
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
File: oL8weU5q5J7AaNUDjPmv9UNdHdI.mft (raw, json)
Hash identifier: ehsQzciw9BdONagG/Vo3EBODpaywYGotReb1MO0aQFc=
Subject key identifier: 6B:96:29:52:4A:B3:DC:A4:D4:F1:84:A1:64:9D:A9:EE:AD:C2:D4:9A
Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
Certificate issuer: /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
Manifest number: A8
Signing time: Mon 21 Sep 2026 07:12:05 +0000
Manifest this update: Mon 21 Sep 2026 07:12:04 +0000
Manifest next update: Mon 28 Sep 2026 07:12:04 +0000
Files and hashes: 1: oL8weU5q5J7AaNUDjPmv9UNdHdI.crl (hash: O2+EWvdtM91m+4At8/yyRVPjVQ6LS50+AhDOXxycJkY=)
2: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (hash: aZcuk92cPHBLPT7kL0kkLxHikI+2JffenZZL+WJEXRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Validity
Not Before: Sep 21 07:12:04 2026 GMT
Not After : Sep 28 07:12:04 2026 GMT
Subject: CN=6ab0d8c4-143a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:c7:4e:bc:6c:38:87:3e:9f:5a:19:d5:f3:
b0:a1:3e:64:17:cc:85:6c:45:20:a0:82:43:c6:e6:
24:f6:14:b8:c3:fc:90:dd:82:75:86:05:e5:5b:f2:
f3:31:89:b4:83:20:b4:42:17:1e:0c:ff:32:27:42:
e5:5a:44:e3:c0:b4:f7:01:9f:88:a3:3b:c7:75:01:
f4:be:19:2d:e3:f8:f1:66:e9:ea:d9:e8:b0:9f:87:
5a:39:1e:3a:19:d5:33:8d:ba:4f:90:7f:e2:8c:1b:
ce:62:a5:48:96:27:7a:c1:be:e6:6f:81:6e:a2:4c:
c2:f8:2f:93:3c:7a:e2:1d:85:9f:08:24:4d:f9:fb:
91:43:45:10:d8:98:21:72:91:4e:6a:1e:3e:cf:75:
b6:0e:89:cc:22:c3:7b:2c:8b:cb:a7:f0:51:12:07:
26:40:92:62:d5:15:d7:ef:e2:fd:af:a3:6e:01:d8:
aa:0d:e1:9b:83:2e:3a:25:44:83:46:ec:fb:a7:89:
9c:6a:fe:27:28:f3:20:35:b3:0a:68:f8:82:14:2b:
6d:9d:1b:85:9e:26:4d:1f:a9:34:55:00:76:08:e1:
d0:0e:ef:e7:85:d6:0c:2c:44:e5:cf:82:98:52:d0:
02:3d:d2:f7:e6:ac:1e:9b:f3:51:d0:69:78:03:f8:
c7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:29:52:4A:B3:DC:A4:D4:F1:84:A1:64:9D:A9:EE:AD:C2:D4:9A
X509v3 Authority Key Identifier:
keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:64:b5:76:e5:7c:b4:1b:3a:0f:02:99:32:05:92:1c:73:a1:
06:78:02:f2:f7:60:0c:03:9c:5c:20:d2:49:c8:d8:96:36:0f:
81:cb:83:92:3a:7b:15:ac:9e:eb:c6:30:5d:00:e3:6c:17:8c:
74:ab:58:f4:cc:d2:07:65:74:c9:c9:df:96:43:06:1d:e1:5f:
2c:4e:2d:c9:7f:59:36:de:fa:ce:1f:90:5f:6a:1e:9b:9e:3b:
93:c3:63:f8:66:6a:45:a2:28:31:fd:af:28:f4:62:ef:ab:8f:
06:2b:1d:6e:9d:6e:d8:e9:b1:ca:56:8a:19:00:90:2c:33:2a:
b1:7f:b4:72:d5:62:6e:aa:99:fe:0e:8f:48:6d:e4:e5:11:56:
06:19:09:72:d0:f6:b2:a4:47:ca:2a:f8:9c:8b:e0:ee:eb:87:
c9:01:0e:af:53:f0:37:96:ac:39:bc:98:8a:6d:e3:32:f2:f2:
2b:c6:05:7c:9b:b2:76:66:19:cf:45:29:d4:e5:b2:00:74:7f:
bb:d7:0b:93:f2:9d:14:5f:dd:5d:9d:64:c2:33:58:d3:89:5b:
66:c8:c4:12:86:d7:46:92:a8:ce:55:c5:1e:dd:63:db:be:c5:
22:42:4f:c0:7b:29:3c:34:5f:2d:5d:fc:b4:38:99:c7:61:d5:
96:f0:e6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:33:51 2026 by rpki-client