
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
File: 8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json)
Hash identifier: KeOJxswJ4DqA9Yy7D2S1xkI/qkw8Wjr+KEWpcfedgpI=
Subject key identifier: 9E:C3:52:5B:8B:E0:12:82:DE:8A:59:93:AD:81:BA:2E:DC:AC:6B:F4
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial: 0A81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
Manifest number: 0A71
Signing time: Sat 24 Oct 2026 19:38:26 +0000
Manifest this update: Sat 24 Oct 2026 19:38:25 +0000
Manifest next update: Sat 31 Oct 2026 19:38:25 +0000
Files and hashes: 1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: fh25tDOTjnjr+NnfZ5aoPgbUXnUuGPM8nlkTPc1c7so=)
2: DC158E965F1411F1B3CEADAF84EE528E.roa (hash: uMaazjc7ti/l1Z1a0OqAz7ZZ+wEFluxU9ZV5vCJwJl8=)
3: 1wS1pxRTq7kjaJZPXVCDliYItio.asa (hash: DCJ45HnE7ug8jgO7RFcFyRlnRr7IfnX9iOk12E4r8W8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 19:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2689 (0xa81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Validity
Not Before: Oct 24 19:38:25 2026 GMT
Not After : Oct 31 19:38:25 2026 GMT
Subject: CN=6add0931-9713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:60:54:10:a8:7f:4a:d3:db:77:e9:bd:07:
2f:7a:6a:b3:62:5c:38:9d:1d:cc:96:5f:92:74:be:
4d:70:b0:53:3e:a7:f5:9a:58:18:68:e0:ca:e0:35:
1a:08:f1:b2:01:4b:34:e6:88:56:8a:45:7e:2a:17:
e1:44:a9:97:69:48:f6:af:32:be:0c:15:b4:6f:37:
ea:f3:75:c1:65:d4:4d:cf:d6:8b:53:f2:6c:cc:94:
de:c2:26:9e:e8:28:da:0c:d3:93:4b:e5:d1:27:0e:
d0:31:cc:f1:42:db:ad:47:ad:74:a3:d6:3c:44:91:
a4:42:0a:16:53:2c:bc:33:c8:8f:b5:af:02:93:ed:
99:93:33:be:a7:11:fa:80:bf:8f:fe:7d:ac:b8:c1:
d2:e1:31:53:f0:b9:6a:2f:9c:47:cb:77:c5:37:30:
0c:4f:5f:b2:8f:d1:52:81:e4:b1:a4:03:61:e2:bb:
1e:33:49:f7:8f:7b:0f:1b:ad:2d:85:39:d1:14:7d:
85:f7:2d:d1:a6:8c:4e:f0:ab:b7:0d:4b:04:c4:cd:
90:47:5b:7a:a7:50:97:c4:5f:14:2c:5f:6b:72:7d:
13:d7:0c:fa:0c:6c:09:c2:3d:82:21:73:19:35:c2:
a5:05:6e:93:b8:c3:13:bc:68:fd:e8:ab:d3:94:9f:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C3:52:5B:8B:E0:12:82:DE:8A:59:93:AD:81:BA:2E:DC:AC:6B:F4
X509v3 Authority Key Identifier:
keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:e9:08:87:83:5b:82:87:90:fb:05:51:70:c1:db:8f:4f:14:
0d:97:6c:c2:f9:84:47:af:e3:96:e1:1f:78:d8:41:67:30:1a:
b2:5f:2b:e5:c5:ca:9b:37:31:af:bc:a3:c7:1f:7e:1a:36:c1:
fe:d6:d5:8b:55:00:28:5e:f1:7e:33:29:51:63:4f:97:a2:13:
38:74:1e:64:c4:74:77:db:c2:92:9b:23:ac:ea:8c:86:8b:4f:
50:9c:e8:a1:3c:e9:90:57:00:be:90:b2:ae:8a:e7:ae:63:4c:
fa:03:b2:b6:19:9c:0a:c6:05:34:38:7f:7b:d9:42:30:9b:65:
63:30:a3:fe:69:4a:8a:55:71:b4:f4:9e:d5:05:9d:7b:dc:67:
85:7a:2a:22:ef:ba:0f:7f:5b:28:40:9b:e0:95:0e:29:06:bf:
5f:1a:4d:ad:71:4e:60:91:c5:85:00:47:6b:1b:03:d0:9b:aa:
da:32:7e:f0:2c:19:84:8c:69:aa:57:3b:14:b6:a0:6c:8b:7f:
83:c9:1c:1c:fa:ef:e1:b1:19:3d:9d:b5:fe:18:55:1e:27:1c:
cf:95:bd:1b:a0:9a:e4:78:b5:66:de:c4:04:b4:54:9a:bf:80:
9c:8c:60:28:a0:c2:5b:e5:9e:e3:73:1c:67:a0:23:4a:8d:1d:
ff:7a:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:50:08 2026 by rpki-client