
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
File: OT6njk2TI25QcfuK_61B1iQmql0.mft (raw, json)
Hash identifier: pt3J5VlA9m6P2iwACEZTmKQ3LGGtK1c67jPVUiJdKlQ=
Subject key identifier: D8:0A:9B:CC:31:28:B4:A9:9F:8F:AD:10:0B:C2:BE:2D:BE:68:D9:BF
Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D
Certificate issuer: /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
Manifest number: FE
Signing time: Sun 05 Apr 2026 02:14:56 +0000
Manifest this update: Sun 05 Apr 2026 02:14:55 +0000
Manifest next update: Sun 12 Apr 2026 02:14:55 +0000
Files and hashes: 1: OT6njk2TI25QcfuK_61B1iQmql0.crl (hash: WAPU0ynqZMg7AkCUyJ6z4WHp73Q1M5ID3EIYIwe/1fU=)
2: 3CFE7680BC5C11EFB951FD4FC4F9AE02.roa (hash: wmWAheRVRUWaL+3QPLJN7sGparB+U18Ved7K/jnj6is=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl
rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
Validity
Not Before: Apr 5 02:14:55 2026 GMT
Not After : Apr 12 02:14:55 2026 GMT
Subject: CN=69d1c5a0-6bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:3c:a9:ed:80:37:29:41:8a:47:2c:b0:ae:
40:5f:7a:bd:61:6c:79:5b:0b:f9:d9:1f:52:92:e9:
85:be:29:52:78:6e:20:83:9d:71:91:88:b5:29:5b:
99:72:36:30:0e:7a:35:86:f1:53:b6:26:37:a4:ce:
31:82:6c:1e:69:af:93:ed:1a:57:34:03:12:34:d5:
af:28:99:88:65:ea:91:d6:55:ef:b3:47:85:71:19:
4b:a9:0a:cf:b2:0a:46:33:d7:cc:5b:61:47:82:bd:
5d:e3:66:c8:fb:4f:51:84:85:36:47:92:05:27:f0:
1e:76:d7:7b:a7:dd:87:e1:cd:03:bf:40:9d:b5:5e:
cb:f5:b9:f1:57:ed:be:8e:76:cd:7a:ea:01:f4:82:
63:ec:b9:cf:ae:e9:94:5d:48:f0:19:3c:6d:39:b5:
60:b9:5a:af:ba:de:c9:b8:21:ae:9e:39:d7:2a:96:
8c:2d:12:14:bb:25:76:56:f3:e0:f5:ff:68:05:43:
06:11:3f:51:0e:8e:be:bf:54:6f:a3:e6:96:d1:79:
1d:3f:70:3f:be:e6:a7:a2:cb:e0:43:4c:82:cb:e4:
c1:86:5f:a2:88:90:2b:de:09:6c:c0:25:c8:ea:7d:
23:31:cf:9c:9e:f3:d8:14:62:37:c3:36:83:e6:4b:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0A:9B:CC:31:28:B4:A9:9F:8F:AD:10:0B:C2:BE:2D:BE:68:D9:BF
X509v3 Authority Key Identifier:
keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3e:8c:20:b0:f4:16:38:d1:92:bd:63:6a:00:5b:78:6a:75:
6b:2b:c6:f0:47:ba:c7:cf:07:7c:0e:26:43:5d:67:b7:5e:46:
ab:94:92:36:c8:95:f0:f1:6e:d0:36:f5:06:da:32:04:8c:a0:
c0:a0:d6:fa:12:0a:b4:2f:c2:3b:66:fd:e4:b1:1c:49:7d:92:
a4:de:73:2a:cc:2e:75:be:46:76:91:74:ba:1c:ca:9c:86:ef:
df:91:2a:0a:fe:69:b5:c5:75:b5:64:68:28:27:3b:bf:21:77:
ee:25:4f:ae:ff:97:c3:2a:cd:bb:93:bd:7b:e7:fc:55:cf:05:
e9:81:ed:df:23:71:06:0e:65:66:ad:41:db:2d:07:4a:33:d7:
e6:2d:0b:c8:7f:57:80:05:df:dc:f5:1c:f0:4e:6f:3e:b8:d8:
54:0c:29:6d:0a:2b:b9:ab:a3:29:c4:59:13:ad:ee:40:53:77:
37:9d:62:c3:87:3b:57:0a:72:24:ae:31:77:d1:0b:0d:1a:99:
c3:b2:ac:56:79:63:d7:56:f3:91:e0:82:65:01:0d:f4:52:75:
83:49:70:19:20:e2:05:51:09:7b:1e:b0:e8:84:60:e0:cb:79:
6a:a1:08:ba:aa:4a:99:c0:60:d0:90:48:b0:b4:f3:e5:bc:0f:
0e:4d:21:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1MjAxMTAvBgNVBAUTKDM5M0VBNzhFNEQ5MzIzNkU1MDcxRkI4QUZGQUQ0MUQ2
MjQyNkFBNUQwHhcNMjYwNDA1MDIxNDU1WhcNMjYwNDEyMDIxNDU1WjAYMRYwFAYD
VQQDEw02OWQxYzVhMC02YmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5G88qe2ANylBikcssK5AX3q9YWx5Wwv52R9SkumFvilSeG4gg51xkYi1KVuZ
cjYwDno1hvFTtiY3pM4xgmweaa+T7RpXNAMSNNWvKJmIZeqR1lXvs0eFcRlLqQrP
sgpGM9fMW2FHgr1d42bI+09RhIU2R5IFJ/Aedtd7p92H4c0Dv0CdtV7L9bnxV+2+
jnbNeuoB9IJj7LnPrumUXUjwGTxtObVguVqvut7JuCGunjnXKpaMLRIUuyV2VvPg
9f9oBUMGET9RDo6+v1Rvo+aW0XkdP3A/vuanosvgQ0yCy+TBhl+iiJAr3glswCXI
6n0jMc+cnvPYFGI3wzaD5ksaMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgKm8wx
KLSpn4+tEAvCvi2+aNm/MB8GA1UdIwQYMBaAFDk+p45NkyNuUHH7iv+tQdYkJqpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80Q0ZDMDhEQUI3
NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEkyNVFjZnVLXzYxQjFpUW1x
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL09UNm5qazJUSTI1UWNmdUtfNjFCMWlRbXFsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjUyMC80Q0ZDMDhEQUI3NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEky
NVFjZnVLXzYxQjFpUW1xbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADj6MILD0FjjRkr1jagBbeGp1ayvG8Ee6x88HfA4mQ11nt15Gq5SSNsiV8PFu
0Db1BtoyBIygwKDW+hIKtC/CO2b95LEcSX2SpN5zKswudb5GdpF0uhzKnIbv35Eq
Cv5ptcV1tWRoKCc7vyF37iVPrv+XwyrNu5O9e+f8Vc8F6YHt3yNxBg5lZq1B2y0H
SjPX5i0LyH9XgAXf3PUc8E5vPrjYVAwpbQoruaujKcRZE63uQFN3N51iw4c7Vwpy
JK4xd9ELDRqZw7KsVnlj11bzkeCCZQEN9FJ1g0lwGSDiBVEJex6w6IRg4Mt5aqEI
uqpKmcBg0JBIsLTz5bwPDk0hEQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 19:35:21 2026 by rpki-client