
$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
File: 8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json)
Hash identifier: uHQq3n0GVa8xucNN6qq1wgDY/QNjxf4dpTRPdQNgIiE=
Subject key identifier: DC:A2:B6:39:CF:84:49:83:A4:7C:F4:BE:C6:BA:3E:D3:9B:0B:17:28
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial: 0A37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
Manifest number: 0A28
Signing time: Thu 04 Jun 2026 20:24:37 +0000
Manifest this update: Thu 04 Jun 2026 20:24:36 +0000
Manifest next update: Thu 11 Jun 2026 20:24:36 +0000
Files and hashes: 1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: BITdXWSatdmyC3r4KVMBGy0oMZ01xeOJuFhpDiLAN6U=)
2: DC158E965F1411F1B3CEADAF84EE528E.roa (hash: uMaazjc7ti/l1Z1a0OqAz7ZZ+wEFluxU9ZV5vCJwJl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 20:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615 (0xa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Validity
Not Before: Jun 4 20:24:36 2026 GMT
Not After : Jun 11 20:24:36 2026 GMT
Subject: CN=6a21df04-595f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:f6:b9:c7:09:e7:15:94:25:b2:57:c4:25:
bb:ba:32:9f:49:f1:c8:74:6b:cd:e6:2f:ef:71:46:
46:ee:49:8a:85:e7:39:99:11:ec:90:d5:f3:8c:a3:
31:da:b3:93:39:c3:f5:74:a2:fe:06:3b:aa:db:65:
46:cb:af:b5:b4:e0:79:af:7a:5c:48:37:bb:1a:27:
0a:e3:8f:83:87:dc:df:ca:35:82:99:71:47:a1:6d:
99:a4:2e:39:4e:5d:9e:09:da:09:af:91:9d:6b:1c:
de:28:68:74:4c:e6:5c:32:37:50:0f:61:54:47:34:
be:d0:c9:d8:fc:e5:ef:54:8c:68:bf:c5:90:47:f0:
75:f3:12:5c:ea:9e:6b:8a:26:2b:2b:83:7c:e3:94:
f7:69:af:b2:c3:a0:d8:59:e9:6d:76:70:e0:40:5f:
64:d9:a2:40:62:ce:36:28:f7:4f:6d:ef:55:fd:cd:
c7:62:75:82:5a:16:d6:16:fb:81:54:ad:a5:8c:d1:
47:66:27:ad:1e:0c:87:80:a5:4d:89:35:0d:80:07:
95:46:62:de:d8:b2:16:eb:f8:28:7f:7a:73:87:7e:
62:67:de:b1:98:f3:ce:c0:e9:ec:d9:72:f1:37:16:
cc:a1:a1:fc:e9:b1:ea:e8:b7:c1:68:d7:10:5c:40:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A2:B6:39:CF:84:49:83:A4:7C:F4:BE:C6:BA:3E:D3:9B:0B:17:28
X509v3 Authority Key Identifier:
keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:97:82:05:6f:96:22:8e:9c:78:8e:6a:10:6a:9b:e0:a5:81:
df:c2:00:91:2c:b2:23:fc:6f:08:7d:ca:27:2b:8f:c8:74:3f:
b6:43:6d:af:37:44:dd:3f:4d:ab:92:53:7b:55:87:50:98:c9:
e5:42:70:3a:dd:eb:27:e6:f0:a2:29:7f:71:68:db:df:b7:db:
60:1b:1c:39:38:8e:fe:4c:63:c8:8d:0b:95:2f:59:f1:10:45:
6c:21:6e:a7:6c:69:ef:4b:2c:36:b9:48:98:d0:6a:24:32:f0:
2a:0c:c0:28:cd:ca:26:36:6c:fe:86:f3:76:5b:98:76:6d:12:
73:97:fb:08:d5:f6:58:c9:51:e2:97:02:5e:4d:72:04:e6:e2:
73:57:90:53:65:54:8c:f1:6c:f9:38:2b:1a:c1:73:e9:2f:d6:
d7:6c:35:c9:c5:01:25:44:9f:1d:30:f2:82:4b:49:51:d8:a8:
e2:52:6c:b9:eb:b0:aa:36:dd:16:2e:f7:31:f2:60:d4:3f:1f:
cf:ee:07:95:d2:76:7c:e5:2a:8e:99:9d:3c:cf:3a:0c:ab:1c:
93:6d:6a:5e:68:b6:98:75:1e:b8:90:d7:61:00:6e:c6:75:41:
68:ea:b5:9d:99:53:66:9b:4f:84:f8:dc:3f:e2:ef:6c:8c:cc:
42:1d:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 21:46:26 2026 by rpki-client