
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
File: OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json)
Hash identifier: DJJ8blk2AbVpo138ffdxwDk12oiLyhAfUWQPLv0OqDk=
Subject key identifier: F0:F3:95:D2:7A:AF:B8:B3:38:9E:6C:FA:20:90:3D:71:02:08:6D:EE
Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B
Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B
Certificate serial: 1897
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
Manifest number: 188B
Signing time: Sun 04 Oct 2026 16:30:50 +0000
Manifest this update: Sun 04 Oct 2026 16:30:49 +0000
Manifest next update: Sun 11 Oct 2026 16:30:49 +0000
Files and hashes: 1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: 605qzAscOIFcnic79nsRJuRU1crGM7MaDM51aVuiD8M=)
2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: 7JNmlbMqJmYKkSRMUqjjlP0pR2Q9I21oeD7RxmLV6bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl
rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6295 (0x1897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B
Validity
Not Before: Oct 4 16:30:49 2026 GMT
Not After : Oct 11 16:30:49 2026 GMT
Subject: CN=6ac27f3a-a0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:46:31:b9:8d:4e:f7:f4:89:76:43:94:28:
32:24:54:fe:f6:36:35:01:03:c7:95:e4:fc:24:e9:
91:7c:b6:29:47:ca:98:b9:94:c4:2d:4a:53:13:7f:
32:44:3d:2a:be:18:ba:4d:81:2b:99:48:d8:e3:c7:
a9:6d:f6:45:ed:5e:bd:2a:bf:2e:ea:5d:8f:ba:bc:
2e:f3:5a:1b:2f:ed:54:2a:9f:f3:30:ad:12:ce:eb:
ca:d9:2a:c4:84:e2:7a:30:81:a9:3e:03:d8:9a:d5:
2d:3f:f0:9f:48:8b:0b:ab:c3:b8:2c:1e:3a:cf:18:
b0:0e:09:01:a7:73:ac:14:48:c0:08:4d:1d:2c:5b:
38:fd:20:8f:24:42:a0:d9:4c:78:b5:4d:d8:af:87:
ee:29:e6:ce:96:65:66:6d:22:76:ac:27:43:77:a8:
89:b4:ae:05:c1:d7:5b:3a:60:b8:b9:54:e0:ed:8c:
4a:5b:4a:45:8b:63:7d:30:5f:28:d1:32:d6:cb:45:
bb:b7:a4:e1:bd:ae:5d:d7:77:48:51:b9:2e:53:36:
97:e0:73:20:eb:c9:e4:d2:db:f5:2b:73:6b:b4:6f:
6e:84:5c:d9:6e:f7:b1:97:49:d5:dd:c8:67:f5:55:
c6:4e:1e:20:6a:e9:5c:e3:a4:8f:f6:b7:07:c9:e2:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F3:95:D2:7A:AF:B8:B3:38:9E:6C:FA:20:90:3D:71:02:08:6D:EE
X509v3 Authority Key Identifier:
keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d2:ce:53:05:6d:d3:d0:1b:d5:64:a1:0e:81:84:8c:9c:b0:
1c:cb:3a:d0:da:a6:d4:1d:58:02:52:12:49:4e:e7:77:ce:6f:
2e:8a:f1:ea:f4:72:0d:39:61:20:10:42:2e:c8:5c:d5:ae:b9:
79:2d:1b:74:40:f3:22:e8:d7:fa:45:70:d1:35:b9:6c:68:ab:
5d:2b:d4:06:c1:e3:c3:4d:2c:37:67:61:f7:03:a6:2a:f9:14:
7c:c7:9f:1d:f3:c0:b9:7c:57:0f:d0:ca:36:48:d7:09:30:1c:
62:c0:50:95:08:3d:f3:38:57:c9:42:9a:c9:9b:d5:33:55:d3:
26:a5:87:14:8f:4b:12:63:38:a9:b6:a0:c3:5d:2f:ea:9f:63:
18:c9:06:09:16:5f:83:d6:28:57:04:3d:16:39:5e:13:15:7d:
4b:0e:90:be:e8:8f:cf:51:aa:ca:b8:a9:4a:9f:bf:29:ae:a3:
da:46:13:04:b5:c4:de:7b:de:14:73:d8:44:c9:35:03:73:f1:
e5:7e:60:f8:89:fa:d3:7d:dc:ce:bf:ff:be:c9:cc:53:7b:4f:
b6:40:73:61:48:db:29:63:f2:5c:93:0f:a0:3a:63:2e:4c:f9:
0f:99:75:51:8e:63:dc:90:1f:2a:e7:71:61:6b:ca:96:99:a0:
47:1b:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:36 2026 by rpki-client