
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
File: ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json)
Hash identifier: mvVlsXXnIVgixSqBLtBiDeN192rTabz5E3vVVoYYKZw=
Subject key identifier: C6:D1:3A:90:10:A1:20:0C:D6:28:12:51:3C:90:C2:E4:CE:68:B6:48
Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80
Certificate issuer: /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
Certificate serial: 08FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
Manifest number: 08E8
Signing time: Tue 18 Aug 2026 20:41:42 +0000
Manifest this update: Tue 18 Aug 2026 20:41:42 +0000
Manifest next update: Tue 25 Aug 2026 20:41:42 +0000
Files and hashes: 1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: ctwG3iXK9kS/GglHimihTscDoQ1At3Tvv4MJvt0S+Ik=)
2: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: t3r3ct1v62CkRoqbDTfbFNF8KY0PM5gtyGYmsu7VXes=)
3: B019C596499E11EBA61D7146C4F9AE02.roa (hash: vmFeCCqd0p+xBwwBiH862ux9Uk8d+Hb/Tq8YBNVAOrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl
rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2298 (0x8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBFC9, serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
Validity
Not Before: Aug 18 20:41:42 2026 GMT
Not After : Aug 25 20:41:42 2026 GMT
Subject: CN=6a84c386-4ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:83:b3:b1:6b:27:70:69:12:ca:52:05:d9:e5:
b4:99:c3:5b:88:c2:af:e9:92:fe:61:21:2c:e2:a7:
e6:c4:c1:68:95:a7:15:be:da:85:4c:7e:ca:04:7b:
8c:d2:a8:13:bb:cb:18:45:9e:37:78:2b:b0:ee:dd:
02:52:e9:93:a7:58:5b:40:fd:05:c0:65:7c:33:bb:
dd:be:fc:c0:f2:dc:40:93:8a:8c:54:76:49:59:cc:
cb:40:a6:99:e8:95:c0:3b:a2:36:32:dd:09:33:0e:
b5:36:55:7a:c6:0f:76:36:c2:35:b4:f6:23:59:11:
1c:48:19:a6:18:95:8d:d3:a8:70:e0:8b:ad:36:cc:
2f:72:f8:64:85:98:3d:83:af:bc:f8:3d:b3:5e:b2:
59:6f:51:46:c6:46:c5:56:b1:c3:f5:fc:a8:c8:0d:
24:5d:4a:78:e6:6f:85:fb:1e:88:d1:1d:12:81:e6:
0f:7f:e5:e8:fb:65:14:c3:e3:08:db:c8:80:ec:3a:
35:a8:61:de:56:3b:83:2b:dd:c5:bd:19:d9:a1:37:
e6:4e:17:63:19:fc:e0:d7:7e:83:2f:66:3f:be:3a:
2a:6d:a5:8a:3c:5d:31:94:32:1b:60:1a:4b:c6:c4:
e1:47:a7:cf:55:81:56:2d:45:cb:41:19:48:52:20:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D1:3A:90:10:A1:20:0C:D6:28:12:51:3C:90:C2:E4:CE:68:B6:48
X509v3 Authority Key Identifier:
keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:85:8f:21:d3:85:72:48:84:06:1f:1e:3d:b8:d5:3e:37:a5:
16:9f:c8:7b:2f:af:18:8b:44:95:ed:f2:a0:c4:4a:7c:b7:de:
6d:03:4b:2b:72:b5:44:0f:8a:d0:6c:70:cb:f9:eb:41:52:1d:
c9:83:21:cb:4a:47:35:6f:39:41:d9:8d:ac:e2:69:63:4d:63:
d4:f2:69:e9:9f:ac:9a:2e:66:e6:43:92:99:e6:db:47:7f:2a:
1c:0b:e6:7c:77:d7:f6:2d:4e:fe:70:2b:cb:87:96:94:87:e5:
15:1c:b5:c9:f5:53:d7:b2:95:1a:c4:7b:9b:69:59:e1:54:9f:
a0:cc:75:70:bf:88:8f:49:61:85:bb:fb:87:a1:22:10:4f:81:
bc:d8:5d:d5:5b:75:2b:ef:c6:45:f3:8f:5d:e9:e9:f3:48:2e:
27:e7:c8:3a:e9:21:9b:fe:f2:7b:bd:72:61:b0:32:0e:84:b1:
0f:43:22:fa:f2:4a:ff:39:51:84:2e:88:9a:70:7f:13:58:36:
ca:85:57:78:5b:53:6c:52:dc:01:ae:1d:d8:ce:95:43:8a:03:
b8:7b:d5:08:ca:4c:37:13:8a:ea:67:d1:b6:68:95:f5:70:1b:
c4:f3:2b:ed:13:4d:af:71:af:98:1f:af:c0:53:bb:02:d8:e7:
14:42:ef:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:20 2026 by rpki-client