
$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
File: 8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json)
Hash identifier: HztI6F9PpzEQKwO0TjouBRU9yx6kcoYVZJgW4YzjjoE=
Subject key identifier: 00:CC:19:E4:85:17:2B:34:5D:C6:53:8F:7F:7F:A2:5A:B5:AA:D2:83
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial: 0A11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
Manifest number: 0A05
Signing time: Thu 16 Apr 2026 19:45:10 +0000
Manifest this update: Thu 16 Apr 2026 19:45:10 +0000
Manifest next update: Thu 23 Apr 2026 19:45:10 +0000
Files and hashes: 1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: 9aqZwbn87kVDzGwIGyALBjYpVDmZ51RMYNAdk+RK2tQ=)
2: 81FC4E285E4211F086D4C383C4F9AE02.roa (hash: 09ch9+vd4QfEZEJO6GInYZKohO1LNoyU522s7mqfo0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2577 (0xa11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Validity
Not Before: Apr 16 19:45:10 2026 GMT
Not After : Apr 23 19:45:10 2026 GMT
Subject: CN=69e13c46-d118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:d9:39:7a:96:a6:a8:0f:eb:23:7a:1f:31:
6d:72:bc:dc:dc:16:65:37:96:a1:35:69:25:7e:88:
1f:34:c4:e5:59:85:39:b1:c5:f1:10:7f:08:70:b1:
c4:f1:a7:20:7d:7f:8e:c5:a3:31:fb:c2:c5:ea:ca:
ce:0c:a0:1c:56:5d:c3:07:9d:4a:a5:9d:a4:92:0c:
2e:3d:31:97:db:97:c0:4e:d9:bd:99:3b:46:54:3f:
0b:ab:d0:82:c6:6f:07:ce:cc:35:0c:ed:e2:bc:95:
35:c2:e8:39:72:a0:a1:1c:3a:95:86:ac:b2:fb:23:
de:46:7f:b7:b3:6f:83:ed:54:ae:ac:b2:a7:06:a4:
28:f7:20:a3:8e:12:d9:e2:44:7b:ab:b5:38:e7:7b:
55:94:0d:65:fc:44:e9:c8:13:4b:3c:b1:7c:ae:ac:
32:f5:7b:2d:76:d1:ed:1b:ec:50:0d:b6:85:15:e4:
2e:f1:bf:95:5a:49:0c:c3:8a:7d:d1:51:6d:fd:9c:
eb:89:a2:cc:1d:21:46:15:b6:fb:16:d1:f4:5a:33:
c4:ce:dc:ce:c6:3b:7a:14:c6:d4:4a:2d:6d:37:fd:
29:47:6d:ba:31:31:e2:97:24:9d:34:b0:45:a7:cd:
3a:93:9a:38:ee:bb:83:10:fd:c1:02:93:28:14:44:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CC:19:E4:85:17:2B:34:5D:C6:53:8F:7F:7F:A2:5A:B5:AA:D2:83
X509v3 Authority Key Identifier:
keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bc:c7:af:46:35:1f:7e:e1:4c:e1:ca:0b:58:69:ae:bf:2e:
6c:bd:0c:ae:11:c8:d9:f1:73:82:2f:87:99:32:19:da:84:b1:
0c:5c:13:7a:9d:7b:11:d2:d5:15:58:21:47:23:c0:9f:b1:d2:
87:b5:3a:7b:33:3a:a6:a5:71:55:dc:76:f3:fc:b4:b5:58:b7:
ca:09:24:20:4c:08:77:c2:5c:a6:6b:a8:ed:a2:72:70:76:f5:
44:67:14:9b:7b:bf:de:e8:d6:a5:73:e5:8c:31:d9:a2:26:0e:
e3:82:1b:e2:15:3c:fb:92:bd:c4:17:1e:74:3e:28:af:dd:94:
3b:a8:9f:f3:81:8d:99:49:27:d7:18:6e:0f:b0:6c:74:7a:b1:
12:e6:a4:b6:56:03:2a:17:4a:7c:13:e6:d6:75:7e:9b:a4:7b:
13:eb:47:6d:88:39:2f:97:a3:04:63:9e:08:b0:05:8f:36:5a:
dc:dd:3c:27:0a:52:a5:e3:28:db:85:e2:69:01:46:89:94:bc:
bd:0c:a5:0c:07:2e:23:32:5a:f3:65:22:e7:e1:b1:4f:af:39:
79:d5:8f:fc:76:75:8e:09:b6:e9:dd:1a:72:55:19:f2:8d:65:
f3:37:c0:6f:db:70:7a:39:b7:89:c5:4e:cb:a1:c4:90:b2:47:
cf:38:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:17 2026 by rpki-client