
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json)
Hash identifier: 5rYmulnQFfNlXLAVs5v0Ae7q4k2bqA4Q6ulKdG53bVI=
Subject key identifier: 76:36:9C:76:26:80:28:C5:5A:E4:06:E4:D4:35:5A:A4:79:2E:50:8A
Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
Manifest number: 01F7
Signing time: Mon 21 Sep 2026 03:20:07 +0000
Manifest this update: Mon 21 Sep 2026 03:20:07 +0000
Manifest next update: Mon 28 Sep 2026 03:20:07 +0000
Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: 0xlcN0181sC9W8cc6pvqs+TnoVsE+MXTaYmHktrQr0Y=)
2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: vF01duODiwTYz9/MMIZAj5OF+2YRcDoyyVIZ0SFGCBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl
rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Validity
Not Before: Sep 21 03:20:07 2026 GMT
Not After : Sep 28 03:20:07 2026 GMT
Subject: CN=6ab0a267-cc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:b7:6c:3c:a0:0a:50:3d:df:43:92:5f:ad:
4e:86:92:4e:16:a4:19:0b:c0:7a:ab:fc:17:51:db:
70:19:4a:59:86:58:dc:40:23:9c:d3:41:95:59:58:
6b:07:6f:6b:82:79:2c:84:ea:cb:9c:7f:d7:32:de:
59:2b:b0:f3:78:91:cb:4c:e6:da:3f:f5:c0:d9:89:
c7:78:1c:d1:b6:27:32:eb:e9:5e:61:66:25:80:1b:
7e:85:c2:a6:87:ab:b5:b6:73:63:d6:a1:05:02:84:
cb:40:c7:6b:c7:f1:97:a3:89:f1:a5:5f:a3:f7:64:
03:8c:bb:29:18:d1:96:12:73:0e:e0:39:d2:0f:46:
42:ef:7b:4d:6b:46:d7:5b:43:52:6b:eb:20:10:cc:
49:f1:d7:3f:2d:d2:02:92:29:8c:7d:4f:5e:02:b3:
b3:b8:9c:95:86:53:72:b4:35:81:f6:09:a4:85:be:
88:2e:05:0a:cb:44:74:3d:c8:ef:be:7f:43:c8:6a:
fc:78:61:ce:94:b0:b4:45:ee:23:58:44:62:09:19:
53:77:f1:d9:71:e2:89:1a:2e:14:e7:14:b8:57:d7:
a4:e4:3d:28:29:6d:0f:c3:09:b6:b3:90:41:2d:ca:
d9:63:ab:bb:84:00:bb:fa:fe:c0:1a:14:08:63:80:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:36:9C:76:26:80:28:C5:5A:E4:06:E4:D4:35:5A:A4:79:2E:50:8A
X509v3 Authority Key Identifier:
keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:9f:e9:90:fb:cc:db:13:c7:3c:70:88:d6:ea:f8:ce:01:86:
c0:47:70:79:92:4c:76:a0:38:f7:58:99:d1:9f:c2:ea:b9:37:
b7:09:f5:cc:55:92:76:43:9c:10:cf:fd:94:23:3f:f6:d4:6d:
15:8b:39:cd:ea:7e:3c:82:f2:ff:cc:32:e1:c6:28:da:ad:73:
e1:15:b6:53:d5:2c:79:c4:be:e6:d9:0f:0e:23:a9:88:ea:7f:
90:fc:fd:ec:68:6b:ff:15:91:7c:30:c0:f7:8e:5f:ab:da:23:
51:cb:f9:10:6e:af:e7:09:b0:ae:2b:93:22:e4:6d:a4:ac:dd:
e1:a1:ce:ce:a1:e2:12:9f:96:1f:89:b0:f4:af:e5:c6:e3:a3:
ed:6d:b4:63:18:6f:50:5c:95:8d:5c:21:81:77:2a:5a:4c:34:
7f:39:2c:d1:46:42:45:2d:80:f0:60:9f:6e:77:e3:e7:c3:a9:
41:c7:31:40:fd:54:11:7f:bf:44:0f:4b:fe:5b:fb:f5:aa:d6:
8d:d2:bc:cd:e4:89:e5:8f:91:c6:54:8b:ad:1d:a9:13:c9:bc:
d0:bf:fc:35:32:72:ab:25:89:67:f9:a0:e1:dd:ed:91:51:ff:
df:dd:d2:84:14:a9:90:a8:a5:47:11:ba:04:5e:eb:6c:11:aa:
95:86:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:34:00 2026 by rpki-client