
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.mft
File: ODccJCQrL_Lf4ARRSO5BshNUqls.mft (raw, json)
Hash identifier: ilXdG2m8vCadVjAC6ZR5jyNOcF1v5GOEKBKvpXaoBik=
Subject key identifier: 87:3D:A8:4E:50:85:D3:74:2D:F1:34:12:D4:B5:D8:42:37:EA:85:6B
Authority key identifier: 38:37:1C:24:24:2B:2F:F2:DF:E0:04:51:48:EE:41:B2:13:54:AA:5B
Certificate issuer: /CN=A91E38D3/serialNumber=38371C24242B2FF2DFE0045148EE41B21354AA5B
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ODccJCQrL_Lf4ARRSO5BshNUqls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.mft
Manifest number: 19
Signing time: Sun 27 Sep 2026 09:37:56 +0000
Manifest this update: Sun 27 Sep 2026 09:37:55 +0000
Manifest next update: Sun 04 Oct 2026 09:37:55 +0000
Files and hashes: 1: ODccJCQrL_Lf4ARRSO5BshNUqls.crl (hash: 1RJCf3sZIqNOGvIZfWV/dlwgK1rjCUWSAT5IeR/996w=)
2: 7735E9749B8E11F1B01CD25F4711F970.roa (hash: Dn/lygEx/cri14p8G6aMYCPWxOy9p7ueQx407UvV7KY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.crl
rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ODccJCQrL_Lf4ARRSO5BshNUqls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E38D3, serialNumber=38371C24242B2FF2DFE0045148EE41B21354AA5B
Validity
Not Before: Sep 27 09:37:55 2026 GMT
Not After : Oct 4 09:37:55 2026 GMT
Subject: CN=6ab8e3f4-8a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:d5:9c:fb:69:88:3e:fd:dc:ce:79:e9:b6:
ac:f4:95:b7:e6:e6:2f:be:15:e4:54:e2:5a:5b:d7:
9a:02:95:1f:ab:74:c6:f2:9b:bc:8c:6c:f2:ba:70:
81:25:df:fa:32:1d:cc:fc:7b:57:53:4f:f9:37:1e:
88:4c:48:cb:79:7e:08:7d:34:46:ea:41:1e:16:ad:
c4:f3:c4:ec:77:78:2e:0d:5d:a1:87:bf:9e:5b:03:
0e:76:cc:0d:7e:74:7d:0f:9e:0b:5d:0e:98:27:c6:
90:74:88:9b:43:50:2a:92:6d:62:81:ac:83:bd:d4:
a4:0b:ea:85:5e:7f:ee:cb:b1:02:28:06:b6:6b:cb:
0a:32:41:70:01:e5:bd:6f:f3:e5:3a:ff:7c:48:5e:
e9:e4:58:2d:7e:1d:19:52:67:47:51:9b:1c:ac:ec:
b8:1c:eb:ef:57:7b:8e:b3:a6:7a:83:59:b8:63:69:
f2:fd:44:c6:1f:5d:c5:c1:8e:fb:a3:c8:4e:86:5c:
38:ab:23:45:f4:c7:4b:ca:11:16:7d:f5:8f:0f:9c:
71:fc:a6:45:af:b4:71:ee:97:1e:1f:c7:23:1b:54:
3f:b1:5e:88:4b:2a:13:fd:a9:f0:31:3d:7c:48:89:
0f:e3:f0:34:f2:b4:5d:e7:06:50:84:20:cb:21:b8:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3D:A8:4E:50:85:D3:74:2D:F1:34:12:D4:B5:D8:42:37:EA:85:6B
X509v3 Authority Key Identifier:
keyid:38:37:1C:24:24:2B:2F:F2:DF:E0:04:51:48:EE:41:B2:13:54:AA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ODccJCQrL_Lf4ARRSO5BshNUqls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:3a:db:59:f0:61:38:1c:ff:8c:d2:7d:31:83:01:94:40:be:
36:34:dd:d3:23:8d:32:44:ae:77:aa:4c:3d:fa:04:39:90:1f:
21:4a:77:fd:8d:39:a9:db:45:10:b2:ed:99:25:95:f1:b4:36:
c0:e7:e0:af:bb:c2:3d:2d:93:42:0f:13:f3:bc:f5:98:5f:a0:
f3:e4:3e:29:3d:fa:39:42:39:96:3f:70:a3:ec:95:3e:58:17:
4c:b0:be:b1:18:dc:93:5c:75:e5:6a:03:4a:45:90:39:56:1a:
df:d8:45:d7:79:f4:17:37:ab:d4:d6:86:6a:1b:06:8e:d0:d1:
5d:2d:a4:a7:66:c6:4e:78:ff:82:f7:e5:5a:f2:b2:51:c7:9c:
26:73:aa:3a:f8:5b:e0:f9:a1:5a:61:ee:f6:df:cf:c0:13:85:
64:51:bc:16:65:6e:e8:6a:80:27:77:2c:40:27:ff:1a:6d:c8:
99:0d:fd:e7:6a:4c:d0:a0:db:5a:ed:1a:df:44:f8:99:b1:d0:
ec:aa:50:fc:42:12:76:1e:32:ce:a5:e7:44:23:bb:13:fb:8d:
56:18:bb:f0:48:ca:86:ef:1c:c4:b2:5b:fd:1d:25:c7:c5:2b:
99:4b:88:9f:76:5b:76:0e:0c:c0:78:e2:32:d3:77:12:cb:a8:
f4:4d:57:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:20:23 2026 by rpki-client