
$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
File: 8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json)
Hash identifier: kbhicG7yGH1437Pp646YmzPaj1zm7xr3pthTtIwtPX8=
Subject key identifier: F4:F9:BA:34:09:92:E1:A5:DA:3E:78:A3:C4:E5:A6:4C:E9:0D:34:DB
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial: 0A50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
Manifest number: 0A40
Signing time: Mon 20 Jul 2026 20:09:43 +0000
Manifest this update: Mon 20 Jul 2026 20:09:42 +0000
Manifest next update: Mon 27 Jul 2026 20:09:42 +0000
Files and hashes: 1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: CZhhbwJTSHWplXzxDXmLmvLu1s0q/Zy9yQE5olOvZP4=)
2: DC158E965F1411F1B3CEADAF84EE528E.roa (hash: uMaazjc7ti/l1Z1a0OqAz7ZZ+wEFluxU9ZV5vCJwJl8=)
3: 1wS1pxRTq7kjaJZPXVCDliYItio.asa (hash: DCJ45HnE7ug8jgO7RFcFyRlnRr7IfnX9iOk12E4r8W8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2640 (0xa50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Validity
Not Before: Jul 20 20:09:42 2026 GMT
Not After : Jul 27 20:09:42 2026 GMT
Subject: CN=6a5e8086-3298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:25:73:4e:4d:ab:48:44:b4:65:40:38:39:
9b:13:f2:57:3b:1e:0c:8a:ad:26:5c:a6:b3:69:07:
a9:06:27:b3:75:21:68:58:62:22:d7:21:a5:58:7b:
b6:57:8d:fe:73:d4:af:c8:ac:45:5d:18:d4:15:be:
9a:de:a7:f0:47:49:b6:f3:97:06:84:ae:2d:fa:aa:
b5:26:6d:b2:ac:3b:76:18:6d:2b:9a:65:35:93:c9:
a4:6d:84:a7:47:49:ed:6f:ba:97:cc:e7:e4:08:32:
d2:b0:e2:fe:ff:b9:86:68:24:d1:f7:8f:0c:0e:e2:
02:21:dd:39:e9:63:b5:6e:dc:44:73:29:bd:08:f7:
a7:ae:cc:a0:c9:16:c8:73:a6:f0:83:e0:4e:8c:0c:
19:97:b7:d8:9b:26:21:8a:d0:a1:12:a3:88:7f:d5:
3f:dc:21:78:2e:f9:74:8d:2a:d2:28:c7:c5:bf:12:
ca:1d:09:a1:d7:20:60:f2:70:dc:7d:54:6e:df:8b:
f2:e9:2c:e9:92:1b:d5:a0:fd:92:f0:2a:ef:ee:c1:
42:97:79:3e:ef:11:0e:73:69:40:67:03:0e:0e:04:
b6:cd:1c:76:37:5d:5a:22:79:58:15:e6:44:87:ef:
52:40:b4:1d:16:6c:eb:40:85:50:6b:cb:d1:29:00:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F9:BA:34:09:92:E1:A5:DA:3E:78:A3:C4:E5:A6:4C:E9:0D:34:DB
X509v3 Authority Key Identifier:
keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:f5:99:f0:a9:b9:36:65:e8:39:c2:0b:08:c1:7d:76:d6:32:
1d:ce:cb:c3:a7:ea:46:44:70:0a:bc:3d:a0:20:47:77:fa:fc:
82:51:46:75:c3:5e:f4:47:ee:3a:68:00:7b:79:89:23:c1:1f:
68:f7:b0:c0:ca:2a:da:fd:de:34:72:90:73:1f:96:4d:5f:16:
d8:41:d0:2e:a3:7b:ac:5a:3a:c6:75:a6:1f:01:12:ae:c8:64:
c0:27:32:95:d8:89:a0:70:e9:72:ef:1d:80:e3:dd:a7:0e:e0:
84:23:45:85:8e:df:d0:07:10:df:4b:e0:6a:df:50:de:90:34:
60:62:22:cb:93:6f:43:63:df:a9:46:5a:52:0c:14:dd:92:a4:
01:cb:02:44:a9:67:6b:ea:21:ee:49:56:38:fe:17:ac:52:7b:
b5:f7:3b:7c:ac:d9:20:9f:3c:96:f3:b0:8e:00:48:ab:e0:42:
ac:69:b9:5c:e2:e6:56:e2:77:85:71:ef:98:19:11:d3:64:12:
88:9a:86:b0:4c:b8:7e:ae:f4:0e:99:b7:47:f3:eb:48:1b:3e:
fe:9e:5e:af:91:b0:fb:b6:a8:30:c6:55:2d:81:07:56:fe:0c:
b2:48:86:22:e1:29:32:18:9d:cd:73:e0:f8:21:48:f6:d5:41:
99:78:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:34:42 2026 by rpki-client