
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json)
Hash identifier: dp1XRX3nP+zAuQO0HsRkEPgiRG25HLOkIuU8msoA+Bo=
Subject key identifier: 94:38:3E:CD:47:E1:8F:D3:94:B1:DD:8C:4C:29:99:46:2D:01:F0:34
Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Certificate serial: 0B4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
Manifest number: 0B24
Signing time: Sat 24 Oct 2026 19:17:47 +0000
Manifest this update: Sat 24 Oct 2026 19:17:46 +0000
Manifest next update: Sat 31 Oct 2026 19:17:46 +0000
Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: HBMwR7/KqfK/N+FkTBKdWWGxWj83oiizt82dTLA0jL0=)
2: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: tjBgUERDNlX0vVwthkUmYdv4wGMbSaZtWaLqVCL5g+E=)
3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: bm6AgPrr+ba3g4ON4TXkW8wGD2H/2xk2tqyflYqK8Mo=)
4: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: EahjIzDunS5kJ7uh0KLSIyNDojbGXwaI7ZaquLDLzIA=)
5: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: lWmthGeBZ7LDMGrGEonzo/wuOeW50Fv4yH59yX/aHdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 19:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2890 (0xb4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Validity
Not Before: Oct 24 19:17:46 2026 GMT
Not After : Oct 31 19:17:46 2026 GMT
Subject: CN=6add045b-4a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:f9:de:ff:b1:09:3b:07:5e:14:32:ed:37:
bc:ea:6c:5d:d9:c8:13:64:2e:18:e1:8d:c3:cf:8b:
67:43:03:c2:72:14:b4:1f:7d:53:ba:08:bb:fe:02:
17:86:09:7d:bd:0b:2e:12:c8:d2:d7:c6:81:04:d6:
3c:b1:26:c7:81:a8:d6:88:1a:14:ce:1a:67:2e:fb:
83:5d:ab:97:3e:9b:c6:0f:bd:9a:df:31:d5:33:e3:
3e:69:dc:5c:16:c6:0c:ff:b0:22:eb:2e:58:07:0c:
3e:71:f1:f6:43:ed:3f:06:ef:63:42:45:98:d4:d1:
38:65:38:17:58:8b:e8:a9:5b:2a:f5:55:a3:44:ea:
75:55:68:9f:ee:08:ab:39:84:87:10:90:07:76:ad:
b0:d2:c7:00:a7:cb:8c:47:c8:8e:1f:29:21:d3:b1:
fc:62:c8:20:15:18:24:63:49:9d:8b:15:72:91:7a:
6f:2c:3f:57:d8:34:91:2d:76:2c:9f:87:a3:69:79:
91:52:20:43:b0:da:58:4c:1a:52:da:7b:14:2e:05:
e4:1e:c4:e7:77:d0:0e:ea:b2:98:2d:e2:d0:31:a9:
fb:83:0d:bf:73:7a:e3:42:75:05:bd:a0:63:94:2b:
cd:6d:7a:5a:db:28:a9:65:0f:bb:01:07:ef:a5:29:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:38:3E:CD:47:E1:8F:D3:94:B1:DD:8C:4C:29:99:46:2D:01:F0:34
X509v3 Authority Key Identifier:
keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:3e:b0:dc:68:00:5f:e1:a7:7b:25:9b:f8:e8:99:fe:34:a6:
77:46:77:fe:b3:8a:5b:63:74:55:7b:8a:e4:c0:de:08:57:92:
88:96:ea:20:5b:96:71:ba:47:2e:62:74:b2:38:44:10:7a:94:
eb:4a:7d:e6:32:94:a7:d4:d5:ea:ce:be:98:9f:f0:e7:e0:26:
0b:8a:86:72:05:69:84:98:4a:e4:45:3b:3e:2a:9e:43:9f:a2:
6d:4e:5e:1c:69:b5:fa:b4:18:07:c9:50:7a:b3:2c:b7:e1:34:
67:c6:65:d0:5c:91:e2:71:7e:ff:93:09:00:a3:91:1b:13:08:
d7:b2:11:0b:53:bc:03:8c:87:34:56:94:ce:67:00:23:62:92:
fa:96:17:36:9f:a1:ab:f7:cb:06:f0:21:67:9e:b8:14:cd:5b:
13:4f:f1:09:fa:fc:50:9a:81:b0:91:02:7c:2f:d8:2f:0a:88:
5a:e9:48:c3:22:83:b3:00:ce:c7:54:5a:c2:fc:ff:e4:92:ee:
74:49:2d:71:d9:cf:8f:cf:c5:93:f8:60:0b:fa:ae:93:a9:7e:
16:cd:a0:5b:ae:08:8c:b6:90:42:24:25:c2:3b:fa:8c:47:34:
ea:36:31:e8:1d:eb:71:be:81:b9:fd:0b:75:ea:10:05:af:2a:
aa:84:a3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:05:06 2026 by rpki-client