
$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json)
Hash identifier: n5/LDWMmC5Q6W6PYa1w8mJaRHn/4mdA2Fp20IYBS6qs=
Subject key identifier: A7:F1:F3:FA:EF:6B:20:1F:93:FB:EE:0C:C3:ED:95:8A:BB:FF:88:12
Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE
Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE
Certificate serial: 0888
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
Manifest number: 087D
Signing time: Thu 16 Apr 2026 20:32:25 +0000
Manifest this update: Thu 16 Apr 2026 20:32:25 +0000
Manifest next update: Thu 23 Apr 2026 20:32:25 +0000
Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: NH6ofZuqCU7c/PaO7qCUNaysRKY02tqVInjKwNGJdZw=)
2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: YlLKPrLBFRAZGSSI/PrP1aG6kr00THkq/rtie7tyqFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl
rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2184 (0x888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE
Validity
Not Before: Apr 16 20:32:25 2026 GMT
Not After : Apr 23 20:32:25 2026 GMT
Subject: CN=69e14759-e2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:43:12:b1:86:19:03:fa:e6:0e:a1:8e:89:
95:9d:1d:07:e9:4a:d6:e8:f8:d3:d2:c4:71:dd:a1:
fd:43:d0:53:48:5b:d3:d7:f0:87:1e:84:ae:e6:81:
41:ed:70:59:55:72:d8:2d:af:45:28:75:bf:8e:03:
08:5a:3d:32:25:d1:46:6c:26:eb:c0:31:ca:6c:91:
4f:0b:b6:89:db:e9:f9:2c:74:36:b5:c1:20:ce:c3:
85:a9:59:e3:94:98:d1:5f:fc:30:3b:2b:33:fd:36:
d1:fd:a4:be:96:ee:f4:cc:ea:92:46:fe:58:6a:6f:
46:15:ac:91:81:e0:5b:dc:c7:4c:fb:5c:0c:ac:1c:
7b:48:18:d3:56:26:47:69:87:1a:a4:9e:dd:4a:2b:
48:6a:f5:1d:47:09:90:ea:8e:69:06:68:68:e2:5d:
96:8e:c6:69:b2:fc:33:87:63:4a:f9:d3:43:b0:1e:
66:b4:20:4a:3c:fc:d9:dc:dc:7d:7f:f9:f7:1e:79:
ca:cd:a6:d9:10:30:5f:3f:85:1d:b3:3f:1b:74:dc:
5a:70:7e:da:3e:da:49:39:75:7f:73:59:17:d1:5c:
ec:12:a6:84:2b:9e:e3:6e:75:07:91:f1:51:51:6f:
c2:14:ce:49:61:70:df:44:53:7c:92:55:73:cc:25:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F1:F3:FA:EF:6B:20:1F:93:FB:EE:0C:C3:ED:95:8A:BB:FF:88:12
X509v3 Authority Key Identifier:
keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5d:48:5f:53:21:a1:6a:e7:9e:92:44:4d:62:da:48:7e:79:
fd:72:0c:64:8b:3c:d2:23:54:d9:a2:86:db:65:1f:58:b3:71:
f6:24:1e:45:a6:c0:e1:37:ce:e0:e0:dd:eb:41:2a:73:7f:23:
82:56:5b:ef:1d:bf:c5:dd:51:e8:99:5f:69:4d:62:3d:5b:c1:
cf:ef:6e:0e:67:96:6c:9d:78:0d:ed:d2:80:79:7a:60:f0:ac:
af:13:e0:32:1a:7c:30:0c:6f:94:86:54:12:d6:b0:4f:79:2e:
24:a2:a6:25:57:77:c7:6f:b0:2e:a6:68:80:f0:82:8a:f5:7e:
0d:cd:35:99:14:cc:b2:58:70:eb:e9:2f:0e:ee:c6:39:6e:c2:
0a:a1:b8:24:e3:80:3d:4d:f2:f9:aa:0c:26:7e:72:69:f3:64:
0d:2f:ac:fc:fe:3e:fd:ad:eb:4f:53:d3:af:95:aa:c0:c9:6b:
bd:6c:1a:ff:22:9e:29:d7:02:ae:20:23:17:25:0f:22:f3:c2:
0e:a7:fb:20:d3:30:54:78:64:f0:66:11:2b:2f:2c:56:a9:29:
c8:56:be:9a:ae:f2:ee:14:05:9c:91:7e:44:7a:af:fd:63:43:
47:c9:0f:66:f0:17:57:fe:cf:11:1f:77:27:a5:81:cf:0f:a4:
a9:06:89:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4
OTk2RjUzRkUwHhcNMjYwNDE2MjAzMjI1WhcNMjYwNDIzMjAzMjI1WjAYMRYwFAYD
VQQDEw02OWUxNDc1OS1lMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA26lDErGGGQP65g6hjomVnR0H6UrW6PjT0sRx3aH9Q9BTSFvT1/CHHoSu5oFB
7XBZVXLYLa9FKHW/jgMIWj0yJdFGbCbrwDHKbJFPC7aJ2+n5LHQ2tcEgzsOFqVnj
lJjRX/wwOysz/TbR/aS+lu70zOqSRv5Yam9GFayRgeBb3MdM+1wMrBx7SBjTViZH
aYcapJ7dSitIavUdRwmQ6o5pBmho4l2WjsZpsvwzh2NK+dNDsB5mtCBKPPzZ3Nx9
f/n3HnnKzabZEDBfP4Udsz8bdNxacH7aPtpJOXV/c1kX0VzsEqaEK57jbnUHkfFR
UW/CFM5JYXDfRFN8klVzzCXTkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKfx8/rv
ayAfk/vuDMPtlYq7/4gSMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx
OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw
ekFMZlBOcGZPREtKbHZVXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXF1IX1MhoWrnnpJETWLaSH55/XIMZIs80iNU2aKG22UfWLNx9iQeRabA4TfO
4ODd60Eqc38jglZb7x2/xd1R6JlfaU1iPVvBz+9uDmeWbJ14De3SgHl6YPCsrxPg
Mhp8MAxvlIZUEtawT3kuJKKmJVd3x2+wLqZogPCCivV+Dc01mRTMslhw6+kvDu7G
OW7CCqG4JOOAPU3y+aoMJn5yafNkDS+s/P4+/a3rT1PTr5WqwMlrvWwa/yKeKdcC
riAjFyUPIvPCDqf7INMwVHhk8GYRKy8sVqkpyFa+mq7y7hQFnJF+RHqv/WNDR8kP
ZvAXV/7PER93J6WBzw+kqQaJ+A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:01:33 2026 by rpki-client