
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier: ad+Jx3jnurekrpjwOPcsw7KQ1pcssvyfS7wla3uS/U8=
Subject key identifier: D0:40:81:5A:F3:D2:DF:76:93:BB:7E:76:88:CB:9B:2E:66:2A:52:3B
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial: 0D05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number: 0CF3
Signing time: Sat 10 Oct 2026 18:28:34 +0000
Manifest this update: Sat 10 Oct 2026 18:28:34 +0000
Manifest next update: Sat 17 Oct 2026 18:28:34 +0000
Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: 9hVJQvoGDY7lzxZoWMl20G4ZNOtULOEBljYV5cLfeYU=)
2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: 0ylwtp+Xde2oLtmDBX2li5EHhsIVUZ6el50n4zuRj9M=)
3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3333 (0xd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Validity
Not Before: Oct 10 18:28:34 2026 GMT
Not After : Oct 17 18:28:34 2026 GMT
Subject: CN=6aca83d2-189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:8c:ad:b9:fb:98:c1:e0:ee:79:84:8f:41:
47:ff:82:56:65:64:d4:2f:10:52:64:ad:56:ca:6b:
ac:7e:df:11:84:20:e0:95:fc:e1:c9:18:19:66:f9:
ee:33:62:69:a0:00:38:e4:6e:92:73:d8:6b:85:81:
7c:29:29:d0:5c:73:89:c1:de:75:89:72:50:ce:2d:
9a:b1:1f:03:27:e1:ec:b5:8f:37:6a:01:5f:3b:c3:
47:87:e3:6c:0f:a2:56:d9:19:8c:24:fe:43:aa:d8:
c4:64:51:49:70:07:c2:e4:24:9f:3c:00:88:ed:c1:
99:d5:b4:ae:8e:c3:9c:e7:36:44:78:7b:c8:24:a9:
c5:c3:ae:53:9c:c1:79:48:b6:62:13:92:34:67:11:
82:a6:e7:33:54:1f:26:1a:82:a7:60:c1:4f:fe:85:
12:13:68:db:29:91:c7:62:c1:4c:94:3f:2e:2e:56:
63:2c:5f:4b:7f:32:69:56:00:59:36:84:a6:f9:68:
81:53:a1:90:41:ac:fc:d8:98:d9:a9:08:a2:e0:1e:
67:76:c6:75:65:9c:96:66:5e:e6:b0:ba:fa:e2:dd:
ab:65:76:74:9b:7f:74:53:a9:15:0b:53:d4:4d:1a:
b7:5f:8c:f5:2f:9d:3d:a6:6e:ca:4c:13:1a:2b:3b:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:81:5A:F3:D2:DF:76:93:BB:7E:76:88:CB:9B:2E:66:2A:52:3B
X509v3 Authority Key Identifier:
keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3d:bf:2f:c4:7d:0b:3b:c1:83:b2:be:e1:58:67:7e:b9:30:
0e:4f:d3:7b:f5:51:5e:dd:46:17:e5:61:fd:9a:2d:e6:e5:15:
32:47:16:31:25:36:97:64:cf:59:bf:33:df:bc:53:b2:80:ca:
ae:38:d6:4c:37:e5:33:6e:6c:fe:5c:7a:ff:8b:2e:3c:4a:ef:
df:46:d0:d7:a1:ed:e9:b1:77:95:ee:06:2f:67:ab:e8:9e:0b:
5f:2a:02:fd:47:a8:fa:58:78:f0:c7:b5:0a:37:c9:41:3a:1e:
bd:40:f3:75:d6:5a:cc:83:cd:74:d6:df:48:05:b3:07:f7:a1:
20:71:df:51:35:39:da:12:df:e6:1d:9d:60:71:f3:92:db:09:
e8:a3:cf:88:2d:e8:4e:e0:88:70:6a:16:15:2b:17:4e:83:9c:
46:3a:05:c0:53:66:44:77:d5:77:bf:15:83:5a:d6:7d:f1:fd:
8d:d8:72:91:16:be:d9:be:1f:31:1d:63:a0:96:b3:6e:84:93:
dd:ed:b5:43:d2:b7:12:ff:90:54:fb:8b:6a:3b:24:3a:84:48:
cc:80:c4:4f:58:14:19:7b:d1:bf:9a:f6:b1:35:89:6d:92:f0:
6c:13:43:b2:49:dc:4f:9a:30:04:2b:ad:cb:11:4b:00:cd:41:
ef:54:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:46:27 2026 by rpki-client