
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
File: os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json)
Hash identifier: FcoXCaPJFGNqSkD4dW7rbQSpJpDx1OfxCuxgoH6krzk=
Subject key identifier: 9F:B7:BC:BD:A4:8A:89:35:2A:DE:04:35:9B:F4:CC:68:EA:94:05:98
Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
Certificate issuer: /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
Manifest number: 0255
Signing time: Sun 25 Oct 2026 02:47:39 +0000
Manifest this update: Sun 25 Oct 2026 02:47:38 +0000
Manifest next update: Sun 01 Nov 2026 02:47:38 +0000
Files and hashes: 1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: m3kdI4pNqouqCo/LlR2sRizVDq/Wg0lorGy7mnSs0rM=)
2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: c5aWBlcIDnTGh4RdQ9p1TD+NOw3Gco6ypJ6kC5acwYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 02:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Validity
Not Before: Oct 25 02:47:38 2026 GMT
Not After : Nov 1 02:47:38 2026 GMT
Subject: CN=6add6dcb-ace4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:f1:51:f3:07:25:18:c9:4d:cf:3b:76:f6:
bd:36:ff:7e:77:10:18:4a:2d:8f:ee:21:4b:61:0d:
2e:3f:f1:3d:ff:4e:06:05:a6:77:26:88:10:1d:b8:
db:d7:6f:8b:65:ba:01:86:06:a2:ae:6a:95:0e:77:
4a:10:5c:e5:c9:ab:bd:99:1f:fc:e0:2c:a8:3a:20:
da:80:1d:d5:33:8f:05:5a:fa:89:b2:f2:7b:4f:37:
b5:53:68:33:eb:c9:30:91:0a:6b:a1:f8:32:a0:f9:
7a:71:60:a2:0f:b0:27:e2:83:95:60:68:34:12:06:
af:f8:fc:1a:02:d1:b8:49:b5:cb:65:62:3e:72:17:
fc:bf:7b:d3:72:2c:c4:10:ef:82:e6:ed:7c:91:93:
a8:46:40:73:6a:c1:41:f4:46:3d:ce:be:03:f7:7c:
ea:7d:6a:85:df:65:d2:01:77:b4:f0:e6:5b:90:ac:
01:34:cc:2d:47:33:9f:c4:1a:f0:ea:3e:26:ae:68:
76:3a:3d:51:58:4e:a1:ee:ae:b5:4c:ec:a4:51:43:
30:d7:cd:54:96:b8:cd:6e:06:3d:a5:c7:05:a9:64:
14:e9:68:0d:da:86:25:97:62:35:f9:9d:2b:85:dc:
49:04:8c:dc:96:6e:d7:c8:f0:c2:f3:d3:01:43:8c:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:BC:BD:A4:8A:89:35:2A:DE:04:35:9B:F4:CC:68:EA:94:05:98
X509v3 Authority Key Identifier:
keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:7d:54:25:c2:e5:81:5f:57:f1:06:3b:69:b2:d2:08:63:44:
3c:55:09:54:7b:47:42:69:9d:a8:21:45:b1:96:aa:d3:fd:11:
d1:0d:8e:53:27:0f:d2:43:ea:cb:2a:bb:48:e0:33:cb:c1:a4:
36:6c:4b:ee:0d:82:7a:c1:9d:f1:9a:91:92:f6:a1:ea:56:07:
4a:db:ca:67:64:0e:4f:59:70:26:3b:07:c0:84:79:07:30:01:
7f:1a:79:60:88:03:06:f7:3a:fb:8f:19:98:7c:51:df:8f:0e:
f9:16:c2:da:a1:c4:3b:7e:a5:9a:86:0b:10:4a:59:04:ea:9f:
89:75:d7:d0:7f:97:03:0c:5e:70:1c:37:77:93:3c:4d:c7:ed:
68:d3:67:7c:ac:db:bd:06:45:b6:e2:20:35:98:4c:11:e1:65:
f7:5d:64:72:be:0e:c7:95:68:82:86:b5:27:12:ab:b8:e7:9f:
d4:32:8d:a0:8b:f8:ef:81:f5:95:bd:f0:b1:16:f0:58:24:f4:
97:fd:da:0d:79:c1:5f:4a:e7:29:19:ba:37:2a:2f:9f:ec:ae:
65:44:05:70:d5:76:af:54:f5:43:06:7f:0c:a6:9c:e1:44:5e:
10:de:f4:94:8c:db:83:e5:1a:36:af:82:0c:9f:e6:54:5e:4e:
8a:49:5d:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRDMEQxMTAvBgNVBAUTKEEyQ0QxMEE0N0VENzIzRTFDNDhCNUY1MEQ2ODBDRjRG
NjdGQ0IxRDMwHhcNMjYxMDI1MDI0NzM4WhcNMjYxMTAxMDI0NzM4WjAYMRYwFAYD
VQQDEw02YWRkNmRjYi1hY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArf7xUfMHJRjJTc87dva9Nv9+dxAYSi2P7iFLYQ0uP/E9/04GBaZ3JogQHbjb
12+LZboBhgairmqVDndKEFzlyau9mR/84CyoOiDagB3VM48FWvqJsvJ7Tze1U2gz
68kwkQprofgyoPl6cWCiD7An4oOVYGg0Egav+PwaAtG4SbXLZWI+chf8v3vTcizE
EO+C5u18kZOoRkBzasFB9EY9zr4D93zqfWqF32XSAXe08OZbkKwBNMwtRzOfxBrw
6j4mrmh2Oj1RWE6h7q61TOykUUMw181UlrjNbgY9pccFqWQU6WgN2oYll2I1+Z0r
hdxJBIzclm7XyPDC89MBQ4zzJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+3vL2k
iok1Kt4ENZv0zGjqlAWYMB8GA1UdIwQYMBaAFKLNEKR+1yPhxItfUNaAz09n/LHT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BNDcwNzg1RTU3
NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9vczBRcEg3WEktSEVpMTlRMW9EUFQyZjhz
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29zMFFwSDdYSS1IRWkxOVExb0RQVDJmOHNkTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEMwRC9BNDcwNzg1RTU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9vczBRcEg3WEkt
SEVpMTlRMW9EUFQyZjhzZE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANH1UJcLlgV9X8QY7abLSCGNEPFUJVHtHQmmdqCFFsZaq0/0R0Q2OUycP0kPq
yyq7SOAzy8GkNmxL7g2CesGd8ZqRkvah6lYHStvKZ2QOT1lwJjsHwIR5BzABfxp5
YIgDBvc6+48ZmHxR348O+RbC2qHEO36lmoYLEEpZBOqfiXXX0H+XAwxecBw3d5M8
TcftaNNnfKzbvQZFtuIgNZhMEeFl911kcr4Ox5Vogoa1JxKruOef1DKNoIv474H1
lb3wsRbwWCT0l/3aDXnBX0rnKRm6Nyovn+yuZUQFcNV2r1T1QwZ/DKac4UReEN70
lIzbg+UaNq+CDJ/mVF5OikldWw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:29:56 2026 by rpki-client