
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
File: oXyIfuladLPXOMFccI_s_Wu4xmo.mft (raw, json)
Hash identifier: aHpuasdKM0sk4aojmEqNiOpMf2shsgEjqQxrLsblIxU=
Subject key identifier: 1E:B7:C1:FF:CB:E1:90:7A:4A:26:7A:69:CC:37:A3:0F:09:13:E7:12
Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
Certificate issuer: /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
Certificate serial: 12D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
Manifest number: 12B9
Signing time: Sun 20 Sep 2026 17:01:33 +0000
Manifest this update: Sun 20 Sep 2026 17:01:33 +0000
Manifest next update: Sun 27 Sep 2026 17:01:33 +0000
Files and hashes: 1: oXyIfuladLPXOMFccI_s_Wu4xmo.crl (hash: qesWlDh2ENZ1TQAp9ce5vABmjUcWCHlu/lRsIhH8GB4=)
2: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (hash: UmgWUU8NA1nNiK28pvWu8eBpGFgthPvzpWq/tN/hgM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl
rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4824 (0x12d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
Validity
Not Before: Sep 20 17:01:33 2026 GMT
Not After : Sep 27 17:01:33 2026 GMT
Subject: CN=6ab0116d-77ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:0a:e2:46:e4:67:e4:f6:77:48:d0:94:6d:
34:3d:94:89:69:d5:42:82:ff:b7:27:03:3a:26:c0:
8a:6d:f9:02:2a:b7:cd:dc:85:11:8d:3a:5b:f3:dd:
f4:34:12:bd:d8:85:62:8d:05:c7:e2:a1:42:70:06:
dd:70:aa:60:0c:f4:bb:93:62:c7:bc:1b:1d:c2:ba:
d0:2c:99:fb:90:74:9f:06:84:e6:12:b7:f5:be:cf:
2a:ee:15:a4:ce:c5:6f:40:3f:4c:aa:cf:4c:16:ca:
84:a8:89:63:c0:e2:0e:72:8e:06:05:a6:46:f0:6f:
38:27:d2:2e:ed:ce:3e:10:13:3c:15:7b:90:06:a8:
ee:8b:84:b9:e2:4b:02:ee:b4:e1:12:de:cc:45:57:
3c:11:ee:a0:93:e0:75:c0:3e:7c:5b:5c:58:1f:20:
08:ec:5b:b3:83:3a:41:1b:a0:f7:42:f4:2d:96:eb:
da:ef:b2:5b:d8:ae:a2:9e:41:a9:68:c6:7a:86:b1:
a7:37:43:f0:db:bb:2e:f6:bd:a8:f5:8b:ff:11:be:
f7:e6:af:3d:76:10:2b:61:2a:b5:99:27:93:c9:94:
32:5d:8e:26:6f:1c:70:fe:5d:3c:84:a4:92:76:28:
b4:3d:e9:71:69:76:fb:87:7f:3c:13:80:ee:0b:c7:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B7:C1:FF:CB:E1:90:7A:4A:26:7A:69:CC:37:A3:0F:09:13:E7:12
X509v3 Authority Key Identifier:
keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:f9:1a:47:4d:f1:4a:2d:78:64:72:fe:1d:0d:f1:6d:e4:c5:
0e:10:38:75:71:56:4d:83:93:82:e1:c6:9e:90:a2:36:59:58:
a9:0d:d8:84:f9:77:a1:e6:e6:d4:f1:8e:e0:0f:f4:35:1e:35:
fc:b0:b1:bc:1f:2e:0d:e1:19:89:3d:6a:21:ec:28:3e:19:7b:
0e:ac:c2:6c:22:2f:89:11:30:22:44:2d:c8:bb:30:f5:ad:f9:
39:25:69:73:f1:18:05:35:0b:6c:8b:35:ce:ff:02:5e:b1:e6:
03:bf:eb:cb:71:4a:5e:ae:e0:00:4f:b7:32:71:7f:38:9e:9c:
70:e3:fe:20:60:dc:6e:4b:ff:3d:a5:6a:c2:e0:6e:3a:e7:9a:
c0:1f:aa:31:63:35:0a:b1:31:07:ae:a0:17:d9:8f:aa:b2:6f:
fa:e3:39:77:89:c3:c2:dd:d7:8e:75:b5:d9:14:85:68:d9:5c:
3b:bf:9e:a6:8e:e8:7c:38:2a:f7:ae:4c:00:54:20:63:94:cd:
60:ce:2d:58:ce:d6:f3:dc:31:3a:9f:4a:b4:4a:83:66:94:b8:
9a:16:d2:7b:e9:a1:91:e8:37:37:6a:f0:13:04:be:9c:bf:3e:
98:e1:eb:de:fb:48:bf:2c:81:3f:2f:7a:c6:50:9f:f8:4e:1b:
e6:98:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:57:57 2026 by rpki-client