
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
File: otDn34iradtuBZowZOTdweb8nRk.mft (raw, json)
Hash identifier: BMQicp/49Y3anLH41iFlWG5PpkJF/eOmL6TtR5yI20E=
Subject key identifier: 8B:40:22:35:3B:2F:F7:E1:45:8B:05:EC:FA:2C:A6:94:00:BA:C8:97
Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
Certificate issuer: /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
Manifest number: 4D
Signing time: Wed 15 Apr 2026 07:51:26 +0000
Manifest this update: Wed 15 Apr 2026 07:51:25 +0000
Manifest next update: Wed 22 Apr 2026 07:51:25 +0000
Files and hashes: 1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: qeiDhbsWdmKLJE71YhhU63vztyuctU2YlE9Z8pVHXjw=)
2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: TtYj2sjHiscSoHGcXukyvA6H2jH+qg3mM5AVrWsmoS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Validity
Not Before: Apr 15 07:51:25 2026 GMT
Not After : Apr 22 07:51:25 2026 GMT
Subject: CN=69df437e-82f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:ff:6d:13:c9:bc:a0:71:10:b0:c4:ee:50:
dd:86:92:4f:ca:a7:88:bb:67:60:38:6b:99:a5:1a:
af:47:8d:c4:bd:14:b0:8d:a6:50:a2:d6:42:8e:7b:
62:6c:40:b8:5f:09:64:4d:c2:07:64:e1:65:e7:63:
d9:a4:cb:d6:df:d0:2a:2a:68:54:aa:f2:85:4f:39:
9f:56:45:7a:f4:d7:e9:64:83:37:e1:fb:59:a3:42:
46:7b:ec:a3:5a:84:19:4e:bf:ec:25:9b:51:96:1e:
7c:55:39:44:f3:fe:71:4c:83:a5:ba:f5:68:c7:7e:
01:95:db:62:6b:1a:5e:5d:64:fe:2c:74:1e:ac:c4:
91:a6:13:ff:d0:bd:d7:37:12:ea:f0:f6:2a:9d:01:
d3:18:f2:e9:96:3f:cd:8d:70:1a:7f:de:d9:eb:2c:
2d:f3:23:ca:4d:04:b0:9a:c1:93:32:1b:c2:5c:08:
43:c4:15:5c:8b:45:a1:93:f3:83:f7:ef:07:1f:5a:
99:80:af:40:86:13:f3:c3:01:2c:5a:fe:c7:82:1e:
bb:9c:11:14:49:cb:06:66:9c:23:6c:d4:ae:e9:28:
ba:ce:60:87:b2:5e:95:fa:d9:76:f6:8d:df:66:2c:
1a:da:30:3c:eb:89:a8:68:9a:25:08:d6:40:82:7b:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:40:22:35:3B:2F:F7:E1:45:8B:05:EC:FA:2C:A6:94:00:BA:C8:97
X509v3 Authority Key Identifier:
keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:96:76:54:28:ca:d5:77:76:11:1c:40:a6:3a:83:a8:0d:42:
d7:29:58:a8:37:9c:75:88:75:97:e7:41:7d:4f:68:c6:8e:90:
e5:6b:49:80:8a:53:7e:6a:d8:45:62:51:db:50:cb:7c:e5:81:
03:b7:02:fb:e8:f7:d2:17:2e:5f:c4:e1:36:3d:55:8d:2e:20:
8f:3e:a0:e5:26:1f:fa:f9:a4:33:f5:e3:21:49:65:1d:8d:60:
b0:f9:b6:ab:e4:a2:df:77:bc:ee:0d:de:31:86:4f:0b:e2:1d:
c1:ed:22:02:d9:4c:16:89:9e:2d:94:ec:4f:43:6f:4f:ed:bf:
39:81:b5:b0:a8:40:11:16:db:b0:b7:fc:a2:aa:f6:90:0b:5a:
1c:d3:6b:2e:81:60:3e:3e:7e:19:01:ed:88:24:2d:43:3c:ac:
83:30:a9:62:cd:15:63:ff:4a:1c:43:38:b6:48:a3:53:d0:30:
37:44:f9:b8:b8:c8:00:a9:99:fb:03:95:7c:26:4b:b2:8e:4c:
7f:76:12:98:80:27:7d:52:0c:44:b5:cf:97:8d:48:c2:c0:c8:
47:6a:f2:7e:80:14:ad:3c:c1:41:0a:34:af:68:c1:e1:42:87:
a4:d1:fa:02:2a:fd:76:06:a6:61:ab:d0:2a:89:57:8d:94:41:
e7:9c:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:01 2026 by rpki-client