
$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
File: O8azIf17YMVg8V19JMrFozdED7Q.mft (raw, json)
Hash identifier: vaLhI0DFdYouWRvmEClR71IkWeAC4fFxqFQK/QcHRW0=
Subject key identifier: 55:F9:3E:D4:00:44:A5:A6:90:E6:B9:40:88:C7:7C:39:CE:D8:84:85
Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
Certificate issuer: /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Certificate serial: 07B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
Manifest number: 07A7
Signing time: Thu 16 Apr 2026 21:24:48 +0000
Manifest this update: Thu 16 Apr 2026 21:24:47 +0000
Manifest next update: Thu 23 Apr 2026 21:24:47 +0000
Files and hashes: 1: O8azIf17YMVg8V19JMrFozdED7Q.crl (hash: H3tMzRLFCxpZuoqD/GNEL7sXKz1FfBBjqccKEG6ImP8=)
2: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (hash: By7/GJ4vrsW+p6nlCrl+Q0fqyxwGg35EjwhrqyWk25M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1971 (0x7b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911980F, serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Validity
Not Before: Apr 16 21:24:47 2026 GMT
Not After : Apr 23 21:24:47 2026 GMT
Subject: CN=69e153a0-6e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:ee:5e:32:bc:c4:49:bc:b2:6a:99:75:bb:
7e:db:c1:8f:a5:db:67:ad:28:16:8f:2e:b0:3e:7a:
e3:b2:aa:5a:11:71:d7:b8:bf:bf:d0:8d:18:2f:c0:
2d:a8:71:d4:96:f6:9c:06:c3:3d:85:b7:02:20:1f:
b6:eb:42:d1:b9:ae:ed:49:08:e4:13:5d:ad:b6:b8:
db:d2:79:fd:e0:ab:5d:8b:61:e2:3b:8e:db:00:de:
e4:06:dc:2f:d1:e2:b2:22:e8:7a:21:c1:03:c4:57:
74:e5:a7:1d:8f:b5:59:72:45:2a:26:d2:88:46:53:
ac:36:49:71:c1:82:36:ea:cc:4c:e9:6b:22:61:d7:
1b:50:05:7f:17:05:b8:c5:b5:c6:d1:3e:f8:73:23:
77:83:44:67:de:1d:6b:42:f0:b3:d0:d4:a3:4b:30:
5f:e7:35:2b:f8:c4:de:20:63:57:9d:7f:f4:37:d9:
e6:0c:6f:5e:cf:7b:c3:03:59:fb:db:a5:2f:04:40:
bd:9b:73:90:37:2e:d3:a6:61:8b:3e:2b:ea:f3:17:
bf:a3:31:bc:ad:41:65:0d:f0:98:ab:ec:86:fc:b9:
22:f8:f8:fb:81:bc:cb:46:97:bf:8b:53:0b:c1:9f:
8d:47:0a:41:91:bb:b3:f8:ff:90:3c:1b:e7:27:6d:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F9:3E:D4:00:44:A5:A6:90:E6:B9:40:88:C7:7C:39:CE:D8:84:85
X509v3 Authority Key Identifier:
keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:ef:19:07:6c:bd:09:b8:d2:b7:23:dd:43:8e:47:7b:19:09:
b9:52:85:22:55:bb:d4:aa:5f:89:98:da:0b:1d:8a:35:5b:a5:
81:10:0e:c8:76:fb:5b:62:48:9d:df:f6:6e:ae:4b:3a:f3:45:
08:04:dc:3d:78:5d:d5:64:e7:c0:3b:a6:f8:68:6c:55:8e:62:
5d:82:5c:63:9e:5d:d1:79:23:6a:97:a1:b3:0f:5f:a7:02:54:
ab:38:0c:fa:3e:a5:2e:50:0c:ec:cb:59:aa:1d:26:e4:78:ba:
1a:a4:68:de:04:bf:4a:86:f7:5e:91:1b:09:70:7b:be:e1:f7:
f0:80:ed:d0:bd:3d:f6:bd:a5:64:02:b3:ac:b8:52:38:84:13:
10:6e:3c:14:9b:07:32:38:b1:a6:11:3f:2e:f0:f9:c6:22:d3:
1d:8c:37:28:7b:6b:a4:38:26:07:36:cf:d5:a3:0b:be:f7:11:
01:a6:97:d6:4b:a3:85:b8:e6:77:1e:d7:c0:90:08:d3:36:3e:
40:84:5a:9f:1e:b3:a4:61:4f:90:7e:89:92:0c:7a:71:20:fa:
07:0e:07:3a:88:e8:f7:bc:45:09:d6:46:6d:45:82:67:cf:aa:
eb:0c:9a:55:12:0b:1b:89:ad:22:2b:01:94:ba:64:85:9f:de:
28:95:b9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:54 2026 by rpki-client