
$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json)
Hash identifier: ZnGwqDpUL/JeMDMHr42L2kuUUYliPtAyGj5ICH8OeXk=
Subject key identifier: 0E:C5:D1:20:E5:2B:2F:7A:38:23:0C:AE:6D:2F:9F:4C:26:84:7F:CA
Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
Manifest number: D5
Signing time: Mon 27 Jul 2026 08:49:19 +0000
Manifest this update: Mon 27 Jul 2026 08:49:18 +0000
Manifest next update: Mon 03 Aug 2026 08:49:18 +0000
Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: BwEBEM6jnBdL84jK1N1cG3DrqGXZFkxExT0jmskLC/o=)
2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: HBHirPwIg8T3HMiSC7xRXD2o3Qo0xRqSAK0Lb8fw1XM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Validity
Not Before: Jul 27 08:49:18 2026 GMT
Not After : Aug 3 08:49:18 2026 GMT
Subject: CN=6a671b8f-1662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:66:25:4c:e2:5b:d3:83:2c:ff:e3:46:22:
b4:4a:19:71:4f:66:db:ff:13:98:c3:a5:23:17:97:
95:95:a6:d9:f1:f4:5d:f2:70:ab:f1:56:8d:99:b0:
51:fd:f9:a1:16:57:13:2d:c5:a5:b0:a1:eb:5f:98:
08:ee:ac:79:1a:a9:3d:d3:2a:0e:9e:82:07:04:39:
6d:b6:c9:b3:4b:00:a4:aa:b9:f7:db:51:83:e6:2e:
4d:11:81:c5:5d:5a:22:09:97:0a:be:fd:9a:99:cf:
61:1c:c5:c1:b0:6d:ff:b3:f1:ee:d7:be:70:0d:43:
18:64:da:70:47:12:fa:ee:3e:12:d2:77:d8:8a:b3:
f7:84:bb:0a:bf:0b:51:38:8f:dd:0f:5a:8e:43:cc:
6c:32:91:db:4f:a2:05:94:b5:87:2b:c2:39:e9:49:
4b:73:b0:41:fe:36:74:5a:e1:94:30:5f:bd:a0:72:
7e:0b:47:59:db:e8:80:ac:aa:cf:c8:53:70:38:aa:
0d:05:5d:6a:4f:47:f0:9f:c1:7d:a0:a8:e5:e3:0d:
23:da:d8:60:2b:e6:75:66:68:3d:2f:15:05:b2:1b:
ec:38:86:f9:cb:e7:ec:ca:8c:90:25:e5:49:c2:90:
db:34:57:e8:83:ff:bc:3a:d1:f9:46:ab:49:9b:7d:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C5:D1:20:E5:2B:2F:7A:38:23:0C:AE:6D:2F:9F:4C:26:84:7F:CA
X509v3 Authority Key Identifier:
keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:4a:af:a9:9c:e8:d8:d8:00:f6:d3:7e:31:5f:05:3f:23:4a:
0a:a1:73:6b:24:1f:a0:28:c3:5e:78:b6:42:72:50:25:85:22:
70:4d:09:69:42:e4:e0:3e:1b:b9:7a:c8:00:14:61:a0:17:05:
91:8d:9f:47:65:cf:c9:37:ac:b1:48:71:bc:7e:39:a2:8a:31:
90:1c:c5:94:d4:14:45:8b:0e:99:8f:25:76:e5:61:97:e2:f1:
0f:e1:1b:9d:86:07:b9:39:b5:4a:eb:9a:3f:d9:4f:67:62:37:
7f:2b:dd:42:d9:e2:1f:44:7d:be:f3:d3:45:ce:b7:b2:23:bc:
52:1a:01:c7:6d:33:fe:0b:0d:d1:85:9a:39:d9:09:14:37:c2:
f2:85:fc:a0:bd:26:68:f5:4e:f1:f0:18:ea:76:f3:1f:81:06:
f3:76:7f:a4:f1:86:74:21:de:ef:39:19:e4:86:62:e8:ed:dc:
9f:40:fb:09:ec:20:62:71:b2:4d:73:4e:dd:98:10:fd:b6:be:
f9:fb:47:dc:0b:6f:73:ee:2b:40:9e:8f:18:3e:9f:d7:14:f2:
c2:22:66:d3:91:74:4f:0f:f3:5e:fa:06:5d:7e:01:09:7f:45:
6c:f4:8f:84:aa:bb:e8:33:8d:de:9a:5e:9c:4f:2a:49:44:e0:
d2:d0:33:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:33:55 2026 by rpki-client