
$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json)
Hash identifier: XfREFSR9ECMQKz1oyxC/Izc09sQtj4OdAKFIGKnpaQQ=
Subject key identifier: 96:5A:D4:8C:03:DC:B2:98:71:B3:64:91:E8:00:07:2D:60:FA:53:84
Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Certificate serial: 01CD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
Manifest number: 01C6
Signing time: Wed 17 Jun 2026 03:58:05 +0000
Manifest this update: Wed 17 Jun 2026 03:58:04 +0000
Manifest next update: Wed 24 Jun 2026 03:58:04 +0000
Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: 4Por64nMEzdV0VRl3SMEDR/dgo5AcwwbgnwnxJX4Clk=)
2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: vF01duODiwTYz9/MMIZAj5OF+2YRcDoyyVIZ0SFGCBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl
rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Validity
Not Before: Jun 17 03:58:04 2026 GMT
Not After : Jun 24 03:58:04 2026 GMT
Subject: CN=6a321b4d-c197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:04:71:45:fd:15:22:1f:f3:cc:8e:66:88:
0a:92:1c:ad:22:48:bf:1b:8c:6f:f2:21:99:34:cb:
32:3d:1a:c3:a2:c8:6e:ce:ba:86:40:d9:f0:37:2d:
25:34:d8:e4:ae:b4:d9:42:3b:5e:01:78:29:00:6e:
51:00:26:5b:af:ef:94:5b:9b:32:0f:32:35:6a:ed:
17:32:a9:de:35:8a:2b:53:7f:3a:14:2f:6d:ab:7a:
64:e3:ed:db:51:15:3e:d9:84:75:8a:ef:f3:0b:b7:
c2:7e:a1:d1:1a:20:55:e4:43:e3:ee:ec:e2:0b:14:
96:9a:87:4e:75:8e:d2:a2:64:4d:12:1f:b6:6c:b8:
39:39:48:dc:09:75:8b:17:07:ec:33:d9:69:d8:51:
d7:6d:8c:db:5a:a9:85:a3:a0:07:9f:9b:60:b3:37:
53:76:75:a4:89:b9:b9:f7:4b:c2:07:ae:3b:b5:5d:
d4:35:03:0a:f8:6d:88:a4:f4:46:ac:7b:07:2f:34:
55:c6:8f:58:bd:c6:19:14:62:87:e2:56:91:28:54:
7c:14:ec:b1:a0:27:92:7e:a0:45:d7:69:95:33:4d:
30:cc:21:84:50:69:0d:6d:83:50:df:f7:e6:2e:1f:
f3:35:75:ff:0d:70:78:ca:1c:82:20:fc:ac:ec:7e:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5A:D4:8C:03:DC:B2:98:71:B3:64:91:E8:00:07:2D:60:FA:53:84
X509v3 Authority Key Identifier:
keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:38:87:0a:4b:33:ae:af:50:25:36:6b:49:9a:ec:b6:44:20:
d5:96:72:39:6b:2b:9e:b9:4f:7b:fd:a5:e9:a0:c8:27:f9:9d:
80:47:bf:db:e2:57:85:8c:5c:6f:69:29:2b:7f:52:23:c9:d6:
e6:c4:98:3f:73:1c:1e:f1:4c:62:cf:98:ec:ee:dc:f2:2f:6a:
63:89:06:3d:26:eb:15:73:a1:e0:16:0f:fb:2f:99:9f:8c:78:
00:5d:c5:9b:a1:2c:04:04:24:87:13:fe:36:c7:d4:c8:2b:ad:
99:85:c4:f9:ae:20:80:4d:d9:35:16:65:13:a7:d4:17:bd:ef:
4b:7e:30:90:56:63:65:11:45:34:82:11:ef:30:58:d4:51:7c:
49:04:40:29:6b:ac:ff:45:17:7c:aa:fd:01:7a:06:55:c5:c5:
e7:64:a2:11:9f:b9:c8:60:4c:90:15:2e:0a:b4:39:0c:69:1b:
75:97:34:a0:d3:25:54:cc:67:57:73:5b:1a:48:ca:0e:9e:88:
9a:7c:4e:c5:b1:c7:39:66:c9:3a:48:b8:f6:c5:75:e6:2a:ae:
95:2e:b6:10:0f:12:e1:b3:6d:4d:e8:6e:12:20:03:c4:1b:ff:
0b:65:18:23:b6:23:72:4b:a9:06:b7:86:70:33:e3:2c:45:2b:
70:8a:2c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:26:34 2026 by rpki-client