
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
File: ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json)
Hash identifier: LH9e7fm01lI+NUmbyT/RPgGMVtyuKZWgqJWCVOI4gcA=
Subject key identifier: 70:D0:16:B8:AF:B4:8A:77:93:63:85:77:84:47:8C:94:19:FE:90:7B
Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Certificate serial: 02F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
Manifest number: 02EA
Signing time: Mon 05 Oct 2026 01:17:35 +0000
Manifest this update: Mon 05 Oct 2026 01:17:35 +0000
Manifest next update: Mon 12 Oct 2026 01:17:35 +0000
Files and hashes: 1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: 1xIRBDfQdNgnOnjuIF3/OQL+8132lm5Gj5x4n9jGfDw=)
2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: H1Ezj2Ot5D8SjDdPf9eFovOIWLX9v54dC115vUpD6O8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756 (0x2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36
Validity
Not Before: Oct 5 01:17:35 2026 GMT
Not After : Oct 12 01:17:35 2026 GMT
Subject: CN=6ac2faaf-42e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:e9:10:86:dd:c7:77:67:58:05:d8:a5:c6:
ff:d6:bd:4e:30:7c:45:52:ea:3c:9f:50:bb:43:90:
ed:b2:24:a8:c0:52:12:ac:b2:5c:b0:56:ed:e0:43:
4d:cf:b1:bb:0e:ea:a2:9e:be:96:88:78:ac:2a:fe:
77:b0:bc:c2:5e:87:0d:85:bf:fb:86:e1:67:59:1a:
58:4e:1e:53:e4:90:ab:46:c5:80:78:5a:ae:b4:af:
37:c6:99:33:8c:16:b9:b6:41:70:73:f6:61:e9:6f:
52:24:bd:aa:d4:83:7f:53:12:00:59:63:ed:ee:84:
f4:e4:d5:7b:ef:39:51:ab:11:72:9a:b7:16:d5:cc:
a9:df:a4:61:85:44:ed:1b:c2:33:c6:4e:8a:f4:71:
60:36:d4:a9:e6:6f:49:71:96:64:18:0d:3f:84:66:
76:27:8a:d2:b2:62:63:29:ff:35:63:6e:04:a8:c6:
e2:cf:41:28:d6:fb:28:00:82:60:16:22:73:f9:de:
9e:9c:a5:01:90:83:a1:c8:5b:2f:07:d3:01:9c:cc:
86:29:a6:fb:5b:6c:99:67:41:e7:47:06:95:b8:c0:
35:4b:dc:e6:80:10:b4:61:87:b9:90:96:d2:c6:ce:
86:0e:29:d5:de:76:97:d5:01:59:07:ba:83:bf:27:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D0:16:B8:AF:B4:8A:77:93:63:85:77:84:47:8C:94:19:FE:90:7B
X509v3 Authority Key Identifier:
keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f7:74:12:f9:2b:5a:46:72:4b:61:0d:fe:9e:fe:7c:ed:ce:
23:3f:b4:89:a8:cd:a0:72:e3:61:7a:19:68:5d:59:0b:68:0a:
07:f7:e8:9e:76:b2:e7:1e:6b:ad:8b:60:1e:14:ba:b6:be:33:
9a:35:fc:57:f4:3c:4e:19:d1:7f:74:d6:3c:56:6f:28:ba:9b:
7d:13:81:0c:93:79:bf:e5:52:43:de:80:7e:d2:bc:c4:71:ef:
91:4d:fb:38:46:29:6e:ee:0e:18:7e:70:e9:df:e4:74:4d:e6:
c0:3e:89:b6:3b:65:ed:e7:b4:4c:6d:3b:fe:ef:2d:58:34:a8:
a3:c8:b0:0a:fd:81:ae:49:08:80:a3:d5:d4:c0:77:64:f7:98:
64:01:83:83:d1:e9:0b:a2:ad:9e:ed:79:b6:09:27:7a:ed:fe:
7d:04:a0:bb:25:2e:15:9d:00:86:6e:0b:fc:98:bf:32:d9:21:
80:f2:aa:b5:5c:86:11:f0:97:60:81:79:c8:db:18:36:aa:1f:
a6:5e:a6:97:00:17:8f:d6:1d:2e:23:9a:70:bc:3b:f9:42:e7:
91:f5:1f:74:26:ce:22:54:11:a8:75:21:bd:53:99:07:c7:17:
ac:70:70:f1:a6:8f:14:16:51:51:af:2c:e7:63:a9:01:7b:94:
06:42:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 02:55:09 2026 by rpki-client