
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier: XDJ4ZF2SFPnBGNdfZ7sgB9CKNR/LFyw7+N7LtWG+2Y4=
Subject key identifier: 15:61:D9:D4:58:BF:58:FB:DC:2D:8C:64:2D:E9:3F:39:FE:DE:13:05
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 0315
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number: 0283
Signing time: Mon 21 Sep 2026 02:26:01 +0000
Manifest this update: Mon 21 Sep 2026 02:26:01 +0000
Manifest next update: Mon 28 Sep 2026 02:26:01 +0000
Files and hashes: 1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: cX8h/eoqLO1t4rY98kUa94DgLCGoYarHoczmduypf10=)
2: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: oTOrED2V9vZn9qb8N0LH0Sx58NuFVTBUIOpttu2MXWg=)
3: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: wV4TOeBb8Yf87AHJqxIiiwZT4YbWOsXLWCv25sOzq68=)
4: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: w7xvtRmpzUbr8JgK3UFIlzl77CVDLrjcc7Gh+fzdIN8=)
5: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: Nla2jOROMyL7ZvHl9XXDHQ8v7Tf0J7Qb5Yh4lPB6G08=)
6: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: SYFTPDFr7LN35U/gebZm+cm1jSEOdDw/ts0Jc9H4NkQ=)
7: 49FC44B0162A11F18FE9298B373D8C67.roa (hash: zOKxQxHBIClXa7SK7lv75vi8fEUHv381/lbkm79W98w=)
8: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: 6XAi7gM1Xpz2gjUW0XmMeYKCRI5I+iCkq9l2pCZ8bjA=)
9: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: dt5esh4YiRNAZirmy+skM3OnPaDSuZwtvyic2vepcxs=)
10: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: IqfXkMnj8uGfdCn+beW+9o36zBKAVet07b4tkBjSXV0=)
11: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: ZOW+e6hIHzkmr+e6qFgnn41jrQPPj4OwONpdz5HcpDw=)
12: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: u55hQRiwUoLbf82ToZOywDnWMRlS9BpxwCPoCivIco8=)
13: BA917E94D65F11F090E652930BB43E13.roa (hash: 1K/PdX1BRrVHh8XufguLAU4ALPmlwz8oCRHa0WcJP6U=)
14: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: jTaoK/9ZfbV3RhpV4K59uEmZ4z35REbUAdYTCvW5auQ=)
15: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: sg/PZjzTpz4UXrJ5M++piAcm3f5OkkNiXbIxTQjYcQY=)
16: FAC35354610611EFB6324A30C4F9AE02.roa (hash: FqAfFj1Tl22vJwoCZnFEARrScAUogzoTdgh+P1prj9o=)
17: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: tgWNFtii+Zc83iPIGPSMYRpyk9K7VuUWU7rCDmoIp90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Sep 21 02:26:01 2026 GMT
Not After : Sep 28 02:26:01 2026 GMT
Subject: CN=6ab095b9-9072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a2:4f:7f:a2:69:99:18:e2:6c:66:78:7c:a5:
4f:20:8a:f1:28:fb:46:5a:d4:0b:4d:2e:d4:e3:07:
26:4f:a8:cf:d1:37:5e:b8:dc:09:01:47:37:e7:ca:
25:4a:c3:09:64:e7:c4:d7:ba:5e:53:45:2b:02:a8:
f8:c1:d9:29:8d:9a:6e:c6:37:c1:8a:e4:91:97:8a:
59:2d:53:01:13:63:32:1e:3f:5f:30:5e:e0:71:45:
2b:61:67:8d:53:9d:21:7d:c9:2a:85:d4:56:4d:90:
87:26:7d:c6:d9:73:aa:89:57:0b:4b:6e:10:0b:77:
37:ec:57:e8:f5:cb:98:cd:33:d1:e1:d7:fb:9a:fd:
c2:53:98:06:55:af:c8:43:64:2f:97:79:20:6d:12:
eb:3b:fe:25:9f:36:40:aa:bb:0a:d4:ef:25:41:34:
ad:41:da:ae:6d:f2:b1:c9:c2:de:5c:b0:95:6b:06:
92:bc:0b:cb:47:58:5c:b9:3b:7c:14:04:49:50:ce:
d2:8a:9c:4d:82:89:8d:5a:c5:92:aa:c7:82:a2:26:
57:63:33:87:85:35:ee:b4:de:1d:5f:1c:45:24:18:
a5:bb:96:c1:c5:68:03:d0:c1:aa:f0:0c:e3:c1:3c:
17:12:fb:e4:9b:0a:db:21:ac:e3:0d:73:b6:b6:8f:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:61:D9:D4:58:BF:58:FB:DC:2D:8C:64:2D:E9:3F:39:FE:DE:13:05
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:95:23:2f:c9:f2:36:f7:6b:56:18:19:f5:7a:bd:17:87:3a:
c8:0a:d4:89:75:bf:b6:16:6a:8b:a1:99:11:6b:9b:79:a2:e6:
3b:3d:9a:62:55:31:fe:f9:c8:0e:c6:56:2a:1a:25:78:1f:2f:
0c:07:6a:f0:90:12:0a:15:8d:70:bc:42:a1:ca:59:71:81:b3:
b4:82:b3:91:bb:84:28:22:b7:06:67:37:e7:4a:f8:9e:38:a6:
38:eb:26:28:a6:1c:e5:84:78:96:3e:c0:01:e6:88:7c:3c:37:
80:f2:9a:db:17:3b:cb:30:58:5d:48:96:80:6d:28:b3:db:47:
c4:ff:ea:ed:0c:d5:1f:25:dd:b4:67:13:7e:3e:06:23:6d:fa:
01:74:55:55:56:0c:a9:c8:8c:99:63:dc:d7:5a:a2:7a:37:79:
33:fe:96:44:7a:ab:a2:39:02:3c:32:db:51:1a:8f:e4:64:33:
38:86:3d:2d:76:13:4d:a4:ff:2b:79:84:82:f5:7b:8f:4b:10:
1f:bc:3c:3d:af:12:88:45:77:51:34:a7:da:a0:76:a9:3e:b5:
d1:3b:6a:1e:16:e5:03:4a:13:e3:d4:27:fa:08:3b:64:71:c0:
9f:48:38:da:70:9f:d7:4e:15:d9:4f:8a:6d:7e:f1:e2:99:93:
c3:e7:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:40:48 2026 by rpki-client