
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
File: cnOFPaBj78uOxUSwMg1acHuUwIk.mft (raw, json)
Hash identifier: +yAX2FaK/MJiRH3qhfOcWbMwcp+NoP+T3ZLXnsvd9GI=
Subject key identifier: 56:31:35:44:21:5E:98:8D:8D:A0:F1:1C:E9:4B:7C:09:DE:D8:47:45
Authority key identifier: 72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89
Certificate issuer: /CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089
Certificate serial: 081F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
Manifest number: 2F07
Signing time: Thu 08 Oct 2026 15:42:13 +0000
Manifest this update: Thu 08 Oct 2026 15:42:12 +0000
Manifest next update: Thu 15 Oct 2026 15:42:12 +0000
Files and hashes: 1: cnOFPaBj78uOxUSwMg1acHuUwIk.crl (hash: vPj8yJ8DygkW0aDG8hDpKc3QdvpAHT+PCxUY16LUghA=)
2: 4BB610C2E16511EC8EDF6621C4F9AE02.roa (hash: 1/JNtgxrsCQgMCZg/xoCtiLGpLNRukBhGSMeMiBFJLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl
rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079 (0x81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163824, serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089
Validity
Not Before: Oct 8 15:42:12 2026 GMT
Not After : Oct 15 15:42:12 2026 GMT
Subject: CN=6ac7b9d4-c3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:6d:df:5c:63:73:c1:4c:63:b1:de:12:92:
de:0d:e9:f6:e5:12:4f:5d:07:4a:fe:24:2d:50:4e:
d5:03:0a:49:e3:8b:f3:ee:94:e8:79:51:0d:43:8e:
68:82:e5:41:ef:96:58:b3:a8:93:6f:f2:0a:a2:39:
28:03:6b:0a:3f:7e:4e:cd:63:f9:7a:56:41:c6:5d:
f2:a8:88:19:a4:95:d4:64:7b:43:1f:77:69:e9:f5:
ba:05:4a:a2:26:77:64:1f:3f:5d:22:b3:3e:94:b9:
22:1a:72:e6:a0:5c:11:4d:3c:40:56:63:38:2f:d7:
20:af:38:9c:a4:fe:7e:0f:8b:04:14:78:99:cd:61:
ae:77:83:c8:33:dd:c0:ed:9e:f6:d8:fc:b3:ae:4e:
9f:98:cb:68:dd:13:07:16:68:af:72:63:ba:78:11:
3e:18:8f:f0:63:eb:ae:4a:ab:4c:62:d4:f5:aa:a6:
d6:78:62:69:be:f3:dd:df:8f:fc:3c:34:02:17:03:
fd:42:82:cf:3c:1b:0b:7b:ff:ef:de:9f:c4:43:38:
51:03:4a:ff:9b:d6:5b:da:c5:ab:ee:db:24:d7:fb:
3b:09:fb:9e:88:57:da:45:2d:fb:9d:e7:ec:dc:fb:
2d:fb:80:47:89:30:f7:f3:53:64:31:12:38:2a:64:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:31:35:44:21:5E:98:8D:8D:A0:F1:1C:E9:4B:7C:09:DE:D8:47:45
X509v3 Authority Key Identifier:
keyid:72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:33:6d:33:48:c3:0d:1f:a7:ef:9e:f8:eb:c6:a7:39:46:70:
0e:4a:b0:28:2d:84:76:63:85:8f:e7:61:bc:9b:94:ed:0f:12:
aa:a3:61:34:e1:42:0f:94:25:bb:f1:9f:f4:ff:4d:e4:15:24:
77:2a:bc:e3:bd:8f:68:3b:9c:d4:49:8d:29:e7:4f:e2:5a:3c:
cf:f4:5b:0f:fa:69:f9:ce:d7:cb:73:ce:89:a0:a7:20:02:e0:
54:23:70:69:6d:36:bc:e8:22:d0:f5:19:a2:dc:cf:d1:63:fd:
67:ea:ed:69:fb:bf:e7:74:e9:e0:0f:bd:03:a7:e9:dc:89:0f:
c3:0e:3e:28:bf:5b:d7:58:6a:e5:82:86:0a:50:bf:1d:28:ea:
66:9e:c2:5a:19:4b:ca:24:9b:16:44:5a:aa:a8:00:7d:2b:9c:
13:bb:24:29:f7:7e:79:f3:df:f9:11:67:17:a9:43:95:79:d0:
2a:46:bf:c4:4a:35:26:44:6c:c3:ee:b1:02:c5:18:a0:19:fa:
e5:40:f5:c6:f1:9e:12:80:22:f7:86:51:07:9d:dc:88:c2:65:
68:c5:10:15:93:ab:70:b0:8c:4c:13:77:c7:6a:d0:b5:3a:80:
c3:d9:23:1c:84:1d:0e:4c:ae:c8:3b:1f:42:63:d6:86:38:de:
81:26:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:36:00 2026 by rpki-client