:A1:F5:25:85:D6:16:6D:34:A4:F6:49:55:57:CB:C2:A8:0D:9D
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial: 0A13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
Manifest number: 0A07
Signing time: Mon 20 Apr 2026 19:45:29 +0000
Manifest this update: Mon 20 Apr 2026 19:45:28 +0000
Manifest next update: Mon 27 Apr 2026 19:45:28 +0000
Files and hashes: 1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: sF6jmbCtIyKpjK13yD8bw8NkGkLsKrpM0cuB8gKhjzc=)
2: 81FC4E285E4211F086D4C383C4F9AE02.roa (hash: 09ch9+vd4QfEZEJO6GInYZKohO1LNoyU522s7mqfo0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 19:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579 (0xa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Validity
Not Before: Apr 20 19:45:28 2026 GMT
Not After : Apr 27 19:45:28 2026 GMT
Subject: CN=69e68258-4f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:5e:ab:c2:5d:b5:79:5a:ee:92:43:be:47:
de:6a:56:8c:26:0f:6a:80:18:60:be:db:b3:da:46:
5b:92:5a:f7:6d:59:b2:1b:9a:05:3a:96:9f:f5:c3:
69:a5:a0:f8:4f:16:96:8c:7e:29:df:47:04:79:fa:
e6:e5:c4:83:2f:12:7e:51:87:ec:2b:82:50:62:04:
45:9e:cd:56:02:a5:22:87:5b:4f:cc:0a:56:e3:ac:
d1:b1:02:cb:ab:dd:50:d1:ae:6e:61:5c:e1:21:f0:
f7:92:2e:54:16:b4:c5:9e:fd:b1:be:56:79:00:49:
41:6a:0d:02:e7:9e:f8:c7:8c:31:99:4b:15:92:03:
70:49:55:58:26:db:e7:bd:d5:08:2a:69:24:0c:3d:
d6:bd:b9:67:06:fe:ff:e5:e4:72:5f:07:89:7c:75:
0d:d9:5c:08:de:8c:e1:81:a9:01:79:6c:52:76:23:
0f:2b:de:47:7e:de:0a:35:1d:d7:41:5e:2c:92:0e:
bb:0e:1a:f2:8e:31:42:db:65:33:dd:31:25:b0:53:
30:89:3f:e6:05:a0:8e:8a:a1:2f:89:d5:0b:6c:7d:
a0:11:94:43:70:e6:be:fe:31:79:f8:f2:d7:27:5a:
55:65:37:bf:97:9d:70:c8:f6:ff:37:6f:3a:8a:27:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B1:A1:F5:25:85:D6:16:6D:34:A4:F6:49:55:57:CB:C2:A8:0D:9D
X509v3 Authority Key Identifier:
keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:39:d2:ea:b8:2e:f7:45:66:ef:e1:cd:81:6c:b3:cd:80:41:
f2:8d:d0:55:95:12:86:eb:ab:ab:a6:20:d8:ba:80:7a:f1:e4:
25:eb:82:bf:3c:af:89:ad:bf:9b:98:fc:d1:e8:48:83:00:6d:
6a:63:9c:74:ff:96:e0:ac:04:79:3b:cb:a7:a3:4a:c1:76:f2:
5a:e7:43:bf:62:dc:09:6f:6a:4c:3d:9a:fd:f1:9f:c7:a2:0f:
6a:30:6c:73:98:a0:5b:09:cf:d1:97:59:c0:6c:4a:1f:99:02:
c3:d0:03:b5:8b:84:da:38:30:0c:b6:da:88:3c:09:c8:2d:27:
6b:d9:e6:59:b2:4b:fd:26:f8:5a:68:ee:ca:34:fa:e2:ee:3f:
7b:5f:97:11:a8:30:6f:11:6e:b0:6d:90:d9:a6:24:0f:58:8b:
d0:6e:bc:de:ad:05:d3:98:1d:1c:e8:87:7c:65:f5:02:96:d8:
2d:f6:bb:5b:94:a3:d5:d9:e8:25:75:f8:86:8a:29:43:c1:ca:
a0:22:ee:c0:04:f2:f9:a9:37:90:ba:25:a2:46:74:02:4e:8e:
04:d8:6a:94:d4:d0:63:dd:36:f4:e1:9f:ff:74:b4:73:36:1f:
74:ee:b1:f8:93:b9:72:c5:2b:57:cb:52:eb:3b:d5:76:48:ff:
1a:90:f0:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICChMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYzOEQxMTAvBgNVBAUTKEYwRTc2NkZCMzE5MjI0ODIzQ0E3OUQzNjcyMEM1MUVE
RkNBRENGRTYwHhcNMjYwNDIwMTk0NTI4WhcNMjYwNDI3MTk0NTI4WjAYMRYwFAYD
VQQDEw02OWU2ODI1OC00ZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0fleq8JdtXla7pJDvkfealaMJg9qgBhgvtuz2kZbklr3bVmyG5oFOpaf9cNp
paD4TxaWjH4p30cEefrm5cSDLxJ+UYfsK4JQYgRFns1WAqUih1tPzApW46zRsQLL
q91Q0a5uYVzhIfD3ki5UFrTFnv2xvlZ5AElBag0C5574x4wxmUsVkgNwSVVYJtvn
vdUIKmkkDD3WvblnBv7/5eRyXweJfHUN2VwI3ozhgakBeWxSdiMPK95Hft4KNR3X
QV4skg67DhryjjFC22Uz3TElsFMwiT/mBaCOiqEvidULbH2gEZRDcOa+/jF5+PLX
J1pVZTe/l51wyPb/N286iifU6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHOxofUl
hdYWbTSk9klVV8vCqA2dMB8GA1UdIwQYMBaAFPDnZvsxkiSCPKedNnIMUe38rc/m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjM4RC8wMjU5QjYxRTk3
QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJSThwNTAyY2d4UjdmeXR6
LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhPZG0tekdTSklJOHA1MDJjZ3hSN2Z5dHotWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjM4RC8wMjU5QjYxRTk3QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJ
SThwNTAyY2d4UjdmeXR6LVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsDnS6rgu90Vm7+HNgWyzzYBB8o3QVZUShuurq6Yg2LqAevHkJeuCvzyvia2/
m5j80ehIgwBtamOcdP+W4KwEeTvLp6NKwXbyWudDv2LcCW9qTD2a/fGfx6IPajBs
c5igWwnP0ZdZwGxKH5kCw9ADtYuE2jgwDLbaiDwJyC0na9nmWbJL/Sb4WmjuyjT6
4u4/e1+XEagwbxFusG2Q2aYkD1iL0G683q0F05gdHOiHfGX1ApbYLfa7W5Sj1dno
JXX4hoopQ8HKoCLuwATy+ak3kLolokZ0Ak6OBNhqlNTQY9029OGf/3S0czYfdO6x
+JO5csUrV8tS6zvVdkj/GpDw/g==
-----END CERTIFICATE-----
Generated at Wed Apr 22 15:35:57 2026 by rpki-client