
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
File: OG6s-qYbi0A33DiqKAhd4xh48eM.mft (raw, json)
Hash identifier: 55qCdr50AadxRB/k0J69mylSyHq15v5SYn0duwd6acA=
Subject key identifier: 7E:23:7F:B2:A2:E4:AD:7B:DF:4B:3C:D8:4D:01:AD:83:95:4F:34:99
Authority key identifier: 38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3
Certificate issuer: /CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
Certificate serial: 03D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
Manifest number: 03D2
Signing time: Mon 27 Jul 2026 01:38:42 +0000
Manifest this update: Mon 27 Jul 2026 01:38:42 +0000
Manifest next update: Mon 03 Aug 2026 01:38:42 +0000
Files and hashes: 1: OG6s-qYbi0A33DiqKAhd4xh48eM.crl (hash: DoabOd5AMcQRXr3ngTQ+gLxLlUOkc1iMdjgdQxoRowk=)
2: 09AA16F8DB0011ECA67DA10BC4F9AE02.roa (hash: sYHIzhwxwNYZG+D1Pb7NzvPDwd4RlqPZipjIPsfJ8NY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl
rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 984 (0x3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118422, serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
Validity
Not Before: Jul 27 01:38:42 2026 GMT
Not After : Aug 3 01:38:42 2026 GMT
Subject: CN=6a66b6a2-de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:b1:2c:c3:b6:67:2a:dd:a1:15:05:79:b1:
f3:e3:4c:5a:b9:fc:7e:43:11:f3:34:fe:6b:f8:c0:
c5:24:13:4d:14:4b:ea:e8:b2:47:9d:c7:94:dd:18:
de:ab:a6:dd:fd:97:f9:00:d4:d2:be:5d:b6:d5:2f:
de:05:4b:f0:8b:28:37:46:bf:c3:68:a2:8b:a0:af:
e4:00:12:af:d6:aa:bd:2c:22:24:d8:82:2e:f0:64:
e8:c1:a5:c2:52:b5:25:44:98:60:e2:e0:1d:03:d3:
aa:b3:b3:ed:2b:61:ba:b3:ec:40:7c:52:ed:86:4a:
29:09:35:f8:44:c7:d5:f3:fa:0f:a3:b9:92:98:61:
11:49:8e:59:e7:2a:1c:96:7c:b1:64:16:ff:27:d6:
c2:d6:1f:d0:00:d0:1e:61:a3:12:85:bd:d7:57:32:
fb:9a:39:ff:75:00:31:96:c4:5c:a0:b4:c8:ce:af:
d0:68:0b:79:e2:52:3b:f0:0b:25:b1:f0:41:97:3f:
8b:7a:c3:19:2f:5e:0f:a6:b0:93:1b:a1:46:83:89:
d5:77:a3:4c:0b:8b:07:22:0b:c8:1c:33:1c:42:1a:
be:e9:7a:6f:36:96:f3:46:7a:f4:14:73:ac:47:24:
52:37:89:bd:70:47:56:e6:cc:30:1b:bc:71:3e:3e:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:23:7F:B2:A2:E4:AD:7B:DF:4B:3C:D8:4D:01:AD:83:95:4F:34:99
X509v3 Authority Key Identifier:
keyid:38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:26:76:dd:bf:0b:33:79:c0:8c:59:8f:c4:40:43:52:e9:e7:
a0:69:b0:f9:32:77:e3:0c:a3:a9:16:fb:01:54:ff:98:50:ed:
74:15:84:32:53:77:e9:a3:87:5e:83:da:dd:0b:a3:4e:35:53:
0d:fd:47:de:93:a4:6c:13:12:cb:85:ce:59:53:c7:c8:0f:66:
b2:24:78:2e:cc:ff:ce:04:56:0b:7b:e5:4e:b7:cc:6c:d4:21:
6e:ab:49:2f:30:21:70:08:49:a0:29:6f:c3:bf:4f:e8:4e:e4:
68:12:75:c8:45:4b:4f:5e:ce:be:f0:14:26:7e:d2:4c:98:a3:
15:ad:9a:8d:15:22:5a:c7:ad:77:64:41:81:dc:f3:06:1e:c9:
f4:66:33:09:cf:54:c7:d9:23:f2:3b:63:41:ed:d4:61:ed:d1:
32:b0:05:6d:57:e3:2c:ab:f8:74:d5:1e:2b:13:23:ac:bc:14:
14:9a:74:37:00:46:b9:61:43:f6:06:80:8a:52:ab:9c:fd:39:
66:b9:3e:2c:ed:69:82:6b:4a:a5:ca:e0:02:73:dd:ed:66:65:
60:27:26:71:12:40:8b:da:fd:18:fd:be:7b:10:e2:38:b5:22:
0a:59:26:7a:db:be:99:3d:9a:13:55:b9:4c:f4:d1:af:62:52:
ff:8a:c3:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg0MjIxMTAvBgNVBAUTKDM4NkVBQ0ZBQTYxQjhCNDAzN0RDMzhBQTI4MDg1REUz
MTg3OEYxRTMwHhcNMjYwNzI3MDEzODQyWhcNMjYwODAzMDEzODQyWjAYMRYwFAYD
VQQDEw02YTY2YjZhMi1kZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7CxLMO2ZyrdoRUFebHz40xaufx+QxHzNP5r+MDFJBNNFEvq6LJHnceU3Rje
q6bd/Zf5ANTSvl221S/eBUvwiyg3Rr/DaKKLoK/kABKv1qq9LCIk2IIu8GTowaXC
UrUlRJhg4uAdA9Oqs7PtK2G6s+xAfFLthkopCTX4RMfV8/oPo7mSmGERSY5Z5yoc
lnyxZBb/J9bC1h/QANAeYaMShb3XVzL7mjn/dQAxlsRcoLTIzq/QaAt54lI78Asl
sfBBlz+LesMZL14PprCTG6FGg4nVd6NMC4sHIgvIHDMcQhq+6XpvNpbzRnr0FHOs
RyRSN4m9cEdW5swwG7xxPj6cEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH4jf7Ki
5K1730s82E0BrYOVTzSZMB8GA1UdIwQYMBaAFDhurPqmG4tAN9w4qigIXeMYePHj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQyMi8zMTgwRkUyQURB
RkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkwQTMzRGlxS0FoZDR4aDQ4
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09HNnMtcVliaTBBMzNEaXFLQWhkNHhoNDhlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODQyMi8zMTgwRkUyQURBRkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkw
QTMzRGlxS0FoZDR4aDQ4ZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzSZ23b8LM3nAjFmPxEBDUunnoGmw+TJ34wyjqRb7AVT/mFDtdBWEMlN36aOH
XoPa3QujTjVTDf1H3pOkbBMSy4XOWVPHyA9msiR4Lsz/zgRWC3vlTrfMbNQhbqtJ
LzAhcAhJoClvw79P6E7kaBJ1yEVLT17OvvAUJn7STJijFa2ajRUiWsetd2RBgdzz
Bh7J9GYzCc9Ux9kj8jtjQe3UYe3RMrAFbVfjLKv4dNUeKxMjrLwUFJp0NwBGuWFD
9gaAilKrnP05Zrk+LO1pgmtKpcrgAnPd7WZlYCcmcRJAi9r9GP2+exDiOLUiClkm
etu+mT2aE1W5TPTRr2JS/4rDFQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:48 2026 by rpki-client