
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
File: OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json)
Hash identifier: ioqzYbaPc5O7UWEz2KUJsNEah+NLphN1TmZVue9yPtc=
Subject key identifier: C6:81:13:05:AF:B6:3A:DF:9A:2E:15:CC:38:5F:32:3E:33:2A:7A:D5
Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
Certificate issuer: /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
Certificate serial: 0B03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
Manifest number: 0C23
Signing time: Sun 04 Oct 2026 19:28:57 +0000
Manifest this update: Sun 04 Oct 2026 19:28:56 +0000
Manifest next update: Sun 11 Oct 2026 19:28:56 +0000
Files and hashes: 1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: mQLKVuQPcUuK/zWJ0X7e4P+bZ29GzKtmqgFb1rSESa0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl
rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
Validity
Not Before: Oct 4 19:28:56 2026 GMT
Not After : Oct 11 19:28:56 2026 GMT
Subject: CN=6ac2a8f9-5864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:55:a4:02:b6:6e:3a:27:2f:f2:b5:67:89:
99:5b:b2:a8:1e:47:22:83:3e:28:21:a0:bb:19:dd:
fa:cc:7f:c7:6c:ca:4a:78:c1:09:12:7a:83:2b:82:
1c:d2:e8:f0:f0:97:48:f4:d1:03:65:58:c7:18:35:
16:c7:d7:78:41:4d:43:70:85:bf:c6:66:3d:18:bf:
4e:65:c2:11:7a:af:da:26:b8:d7:51:d0:e2:e7:5b:
d9:08:ad:cb:f5:d9:0d:23:e2:21:a1:f8:af:6a:3b:
88:73:e9:47:c3:9f:9c:76:2b:e7:3a:9b:92:31:63:
29:97:1c:b5:9c:25:62:74:4b:c1:d8:40:5f:e4:6a:
6d:96:c5:0b:64:45:53:4c:ab:4b:38:5a:89:f7:af:
d5:43:6f:81:d1:71:21:d5:6b:20:86:68:87:df:23:
5f:42:a5:ad:04:13:98:10:d8:68:f2:7c:9d:98:b7:
ec:d9:30:4a:c4:f7:4d:81:ee:35:95:c0:91:2f:66:
d8:62:d3:a7:43:d6:c9:53:ae:a4:b4:cd:53:18:a9:
61:20:c4:21:12:ce:b7:f1:9b:ff:bc:df:11:ea:ea:
e8:5a:d3:2e:bd:3b:1f:ba:b9:d1:56:8e:82:4f:98:
24:42:6e:f1:02:3b:91:c0:40:7c:8d:d2:da:93:07:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:81:13:05:AF:B6:3A:DF:9A:2E:15:CC:38:5F:32:3E:33:2A:7A:D5
X509v3 Authority Key Identifier:
keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fa:c9:fc:58:57:8e:a8:17:51:5d:22:00:f7:be:b0:db:15:
a5:c2:9e:0c:d2:b0:77:65:0f:8c:e4:8a:93:de:01:dd:7f:f7:
91:81:d8:cb:fc:23:ed:0e:6b:5f:de:5f:68:06:9a:04:b7:f2:
69:fc:df:dc:a8:ea:74:61:9f:76:d0:d0:96:d0:de:e0:f3:14:
79:a8:22:e5:ca:5a:72:49:57:0f:b2:bb:93:3a:34:b3:71:d6:
78:60:7f:e6:b7:b9:da:0e:4f:87:0c:19:4b:b4:17:77:ad:51:
8e:0c:d8:62:fc:f5:a1:f7:91:4f:b9:a7:b5:21:38:94:42:5a:
1a:cf:a3:45:e7:5f:64:72:c0:ff:25:22:ef:1e:4e:e0:52:02:
6c:3a:24:be:30:14:74:ef:67:2b:25:8c:ed:bd:5a:06:b0:f5:
b1:8e:7b:ec:0a:b6:ff:98:91:23:c2:7e:36:a1:25:5e:b7:57:
7a:2d:26:03:1f:58:7e:34:da:06:b3:e8:1a:7a:1f:c4:ce:b6:
67:02:b8:78:b5:ad:1f:d5:16:0a:b5:7e:88:30:45:95:0b:ba:
67:b1:eb:d1:05:d7:d0:28:f3:9b:b1:42:53:da:52:0a:72:ec:
ed:41:31:44:c3:ef:90:17:76:0b:eb:da:4d:64:8d:cf:ef:01:
06:e5:45:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEYxQzkxMTAvBgNVBAUTKDM5ODkxMTMwMDEwNEQ3QzU4QjMyNkU1NjY0QjNENzlB
MkQ0NjQ2RTAwHhcNMjYxMDA0MTkyODU2WhcNMjYxMDExMTkyODU2WjAYMRYwFAYD
VQQDEw02YWMyYThmOS01ODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0FVpAK2bjonL/K1Z4mZW7KoHkcigz4oIaC7Gd36zH/HbMpKeMEJEnqDK4Ic
0ujw8JdI9NEDZVjHGDUWx9d4QU1DcIW/xmY9GL9OZcIReq/aJrjXUdDi51vZCK3L
9dkNI+IhofivajuIc+lHw5+cdivnOpuSMWMplxy1nCVidEvB2EBf5GptlsULZEVT
TKtLOFqJ96/VQ2+B0XEh1WsghmiH3yNfQqWtBBOYENho8nydmLfs2TBKxPdNge41
lcCRL2bYYtOnQ9bJU66ktM1TGKlhIMQhEs638Zv/vN8R6uroWtMuvTsfurnRVo6C
T5gkQm7xAjuRwEB8jdLakwfZCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMaBEwWv
tjrfmi4VzDhfMj4zKnrVMB8GA1UdIwQYMBaAFDmJETABBNfFizJuVmSz15otRkbg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG
OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4V0xNbTVXWkxQWG1pMUdS
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09Za1JNQUVFMThXTE1tNVdaTFBYbWkxR1J1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4
V0xNbTVXWkxQWG1pMUdSdUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASvrJ/FhXjqgXUV0iAPe+sNsVpcKeDNKwd2UPjOSKk94B3X/3kYHYy/wj7Q5r
X95faAaaBLfyafzf3KjqdGGfdtDQltDe4PMUeagi5cpacklXD7K7kzo0s3HWeGB/
5re52g5PhwwZS7QXd61RjgzYYvz1ofeRT7mntSE4lEJaGs+jRedfZHLA/yUi7x5O
4FICbDokvjAUdO9nKyWM7b1aBrD1sY577Aq2/5iRI8J+NqElXrdXei0mAx9YfjTa
BrPoGnofxM62ZwK4eLWtH9UWCrV+iDBFlQu6Z7Hr0QXX0Cjzm7FCU9pSCnLs7UEx
RMPvkBd2C+vaTWSNz+8BBuVFJg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:58:21 2026 by rpki-client