
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
File: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft (raw, json)
Hash identifier: 2q1gatQtJCVTObX4MlA2U0nTUQyAwlDrJgcT2pEzA9I=
Subject key identifier: EA:64:23:AA:33:4B:BB:1E:1E:73:A8:62:9D:4A:20:A3:66:16:B9:00
Authority key identifier: A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36
Certificate issuer: /CN=A91965C6/serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
Manifest number: 79
Signing time: Fri 23 Oct 2026 08:23:18 +0000
Manifest this update: Fri 23 Oct 2026 08:23:18 +0000
Manifest next update: Fri 30 Oct 2026 08:23:18 +0000
Files and hashes: 1: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl (hash: kh4HFYmMWpQVwvBfDEe/MQTD2r7ttAMLud2TGLB2Kgw=)
2: D4496826179411F19180A41B2E3D8C67.roa (hash: GgDsG3hy1PBcF5IbzyAuO44d4hcQihWGIRpm85tQHW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl
rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 08:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91965C6, serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36
Validity
Not Before: Oct 23 08:23:18 2026 GMT
Not After : Oct 30 08:23:18 2026 GMT
Subject: CN=6adb1976-3cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:2f:a2:e4:89:1f:bf:2b:57:4b:48:e3:0e:
22:75:b2:d2:3d:cf:09:a8:6f:41:1e:be:8b:23:94:
0d:66:e5:73:6c:c2:3c:10:9c:f9:a6:14:12:e5:2b:
41:98:20:d8:f9:15:00:0f:e2:10:d1:16:35:5a:2b:
f4:fd:17:15:a8:b6:25:14:c1:06:57:7e:22:93:f4:
63:b0:13:28:e7:f3:69:d4:19:89:86:a3:98:5d:aa:
1c:fe:08:ff:1f:5c:d1:6b:c1:b5:de:21:11:cf:8f:
29:b0:98:b9:bc:9c:53:47:ed:f3:30:e3:64:59:4e:
6d:47:84:d8:7b:4c:f8:02:9d:78:1f:aa:73:e8:e6:
81:0a:4f:f9:e8:cf:75:09:4b:09:3f:d2:9c:6e:34:
55:1b:e4:fb:10:46:23:70:f1:ca:f9:4c:2f:cd:76:
51:5a:39:c7:92:c8:42:5d:fe:a5:ad:d3:52:36:80:
cb:19:2a:1e:6a:cb:8a:3d:c9:86:3e:59:84:26:b7:
29:99:02:80:fb:59:48:1a:25:17:e3:ec:c5:91:35:
32:6f:8c:96:2f:93:27:26:79:1c:df:45:df:01:72:
b7:40:90:e4:b4:bf:5f:19:a8:ff:67:bb:7c:26:7e:
c3:89:15:e3:77:08:ee:c3:03:c8:e1:19:af:8b:cd:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:64:23:AA:33:4B:BB:1E:1E:73:A8:62:9D:4A:20:A3:66:16:B9:00
X509v3 Authority Key Identifier:
keyid:A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:5e:8d:dd:2f:63:d0:42:85:60:84:a1:f4:b1:fc:71:54:b1:
e3:c9:87:42:cc:f5:95:74:87:52:4c:c8:18:02:12:79:8a:41:
e9:d9:2b:4e:e6:8e:94:70:a9:4d:30:9d:bf:19:42:e3:41:30:
5b:95:74:b9:70:17:04:29:6b:8d:ae:f7:7a:97:3c:d9:3e:b1:
f1:23:35:ae:f7:40:7e:a9:94:d5:fd:9e:93:f7:7e:93:2e:85:
31:8e:95:39:c4:31:62:0e:2a:91:f0:84:97:c9:b4:81:56:c7:
ca:52:6a:20:f5:ef:df:07:b2:b1:b1:c8:b1:c0:94:ac:8d:85:
02:be:57:e2:52:c6:8a:b7:4a:70:20:da:b4:b3:cf:44:3e:48:
2e:3b:be:9c:3f:bb:76:02:cd:e5:5f:ae:95:bb:b8:46:d0:cc:
a0:62:88:3d:82:27:2e:6a:d5:51:fa:9f:2a:56:98:15:25:03:
eb:2a:ef:c2:19:8f:3a:a4:96:20:f6:2c:ba:cb:0e:ef:b4:83:
a4:f5:42:2c:13:17:26:e3:86:fa:cb:ac:4b:43:c0:38:76:92:
e6:06:0d:dd:4b:89:17:48:41:80:f8:10:f5:5e:5c:b8:26:a3:
3d:d5:4e:3e:51:01:34:94:c4:a9:7d:77:94:9a:59:4e:98:46:
28:cd:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:45:00 2026 by rpki-client