
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
File: Od1jNTmfErgZIRzpGqfc9i9tgbw.mft (raw, json)
Hash identifier: zjiGHnsJG02VHhQ0OBYcQL0mtUrBnRdaVkFqi5ols4s=
Subject key identifier: 4C:ED:70:08:31:CC:27:D9:F1:87:C7:25:73:B3:42:F0:7B:99:0D:E3
Authority key identifier: 39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC
Certificate issuer: /CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
Certificate serial: 0444
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
Manifest number: 0436
Signing time: Mon 27 Jul 2026 01:20:52 +0000
Manifest this update: Mon 27 Jul 2026 01:20:52 +0000
Manifest next update: Mon 03 Aug 2026 01:20:52 +0000
Files and hashes: 1: Od1jNTmfErgZIRzpGqfc9i9tgbw.crl (hash: UpiBYk/1OUROqxbU4srTd/WjAx5uipFbA3agI3CyF3A=)
2: 9233AB983ED411F0B38CCD78C4F9AE02.roa (hash: KE0mpfoQ53HdFtxz9Q1JjWNxOehBt1yE8erg7Afm7o8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl
rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB2D, serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
Validity
Not Before: Jul 27 01:20:52 2026 GMT
Not After : Aug 3 01:20:52 2026 GMT
Subject: CN=6a66b274-c387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:04:1f:87:a2:8a:0b:17:03:ac:06:76:a7:ef:
08:f4:10:9e:b7:62:d2:c6:78:0b:c6:27:76:ec:8b:
52:06:d4:b8:14:4f:fc:a8:06:c2:a0:ef:8d:8a:1b:
de:e3:50:c8:09:b8:18:e7:17:a1:50:a5:5e:38:4b:
ee:43:8c:dc:29:dc:91:0e:38:2c:2f:4f:df:dd:40:
f2:04:c3:96:8a:b8:34:6b:e1:0d:f1:b0:5a:50:77:
c4:41:86:fc:b0:9d:f7:03:94:e8:24:ff:32:da:d3:
95:bb:b0:3f:d3:64:12:f8:2f:63:ea:29:5d:79:cf:
a4:1f:f8:4a:85:bb:27:f1:fd:91:85:02:c5:d1:64:
08:da:ac:63:1b:31:d4:fc:16:89:6c:19:c7:fb:8e:
9f:59:3a:81:dc:5b:42:03:dd:82:bc:4a:8d:e3:f5:
4e:04:72:6d:25:c4:a6:76:38:cc:05:53:ea:7c:dc:
20:6f:94:d6:1d:98:77:98:0e:f5:40:09:03:93:74:
2b:58:f2:78:92:7b:35:07:07:6d:35:95:c9:8a:17:
74:c1:88:c8:47:ea:2e:2d:e4:75:02:fb:03:a5:ed:
af:e5:55:de:bb:ca:c7:9d:80:1c:b1:f7:84:a0:b5:
6a:e1:97:54:d9:db:d7:49:4d:66:ae:67:9a:cd:12:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:70:08:31:CC:27:D9:F1:87:C7:25:73:B3:42:F0:7B:99:0D:E3
X509v3 Authority Key Identifier:
keyid:39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:32:c4:39:8d:89:4e:71:e6:ab:cf:20:8e:cd:5b:1a:8a:8d:
20:c8:76:d7:7a:6c:dd:83:85:37:f4:66:4e:72:b0:21:57:10:
79:66:09:16:19:b7:43:be:0c:54:c7:ea:b6:21:56:a3:82:75:
17:75:58:66:3a:dd:2d:f5:80:33:0f:98:c0:e3:59:7f:b4:72:
54:99:d2:a3:3b:7f:3c:aa:a1:fc:5d:ad:22:07:42:87:77:32:
38:a0:c4:71:7b:1e:14:9e:1c:85:eb:07:c3:89:c4:bd:9e:70:
b9:41:31:4e:7b:02:58:f4:1c:59:dc:00:68:79:19:51:da:fa:
51:66:a6:b2:80:97:94:d3:1e:04:d2:6e:de:52:05:a7:2e:f6:
59:98:3e:4e:2b:d8:7e:38:b7:79:84:d5:f8:7c:80:ed:e7:22:
7e:af:a7:c1:59:0f:cc:1c:10:34:e8:28:4c:f9:ea:0a:74:55:
83:f2:7e:85:6d:2e:27:af:46:aa:1f:f8:6f:23:01:71:3a:12:
43:ee:db:89:82:c6:14:34:9f:61:28:02:14:af:ec:9f:f6:e1:
86:a4:f2:6b:11:04:90:e5:d0:70:70:15:b4:f8:e2:a2:09:6f:
cf:af:9f:94:6f:ab:be:ef:dd:2c:09:8b:a3:65:b5:ee:32:f0:
df:71:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:41 2026 by rpki-client