
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json)
Hash identifier: VTr3QvkpNGj+uecxHV6ndKjlO3X6ckxbwUezx51yIRI=
Subject key identifier: E5:B3:3B:EA:BC:CC:51:E8:32:1E:BA:DB:0C:A6:04:D9:03:BF:B2:1E
Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
Manifest number: 01C2
Signing time: Wed 23 Sep 2026 03:40:44 +0000
Manifest this update: Wed 23 Sep 2026 03:40:44 +0000
Manifest next update: Wed 30 Sep 2026 03:40:44 +0000
Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: kUtfuAo2fGFBjtk3W/PzblJS2cz60TdVFxxnm6vHuno=)
2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: SI7mhqO9YrvFB2/bZ7mj3acc/KGSgDSJ8dlCBs4REbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Validity
Not Before: Sep 23 03:40:44 2026 GMT
Not After : Sep 30 03:40:44 2026 GMT
Subject: CN=6ab34a3c-f18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fd:55:ba:fc:ab:df:a9:b1:8e:65:6e:4a:f5:
e2:b3:9f:38:4c:8a:2c:d7:19:e6:c7:95:98:0d:e8:
84:75:df:06:1b:34:d7:a7:f6:ae:15:64:66:db:f3:
da:38:06:ba:55:b5:60:12:7b:d8:bf:5d:f1:06:5e:
b6:fd:fd:6e:f8:89:2e:ad:c1:d4:17:b6:32:44:8e:
c3:98:ee:2c:6a:6c:24:c8:31:5e:76:29:82:cf:98:
10:79:c5:f7:44:88:2d:36:c9:5a:d2:0f:46:ae:04:
42:1d:ef:ed:20:30:66:94:34:09:1e:6a:2e:5a:1f:
05:1b:fb:ed:81:ca:35:96:b7:8d:4f:d0:8f:e6:f3:
91:59:4b:5f:b1:f3:6c:57:ac:3a:e2:07:16:75:cf:
f6:b1:83:c6:51:ba:5e:b5:f5:8d:3e:d0:c3:79:07:
f3:64:2f:3c:37:70:92:dd:7e:3c:d6:fa:c8:11:36:
9b:37:bb:cb:bc:14:5a:d8:3c:80:ab:b2:09:36:69:
43:23:a7:e6:b1:96:e0:b1:8b:60:81:6d:c6:bc:a2:
55:5b:16:6d:0d:fe:1a:55:5b:ad:88:66:b0:d0:7c:
87:c2:01:83:e5:fd:57:ed:61:61:f8:5b:1a:c9:c4:
71:9e:65:03:1a:8e:ad:d6:de:bd:74:3b:47:90:05:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B3:3B:EA:BC:CC:51:E8:32:1E:BA:DB:0C:A6:04:D9:03:BF:B2:1E
X509v3 Authority Key Identifier:
keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9c:33:f5:77:61:94:c7:11:db:d3:7b:06:f8:2d:f7:fe:65:
c9:e5:a9:34:ab:06:c0:cc:b6:23:ce:73:c4:b9:23:15:c2:f7:
45:97:c1:11:53:c8:54:e9:11:23:68:b1:d7:2e:22:68:9a:dd:
6e:5e:49:15:a8:5f:e7:6d:35:91:43:29:e0:59:d8:9b:04:6b:
00:ec:d7:7e:fa:61:d8:1c:69:44:cc:a5:91:d6:ab:90:a8:07:
7c:e6:75:d4:66:e2:4e:02:df:ea:82:f5:bb:ad:c5:0c:ac:c5:
78:34:92:c7:67:bd:19:f4:e9:dc:93:7b:42:38:62:1e:98:ac:
f4:c5:7b:98:6a:c0:67:32:c6:01:2c:c9:d6:cb:2b:39:56:29:
0d:ff:d0:bb:3f:18:4d:5d:3b:c4:6f:c4:4b:c6:10:97:10:07:
60:ee:f5:cd:94:ac:c2:cf:9c:ab:5f:89:32:3b:ed:e8:e5:5e:
69:d4:be:9d:af:ff:39:02:ec:c6:3f:8d:5b:34:60:89:5f:0c:
7f:15:94:76:b1:47:dd:a2:28:8b:93:e0:c9:ec:6e:d5:a6:dd:
21:c6:01:8e:b7:00:ba:2c:05:d9:66:e2:62:06:02:32:7a:a7:
fd:df:e6:94:dc:93:bb:2c:7e:5f:8b:34:58:29:6b:a3:1e:51:
18:be:41:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:43:54 2026 by rpki-client