
$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
File: 8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json)
Hash identifier: eDxTi4tbxfseuNNIsqEi70F2yU28CBx2NgeWWjXRAqg=
Subject key identifier: F4:5E:1B:7F:6D:2D:AF:87:E8:C0:A7:92:BC:32:82:8B:13:D0:32:CF
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial: 0A53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
Manifest number: 0A43
Signing time: Sun 26 Jul 2026 20:14:19 +0000
Manifest this update: Sun 26 Jul 2026 20:14:19 +0000
Manifest next update: Sun 02 Aug 2026 20:14:19 +0000
Files and hashes: 1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: mmhmIJYCiNurVkGItMImaX27/AEWMpLAM+3vfAIZWcE=)
2: 1wS1pxRTq7kjaJZPXVCDliYItio.asa (hash: DCJ45HnE7ug8jgO7RFcFyRlnRr7IfnX9iOk12E4r8W8=)
3: DC158E965F1411F1B3CEADAF84EE528E.roa (hash: uMaazjc7ti/l1Z1a0OqAz7ZZ+wEFluxU9ZV5vCJwJl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2643 (0xa53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Validity
Not Before: Jul 26 20:14:19 2026 GMT
Not After : Aug 2 20:14:19 2026 GMT
Subject: CN=6a666a9b-f10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:2a:e4:f5:89:be:dd:e6:c9:71:b9:59:41:
bf:4c:a5:02:4f:b5:34:84:2e:8f:22:5c:e9:29:61:
c7:36:0a:2a:01:f6:19:3f:6f:1f:83:09:e5:87:01:
76:9d:52:76:30:49:83:e1:82:92:ec:5d:09:40:46:
17:d7:6e:ea:e3:f5:58:2c:92:3a:5c:ea:5f:5c:af:
40:bb:34:7a:d6:c7:35:2f:8e:2e:d9:c5:0b:ae:71:
a8:b6:25:16:e0:83:7c:66:8c:53:fc:62:da:37:63:
87:91:1e:bb:bd:5a:06:e1:5b:a3:87:a7:2a:ee:d2:
cf:1f:90:a4:81:29:6d:3f:9a:2b:43:9b:18:f7:50:
37:6e:34:23:50:56:49:7b:54:91:92:87:40:50:e8:
c3:bb:8a:ee:8a:12:fe:f6:f9:9f:63:88:7b:75:b2:
e6:b3:8f:d2:09:58:0b:08:7a:87:38:cb:91:1f:71:
90:af:98:df:4f:aa:ed:7a:0c:a2:50:40:0a:d3:62:
af:b4:95:28:c6:93:6a:8f:a3:0d:b5:93:2c:81:ef:
f4:02:ca:68:3c:bf:04:f5:5b:52:bb:9c:bc:a2:f3:
e5:a0:e9:69:4b:c5:1f:f0:86:e0:a2:63:d6:52:0b:
a3:89:cf:9c:b5:14:08:d5:86:40:a0:86:8d:c3:7c:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5E:1B:7F:6D:2D:AF:87:E8:C0:A7:92:BC:32:82:8B:13:D0:32:CF
X509v3 Authority Key Identifier:
keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:86:f0:8a:6c:e8:77:7c:1c:8a:d8:a0:49:5e:08:00:42:71:
65:2a:0a:26:b4:f7:ac:b7:18:53:4d:23:dd:f9:99:23:3a:aa:
63:46:ba:f8:27:13:1c:cf:21:6d:2a:27:d5:c5:48:e3:c8:f4:
fb:99:b4:dd:0e:ce:13:b7:44:35:a4:e7:50:bc:d9:20:95:04:
02:e9:6d:7f:c4:ee:5a:ad:21:b1:81:d3:77:b7:81:dd:68:04:
18:77:4b:79:f9:1a:5c:f1:18:7e:54:1e:df:e8:1f:a9:83:f4:
cb:7e:29:ef:d1:b9:da:9e:41:fa:98:7f:c9:67:51:89:09:bc:
a6:c5:e9:19:65:81:77:21:e8:5f:9f:4a:ad:50:54:75:c5:e0:
9c:9a:d6:ae:ca:be:fa:d3:3b:d6:c3:fe:18:57:76:5d:87:91:
7a:69:16:e9:cc:77:86:9d:b2:8d:dd:07:7d:86:42:79:27:df:
4a:f4:be:33:cf:2b:76:10:8d:50:d2:5c:82:f2:93:1f:5f:32:
36:3d:c0:03:f7:bb:af:32:ab:97:c6:e8:29:92:b7:c1:2d:1f:
d1:9d:56:e4:cb:4c:3c:e9:c3:88:97:d2:cb:83:1b:3e:07:ac:
c8:c6:2e:d5:6e:98:3d:b4:1a:4f:a1:ff:31:03:31:12:23:56:
44:4d:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:48:33 2026 by rpki-client