
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
File: Od1jNTmfErgZIRzpGqfc9i9tgbw.mft (raw, json)
Hash identifier: JlTN2qK6R5GqGNWo+766X+KNB6UFysP0vwQzg5I6+qQ=
Subject key identifier: AD:BA:40:07:B2:12:2F:43:7E:99:D1:82:7F:BE:26:75:A4:0A:E5:50
Authority key identifier: 39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC
Certificate issuer: /CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
Certificate serial: 0450
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
Manifest number: 0442
Signing time: Wed 19 Aug 2026 00:37:07 +0000
Manifest this update: Wed 19 Aug 2026 00:37:07 +0000
Manifest next update: Wed 26 Aug 2026 00:37:07 +0000
Files and hashes: 1: Od1jNTmfErgZIRzpGqfc9i9tgbw.crl (hash: TLNb6higBS4IswXePgC1vTLpc+jzmz7K23w6VhmC98c=)
2: 9233AB983ED411F0B38CCD78C4F9AE02.roa (hash: KE0mpfoQ53HdFtxz9Q1JjWNxOehBt1yE8erg7Afm7o8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl
rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1104 (0x450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB2D, serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
Validity
Not Before: Aug 19 00:37:07 2026 GMT
Not After : Aug 26 00:37:07 2026 GMT
Subject: CN=6a84fab3-eeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:f2:1a:07:5f:2b:98:2e:76:f5:c7:9e:81:
3e:d1:60:10:b3:a7:6e:ce:1e:8b:51:d8:e4:76:8c:
0d:ee:7b:5a:fa:16:72:39:60:38:c2:c8:54:2f:b1:
0d:17:35:c6:2f:93:b5:08:b3:89:43:cc:55:a6:03:
1d:55:75:0f:1e:b2:ba:f6:0e:f0:db:ed:6a:31:83:
2e:50:a3:42:d3:d1:23:af:60:74:af:3e:2d:1d:5b:
00:a7:a0:63:99:fc:6e:e4:7d:3c:d6:dc:d5:5c:e8:
44:07:ee:64:3e:cf:a8:67:4a:35:0b:93:fb:27:18:
4a:b6:d7:2d:ac:49:d7:85:5f:b0:6c:eb:29:a0:a8:
66:93:50:f2:45:4f:e3:4f:57:be:a0:c5:49:03:30:
d5:97:52:20:54:f0:b1:25:6a:82:c4:d5:7a:c2:7d:
1c:87:cb:66:d1:97:03:e2:1b:df:8a:0a:d3:03:8f:
71:2a:50:63:05:2a:b3:a8:cb:cd:e4:c1:b4:70:4a:
b5:f4:de:88:04:54:28:95:92:71:05:0f:0a:ec:fc:
af:e9:26:1c:8d:b2:f5:39:62:0b:7a:56:b9:ad:2b:
8b:37:29:01:11:fb:8d:e6:82:2a:62:f1:89:45:56:
9a:82:1e:c8:45:df:c0:7e:f0:7f:93:35:cd:7d:29:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BA:40:07:B2:12:2F:43:7E:99:D1:82:7F:BE:26:75:A4:0A:E5:50
X509v3 Authority Key Identifier:
keyid:39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:17:cb:dc:28:f1:90:1b:7d:6e:20:d4:7b:b3:5d:44:f8:82:
c1:8a:84:31:1b:35:a9:fc:3c:e3:a7:9c:4c:46:ae:23:3a:6a:
01:37:fa:24:13:8b:0a:35:57:03:0a:65:d2:bc:96:f3:b8:c1:
0f:d5:d5:52:4d:f1:fa:d2:9c:d3:1e:41:7d:6d:12:66:83:90:
56:1e:16:e5:01:a5:cd:de:d7:fb:1c:7c:25:d5:e0:20:e4:59:
f9:9f:91:d5:b3:c6:e0:f6:df:f4:9d:c6:ed:24:0d:53:e0:24:
a9:c7:77:4d:2b:d5:48:81:97:81:f9:b5:8b:53:99:5a:fb:28:
98:3a:a8:51:89:f6:d2:f7:6e:09:f6:87:02:ba:14:85:64:b1:
e9:8e:c6:a4:6d:4d:53:7e:3e:4b:c7:ec:9d:27:8d:96:a2:bd:
cb:89:e7:b7:03:78:55:9b:14:21:bd:d9:19:d7:a0:06:5f:03:
37:5e:c3:b3:f9:88:ca:79:84:12:b4:4b:f6:6b:0a:d9:aa:76:
9f:63:fb:c4:66:a7:29:78:f9:56:29:90:8c:0e:0f:95:76:76:
a4:3d:d0:fe:e0:ca:d6:d7:30:34:43:d1:49:a0:83:8c:64:dd:
c4:e2:9a:84:9b:86:8f:db:33:7b:59:28:48:e9:ad:0e:8b:bf:
98:12:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:34:12 2026 by rpki-client