
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft
File: ofrVQukeAX0lfVGxT_XDW4lCnvU.mft (raw, json)
Hash identifier: /ZsT1Ftmbl4+mwSN0nheLdZKZZO2yy0hxSCIu3ZLL7I=
Subject key identifier: 2F:AC:C8:F6:0A:89:E2:7A:53:6D:7E:80:30:EF:35:3F:15:FA:C2:F9
Authority key identifier: A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5
Certificate issuer: /CN=A918377D/serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft
Manifest number: 01FD
Signing time: Sat 03 Oct 2026 03:49:42 +0000
Manifest this update: Sat 03 Oct 2026 03:49:42 +0000
Manifest next update: Sat 10 Oct 2026 03:49:42 +0000
Files and hashes: 1: ofrVQukeAX0lfVGxT_XDW4lCnvU.crl (hash: rPflNPOemR5B/2mSAsrQB8NDl5okCbO/80h2e2pSugs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl
rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918377D, serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5
Validity
Not Before: Oct 3 03:49:42 2026 GMT
Not After : Oct 10 03:49:42 2026 GMT
Subject: CN=6ac07b56-e108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:80:36:a1:a1:b8:b0:ea:00:46:a1:23:69:
fb:42:ac:00:d5:86:b1:83:38:04:6b:cb:ec:e2:3b:
4f:41:3b:ef:01:29:90:c0:29:b8:3d:a6:ab:75:58:
16:38:16:12:7d:92:38:4b:c8:65:d2:b2:1b:88:df:
f1:64:39:57:8d:c5:ba:1c:6c:12:be:b3:90:d7:38:
57:e7:d6:75:5f:e8:20:22:33:e0:b6:01:00:f4:aa:
8f:c7:13:38:a1:a5:a2:c5:41:5e:d4:87:3f:f6:f3:
6e:28:04:dd:a0:77:bf:12:76:b6:12:7c:8d:0c:d1:
5d:38:0a:f0:3d:6d:6b:f2:6b:f4:c6:bd:e9:6c:d2:
e6:1b:0c:f3:74:1a:cf:f8:85:3e:4a:c5:43:ca:20:
f1:39:c2:03:07:13:22:e0:7f:11:e0:96:f8:3c:5c:
a8:64:ae:78:86:18:28:b1:f5:49:e1:d0:0d:2d:58:
b3:65:0b:29:ea:bb:c9:81:4c:dd:24:07:00:2b:e6:
a5:86:fe:22:cc:11:80:0f:eb:38:10:eb:28:cd:40:
1c:0d:80:10:1a:e0:9d:0a:6d:5a:a7:76:7f:22:be:
59:7f:fe:4f:60:bf:0e:ba:81:a1:d3:c1:a7:8e:a6:
72:7b:6e:99:40:0b:d4:0c:af:1d:ff:d4:27:e4:bc:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AC:C8:F6:0A:89:E2:7A:53:6D:7E:80:30:EF:35:3F:15:FA:C2:F9
X509v3 Authority Key Identifier:
keyid:A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:54:33:20:76:76:09:6b:25:62:e7:f1:60:8e:98:a2:a0:54:
56:a3:46:f5:8e:6e:c0:d4:30:a5:b8:da:ae:c1:fa:c6:1c:ba:
14:e0:9e:36:4a:52:53:58:c5:c5:f8:39:cf:51:92:3d:c4:17:
75:6b:39:e9:ef:85:2f:9a:fb:27:23:a9:b1:e8:16:fe:53:a0:
5d:4e:d3:53:60:9a:68:fa:97:7b:84:07:62:74:76:c5:15:66:
1b:a5:7c:a6:bc:77:fc:ae:76:38:f9:f4:86:47:b5:ca:35:d6:
fd:c5:0e:97:93:a1:b6:6d:d9:28:e6:42:de:f1:02:b1:c7:b3:
37:25:16:cb:5d:7e:b9:22:9f:aa:09:d4:90:42:a6:d3:e6:e5:
aa:3a:6f:ee:54:6c:7b:26:7f:96:05:38:70:d7:31:68:04:35:
24:96:95:d0:47:89:d6:3d:58:c2:08:f2:dc:0d:9e:91:eb:1f:
b1:4f:85:9d:5b:81:48:3b:c2:7c:31:17:d4:7d:28:fa:7d:a5:
41:8d:4a:44:8e:93:ef:9a:2b:47:e6:d1:2b:4a:16:06:0c:ba:
be:24:bf:4e:ef:6b:d7:c7:fc:46:04:47:df:29:08:9e:55:66:
15:c7:11:fd:64:8b:10:ab:0e:84:bc:76:a5:d4:10:e8:4b:80:
94:ff:e8:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM3N0QxMTAvBgNVBAUTKEExRkFENTQyRTkxRTAxN0QyNTdENTFCMTRGRjVDMzVC
ODk0MjlFRjUwHhcNMjYxMDAzMDM0OTQyWhcNMjYxMDEwMDM0OTQyWjAYMRYwFAYD
VQQDEw02YWMwN2I1Ni1lMTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq46ANqGhuLDqAEahI2n7QqwA1YaxgzgEa8vs4jtPQTvvASmQwCm4PaardVgW
OBYSfZI4S8hl0rIbiN/xZDlXjcW6HGwSvrOQ1zhX59Z1X+ggIjPgtgEA9KqPxxM4
oaWixUFe1Ic/9vNuKATdoHe/Ena2EnyNDNFdOArwPW1r8mv0xr3pbNLmGwzzdBrP
+IU+SsVDyiDxOcIDBxMi4H8R4Jb4PFyoZK54hhgosfVJ4dANLVizZQsp6rvJgUzd
JAcAK+alhv4izBGAD+s4EOsozUAcDYAQGuCdCm1ap3Z/Ir5Zf/5PYL8OuoGh08Gn
jqZye26ZQAvUDK8d/9Qn5LypgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+syPYK
ieJ6U21+gDDvNT8V+sL5MB8GA1UdIwQYMBaAFKH61ULpHgF9JX1RsU/1w1uJQp71
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc3RC85RjdDODE1MkI0
QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFYMGxmVkd4VF9YRFc0bENu
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29mclZRdWtlQVgwbGZWR3hUX1hEVzRsQ252VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzc3RC85RjdDODE1MkI0QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFY
MGxmVkd4VF9YRFc0bENudlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVVQzIHZ2CWslYufxYI6YoqBUVqNG9Y5uwNQwpbjarsH6xhy6FOCeNkpSU1jF
xfg5z1GSPcQXdWs56e+FL5r7JyOpsegW/lOgXU7TU2CaaPqXe4QHYnR2xRVmG6V8
prx3/K52OPn0hke1yjXW/cUOl5Ohtm3ZKOZC3vECscezNyUWy11+uSKfqgnUkEKm
0+blqjpv7lRseyZ/lgU4cNcxaAQ1JJaV0EeJ1j1Ywgjy3A2ekesfsU+FnVuBSDvC
fDEX1H0o+n2lQY1KRI6T75orR+bRK0oWBgy6viS/Tu9r18f8RgRH3ykInlVmFccR
/WSLEKsOhLx2pdQQ6EuAlP/o0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:37:47 2026 by rpki-client