
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json)
Hash identifier: +YdS5xzFqTTcHPUjEwHgp40czn0IrVdQ17HthaJgL+k=
Subject key identifier: 00:64:B1:9F:3C:17:8A:51:29:94:5A:CA:B0:70:DC:F2:96:31:87:9F
Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Certificate serial: 0BD7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
Manifest number: 0BC8
Signing time: Sun 20 Sep 2026 18:58:54 +0000
Manifest this update: Sun 20 Sep 2026 18:58:53 +0000
Manifest next update: Sun 27 Sep 2026 18:58:53 +0000
Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: ECU2mLZZ0d1y6KUrwVd7LUB15//JkiKBIbKrOtyKJ+A=)
2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: /PARiH5eaZ2ETFC2Zi05FfcP/mxQcmCWaQAj9q8kZlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3031 (0xbd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Validity
Not Before: Sep 20 18:58:53 2026 GMT
Not After : Sep 27 18:58:53 2026 GMT
Subject: CN=6ab02ced-2642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:fb:d7:1b:9b:2b:81:2d:11:68:58:fd:e9:
43:4a:77:f0:76:77:a3:c1:1f:80:60:b2:d9:ac:eb:
2f:94:0c:5e:a6:55:03:e9:5f:74:1d:74:20:0f:28:
08:92:a1:fb:f7:61:e9:7b:0e:cb:cf:40:c6:d6:02:
1f:3c:21:6a:73:a5:83:b4:af:17:e6:dc:75:56:90:
c4:3f:66:8a:9e:2f:c9:b9:8b:36:a5:2b:32:4c:96:
be:c5:de:ce:c4:8d:fb:6f:d3:41:b8:fa:88:f8:e2:
f2:a0:3a:11:2c:41:2b:86:68:0d:a8:84:84:b6:38:
c9:4d:5b:33:4d:58:8f:b8:90:95:8f:ae:43:8e:d2:
68:d9:e0:56:bd:89:4f:d0:bd:eb:a2:4e:97:8a:19:
39:e2:87:b5:84:a1:7a:91:a9:e8:99:47:7e:2d:12:
4f:08:44:10:c9:7c:e5:c3:8b:ca:2a:60:22:1c:c9:
8d:6e:b1:6f:f6:29:f7:5a:d4:21:19:9a:7b:1b:d0:
a6:d6:47:08:49:7f:8c:ba:61:46:1f:03:57:19:17:
03:2d:81:bd:f9:5a:f9:05:c8:4c:15:4a:4e:69:45:
6e:7b:75:3d:98:69:be:09:7a:5d:40:ed:45:4d:59:
4f:9b:e2:32:0d:76:3a:ce:32:04:dd:8a:a5:10:cf:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:64:B1:9F:3C:17:8A:51:29:94:5A:CA:B0:70:DC:F2:96:31:87:9F
X509v3 Authority Key Identifier:
keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:a0:43:5d:af:ad:1f:ed:86:4a:b0:c8:63:5a:32:3d:1e:54:
7d:c9:11:38:8a:a2:44:60:1b:06:94:1b:43:dd:12:37:71:d8:
ec:f2:70:91:73:0d:b4:08:74:db:15:95:e8:3f:53:d8:08:c2:
fd:bf:89:a9:92:ca:d4:38:d9:33:87:b2:55:26:56:37:5d:11:
98:8d:5a:a0:b0:ee:c6:81:c6:7b:94:dd:d5:45:17:1a:e7:fc:
6c:de:09:fa:c8:41:ea:d8:19:30:a6:ab:34:9b:84:ba:fd:83:
98:fb:1f:7e:1f:3e:ef:a2:b9:1c:7d:fc:eb:80:c3:99:22:7f:
3c:a0:45:75:36:2e:a3:32:55:61:04:74:a3:01:a1:5f:b8:26:
97:f4:23:1d:5f:d3:f9:42:a4:da:4a:3e:1a:39:ea:d5:44:95:
1e:26:fc:d0:0d:25:4f:48:64:a0:63:45:72:68:6b:5c:ff:d6:
98:7e:39:bf:ff:8d:47:14:a5:02:1b:3a:04:58:c9:90:78:e4:
d3:c1:82:36:07:a3:7a:84:f5:84:df:54:31:3d:68:e0:0a:ee:
8f:08:c7:ee:2f:c5:12:05:d7:20:46:3b:af:13:48:93:f1:8e:
81:cd:19:35:2c:12:97:ce:fc:b8:9e:28:49:62:9a:7d:ac:cb:
1a:45:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:25:24 2026 by rpki-client