
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft
File: b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft (raw, json)
Hash identifier: cuwb5f1rHPRfH9WiSRM/Y4/wFOCwbgrIk5jW0Ozensw=
Subject key identifier: 58:FC:6C:5E:AF:F4:AE:16:5F:69:9C:F3:10:03:3D:5D:A6:8F:EF:DE
Authority key identifier: 6F:E3:B1:09:F6:35:B0:EF:83:76:AE:76:B9:6A:D3:73:D0:D7:6C:1A
Certificate issuer: /CN=A91B3454/serialNumber=6FE3B109F635B0EF8376AE76B96AD373D0D76C1A
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-OxCfY1sO-Ddq52uWrTc9DXbBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft
Manifest number: 07
Signing time: Wed 23 Sep 2026 08:58:44 +0000
Manifest this update: Wed 23 Sep 2026 08:58:44 +0000
Manifest next update: Wed 30 Sep 2026 08:58:44 +0000
Files and hashes: 1: b-OxCfY1sO-Ddq52uWrTc9DXbBo.crl (hash: SYfdFPELUbYq6KJWAtOGV9Ik22jOsbIS0PZHrQA5Q1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.crl
rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-OxCfY1sO-Ddq52uWrTc9DXbBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3454, serialNumber=6FE3B109F635B0EF8376AE76B96AD373D0D76C1A
Validity
Not Before: Sep 23 08:58:44 2026 GMT
Not After : Sep 30 08:58:44 2026 GMT
Subject: CN=6ab394c4-6dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:46:62:0f:02:7c:2a:d5:7f:36:51:3b:f1:
e2:06:c5:0d:af:ae:c2:ed:a8:fa:f9:75:ae:7c:5a:
6f:ae:9c:a2:d0:8a:bc:e7:c0:78:b1:26:67:3d:df:
55:48:50:b6:5d:60:b2:09:0b:92:b6:05:3a:6c:2a:
4f:46:bb:87:71:ab:b9:9b:88:77:e3:38:21:9f:c2:
81:6c:8f:db:3c:ef:da:e4:60:71:fe:36:94:2e:c1:
ff:ad:c4:22:ec:98:0b:15:10:ac:a5:21:e1:a2:c2:
45:9e:2f:64:08:8a:7c:b1:48:a0:f9:bb:aa:8a:98:
64:1b:0c:35:5e:10:4e:50:46:8d:27:c8:5d:35:12:
59:f0:fe:6d:6f:20:4c:f8:3d:89:49:15:6a:59:82:
83:70:63:10:66:f1:c9:58:7d:1c:22:03:06:cf:19:
43:aa:ce:dd:58:96:d5:c7:af:fe:c4:bb:6e:65:c6:
1f:1d:10:4d:a9:37:b5:e6:0a:29:3b:be:d7:20:f6:
f8:18:9f:04:48:94:68:64:2b:65:66:27:84:ff:55:
4b:98:e4:a6:09:4c:86:4f:aa:f1:07:4e:5a:b1:24:
29:74:64:ee:73:ac:44:4c:4b:91:54:b4:2b:9c:73:
87:c8:36:cd:b0:e1:70:91:0f:93:39:3d:ac:49:cc:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FC:6C:5E:AF:F4:AE:16:5F:69:9C:F3:10:03:3D:5D:A6:8F:EF:DE
X509v3 Authority Key Identifier:
keyid:6F:E3:B1:09:F6:35:B0:EF:83:76:AE:76:B9:6A:D3:73:D0:D7:6C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-OxCfY1sO-Ddq52uWrTc9DXbBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:39:2f:b1:d2:11:7f:00:88:df:f2:a5:9f:33:f1:9d:73:99:
0e:a6:5d:1b:3d:18:a6:20:90:69:03:bd:9c:5c:1f:e8:c7:62:
46:b6:d8:79:67:a9:19:15:e1:34:ba:1b:ba:ee:80:24:21:b4:
21:89:1b:8e:66:c3:21:a9:a9:19:27:a9:ac:4a:51:a1:fe:a8:
d6:c9:dd:63:89:a3:2b:ab:1b:d3:63:5b:41:a4:4c:ad:0d:da:
ec:71:23:72:8d:bf:15:a0:93:48:e2:f3:e8:91:f1:1f:27:74:
38:a8:28:89:0b:a3:a1:3c:c4:0d:de:6b:33:c1:bc:b9:b3:f3:
0a:6f:1d:e8:6e:fb:10:47:8f:76:7b:df:34:2e:b4:b8:0a:27:
49:ff:e2:73:8b:38:0e:3d:2d:55:5a:b7:87:5c:e5:9f:f3:5a:
d3:7f:21:4b:fe:de:31:10:6d:32:d7:b2:28:41:42:b2:97:ac:
30:94:e3:64:55:02:c5:9f:23:2e:dc:f9:c2:1b:27:69:3c:52:
8a:f7:f9:e8:c7:70:94:44:e3:f7:24:d3:7a:ba:5e:98:3b:13:
64:a4:0e:84:66:c3:b9:1c:dd:9a:ee:75:67:b0:12:0a:1d:0a:
57:6c:3b:bb:ae:7b:98:d7:4d:94:4d:ea:97:64:64:51:6b:83:
a7:2f:af:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:09 2026 by rpki-client