
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json)
Hash identifier: 7/X7UsKjjMcM60njosFll9dRoBoXsN7UFhXHLImoTaw=
Subject key identifier: FF:ED:0F:64:B8:D3:02:66:FE:77:53:69:AD:BA:77:B1:44:58:6C:EB
Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Certificate serial: 027B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
Manifest number: 024F
Signing time: Sun 11 Oct 2026 03:28:31 +0000
Manifest this update: Sun 11 Oct 2026 03:28:30 +0000
Manifest next update: Sun 18 Oct 2026 03:28:30 +0000
Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: xjbqfnwc95h28/SqKqCEhNa/lEQCOlLFLBMl0GR+jQQ=)
2: 2A01310EC16311F18FE561465911F970.roa (hash: oMdqNBacMju7uLN3JgNAXjRJ2Oc6Y7lPPtFAMPz05uU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 03:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Validity
Not Before: Oct 11 03:28:30 2026 GMT
Not After : Oct 18 03:28:30 2026 GMT
Subject: CN=6acb025f-8bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:4d:b9:6e:c2:47:c8:4d:69:e4:08:aa:4e:
7d:b2:b3:d9:21:af:df:0b:f3:01:37:9a:d5:12:e5:
94:0d:e5:23:4d:50:d0:82:93:87:98:c8:13:3a:16:
20:d9:97:5c:78:c3:45:2b:c1:d9:ab:4e:f4:5a:9f:
fd:3d:99:e5:1c:9a:37:89:d2:b7:64:0a:90:53:7d:
33:7e:8a:85:a3:3c:86:f4:7b:c8:34:84:3f:07:67:
a2:75:f5:34:10:a5:79:a4:73:7f:37:05:67:93:2e:
89:5c:45:0b:f2:0a:d2:06:37:5b:10:f5:f3:d7:dd:
47:d8:16:2b:f3:3f:01:b4:ad:c8:a9:f5:9e:dd:08:
9e:43:71:5b:ed:46:93:8f:03:70:9e:61:e3:87:d9:
95:8b:c6:99:f5:10:18:f1:1f:89:6c:25:e4:35:7e:
90:d8:6d:4d:57:7e:ec:9c:03:40:9b:a8:97:e5:10:
5c:df:f4:73:e1:e3:e5:dd:a0:30:d9:84:33:53:4b:
aa:a6:9f:e5:30:89:ed:30:99:03:75:2f:07:8d:71:
fa:de:61:00:68:b4:f7:ab:17:cf:e1:12:34:2c:b6:
72:6f:fd:46:3b:3c:48:9d:af:72:7e:5c:6c:c2:4e:
cd:8b:42:ac:42:75:13:61:3b:e5:5d:22:3b:c2:e5:
ce:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:ED:0F:64:B8:D3:02:66:FE:77:53:69:AD:BA:77:B1:44:58:6C:EB
X509v3 Authority Key Identifier:
keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:86:82:b4:d9:04:39:8e:32:1b:fd:b9:9f:8f:1b:e9:7d:3f:
82:e3:ca:bb:2a:62:2e:24:7d:bc:f3:2d:87:47:7b:11:5a:7c:
a8:8e:85:52:24:01:3e:e0:60:d6:ed:de:5a:8d:55:54:d3:59:
c8:fe:52:f3:f4:0b:26:ff:e6:56:45:2a:b4:a8:7e:d9:04:08:
45:69:5b:57:89:ce:55:c8:20:8e:d2:ed:a1:e6:fa:7f:15:de:
4d:79:03:7a:d7:c1:3f:8a:35:ea:e7:dc:80:21:56:52:5e:f0:
bf:bc:17:95:ef:11:40:b4:09:3c:82:70:00:5b:66:fb:af:c6:
ef:11:8f:72:fb:74:87:69:dc:58:f4:c3:3a:d5:eb:40:ba:6f:
9c:f4:9d:2e:0c:3f:71:05:11:45:aa:b0:8d:22:a3:67:5c:b0:
7e:e4:5c:01:ee:b9:b5:ff:3f:eb:14:2d:c1:12:66:59:a6:45:
28:bc:e5:30:a4:08:79:20:48:23:5b:97:b5:33:93:b7:bf:72:
78:d6:fd:ee:cf:6a:14:f9:53:34:39:48:fc:1c:4e:41:e2:7a:
24:5d:71:dc:ef:28:4c:4d:f0:a4:47:22:0c:04:90:5b:ba:a6:
4f:50:15:1f:8c:ab:31:cc:18:ef:f2:6b:e9:7b:2f:a2:39:54:
fd:33:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:52:45 2026 by rpki-client