
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft
File: OhNw-SlQCbrO8HHvmlT91w_RV1o.mft (raw, json)
Hash identifier: 8TEwKeLvG1lzK2IrB3zkXaJG1jAIg36zg1OYVd5409o=
Subject key identifier: 92:16:28:BD:F2:25:45:CD:58:A1:27:30:7D:58:17:D6:28:2D:80:59
Authority key identifier: 3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A
Certificate issuer: /CN=A916B889/serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft
Manifest number: 6C
Signing time: Tue 13 Oct 2026 08:44:51 +0000
Manifest this update: Tue 13 Oct 2026 08:44:51 +0000
Manifest next update: Tue 20 Oct 2026 08:44:51 +0000
Files and hashes: 1: OhNw-SlQCbrO8HHvmlT91w_RV1o.crl (hash: mlh6gPL/+5KTSQV1eDKOvoozy+0KTu+pBazS9pfd1SI=)
2: DD9D275A272A11F1AB1203E5AA833773.roa (hash: anG8mjPCe+gcYm3kp5C5iVeJAFEjW4WqpjQcSNgoVCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl
rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 08:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B889, serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A
Validity
Not Before: Oct 13 08:44:51 2026 GMT
Not After : Oct 20 08:44:51 2026 GMT
Subject: CN=6acdef83-ce2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:91:af:9d:09:f8:43:fc:e6:51:80:26:f6:
5c:fb:d0:fa:6d:66:9f:9c:a7:45:97:2f:10:47:83:
17:c3:63:ce:6d:e7:5c:43:9e:19:91:57:f3:c1:fc:
f2:c7:14:da:a1:4a:78:d2:91:95:aa:61:36:75:1e:
c1:4e:df:43:65:8e:79:35:bd:3e:89:03:e0:71:c8:
80:38:a3:b7:b4:ee:e4:16:89:5e:b1:71:fa:5f:6a:
73:42:d5:23:99:5c:96:d7:43:a3:8b:13:28:e9:70:
f4:43:27:ce:85:4d:b1:51:ca:fb:fb:bb:14:f9:f6:
c3:26:d3:f3:ce:6a:73:09:a1:25:91:d6:dc:48:57:
44:10:3f:52:ba:1c:cc:69:d3:fa:62:3b:b3:3e:04:
e9:8b:1e:b8:b4:bb:3e:e7:70:6f:ec:55:82:52:ff:
34:8d:bc:22:03:3d:a5:ef:c8:44:99:86:06:1e:47:
5e:42:fb:e5:cb:ad:13:f1:d9:e6:d5:ac:c4:dc:78:
f5:de:51:a3:ce:72:0d:41:b6:f4:4b:d7:05:77:0a:
69:e1:76:5b:15:bd:ee:e0:50:36:fe:22:d4:b1:4d:
9b:6c:15:63:1c:21:7f:bd:ba:ba:e1:79:da:ca:4f:
2a:51:31:61:41:7e:d0:20:e6:c1:dd:65:ae:59:b9:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:16:28:BD:F2:25:45:CD:58:A1:27:30:7D:58:17:D6:28:2D:80:59
X509v3 Authority Key Identifier:
keyid:3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9c:a6:b0:be:a1:4e:6c:b2:84:60:5e:da:e2:98:6d:89:c4:
35:bb:3d:fe:f9:9c:e8:dd:82:fe:de:4d:55:8a:56:80:a9:e3:
1a:1e:55:40:ab:4e:2e:3e:c3:3f:0f:41:45:44:63:6d:83:bd:
04:21:8a:a1:9d:90:51:63:cc:4c:7e:02:74:49:ca:67:f3:65:
97:e6:cb:5d:1e:36:63:a4:b2:4e:6e:57:49:bc:e5:de:a0:e0:
33:c2:0b:8d:8b:e8:b5:5e:ec:b2:34:13:6f:12:ed:db:9f:38:
b7:bb:ba:27:dd:6e:2f:07:ac:82:c8:50:98:9e:0d:e2:10:8a:
6d:2f:ce:03:12:e9:02:34:63:b8:d1:c5:23:12:04:cd:da:e3:
7d:a9:f8:6b:7b:28:ac:5e:70:5d:00:e1:d9:93:15:7c:0d:95:
b8:99:6b:e8:20:97:c8:37:ab:f7:06:14:c9:ed:f3:29:0b:40:
9c:bf:e3:cf:0a:33:0b:76:3f:bb:60:ab:3a:ce:81:97:8a:d8:
5e:9c:dc:68:5b:fe:29:55:97:46:60:3a:26:db:a2:b9:ab:93:
fd:a8:8d:c4:08:cb:72:fe:7e:17:42:f3:c9:29:5c:24:98:66:
53:a4:cc:0c:76:cd:a9:1c:25:83:f2:e2:a9:b3:38:e3:1e:82:
75:0d:3e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:38:47 2026 by rpki-client