
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json)
Hash identifier: BfLRofEKT2eBw92W5nzgtUqudeN/A+PIbj7kgo92poQ=
Subject key identifier: DF:5A:49:E3:73:21:EE:4C:8B:D8:63:12:FA:53:8C:77:FB:CE:95:21
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
Manifest number: DD
Signing time: Fri 17 Apr 2026 06:26:13 +0000
Manifest this update: Fri 17 Apr 2026 06:26:12 +0000
Manifest next update: Fri 24 Apr 2026 06:26:12 +0000
Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: AHiBsjRytlHfIsr+h4lp6SpFb6KHlGG/5zwa3RNBPz4=)
2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: lVJ/wAuLoxmXnwU3EkGNm9UUsAUB6qqvPi8MZYUo1FY=)
3: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: aNrWLrutR5ArzXGRsTtMLurkk5UM/Q77zEZqj2DNM6w=)
4: D759EECE244011F1B0BBBC37BB833773.roa (hash: 4ZLnEVH62B/fFZNl3E3aTQ7rJ1PwOzf217E+4KcGPOw=)
5: 41C8C708244111F1AF80D04DBB833773.roa (hash: P0OVA8RnrCkxwGNC5Oj/FAk/vhkA7eOmVQFaY4OMLYg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Validity
Not Before: Apr 17 06:26:12 2026 GMT
Not After : Apr 24 06:26:12 2026 GMT
Subject: CN=69e1d285-bbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:05:36:14:62:a8:97:3a:cd:27:a1:63:a5:13:
0c:bc:5c:20:f4:65:3f:bb:67:93:d6:2f:35:3e:a6:
63:06:33:fb:12:05:99:5a:d1:3a:77:b3:c9:9a:55:
b9:22:02:06:79:df:02:8a:6e:bd:c1:a9:a9:ce:35:
75:f0:e3:8e:a9:47:65:1d:d0:de:f7:53:ae:48:f5:
87:11:f6:57:07:4b:0f:32:4b:07:48:62:d1:82:69:
eb:eb:61:45:b8:b9:24:d9:24:04:3c:20:64:63:2b:
1c:7b:d0:95:f2:e3:a3:0e:e1:6c:20:30:c2:78:5f:
a7:d4:03:4b:9b:f2:fd:87:1a:4c:1b:d5:86:0d:02:
14:3f:f8:ca:b2:42:16:92:3e:bb:e0:c3:a6:9b:6c:
21:87:ab:74:e4:24:8c:09:c5:c9:bf:cb:f4:5b:aa:
90:cf:81:18:30:ed:05:b8:f3:9d:18:46:41:a0:5e:
01:89:90:5e:6b:d3:f6:4e:d2:36:32:bc:a6:bf:e8:
88:0d:a2:a6:09:48:29:2b:0c:ef:aa:ce:f7:02:59:
29:9f:54:30:f1:88:03:cf:c0:ee:8b:72:07:b2:77:
c9:ea:cc:57:10:df:86:2d:a9:71:93:39:56:9a:66:
4b:82:f4:b1:17:f0:18:83:ed:d2:a4:6d:94:04:fc:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5A:49:E3:73:21:EE:4C:8B:D8:63:12:FA:53:8C:77:FB:CE:95:21
X509v3 Authority Key Identifier:
keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ae:58:18:01:d9:f2:08:08:19:57:4b:29:7c:9a:f6:11:e9:
5f:fe:f9:28:9f:63:8e:52:97:55:fb:b8:0d:a4:f8:34:3f:82:
df:ab:8a:97:b8:58:46:f0:1b:26:d0:40:6b:ce:ce:52:1c:bd:
03:37:88:24:c4:36:51:8d:6e:2e:a0:6d:da:bb:67:e2:62:db:
92:79:39:3c:dc:35:cf:90:43:1e:b1:3e:96:1e:8b:d6:01:81:
9d:41:c7:45:c9:30:f0:b4:c2:09:ff:9d:95:72:f0:71:28:42:
30:90:20:8d:de:f8:a0:e6:77:6f:88:fc:9a:d7:a5:b9:92:c4:
b1:a6:fc:5f:50:85:d8:5f:cf:5d:c0:c4:4d:43:7a:d1:14:e4:
f1:0d:63:82:f5:30:1c:0f:33:34:8c:2f:09:01:65:d3:92:42:
f1:73:23:dd:fe:9c:bb:91:72:23:5e:53:e3:6e:01:13:0d:1c:
d4:d6:1d:22:c7:e6:63:a0:de:77:3e:97:b3:11:0a:d1:b3:81:
d7:8a:1b:5c:ef:25:0c:a9:5b:f7:21:8a:72:98:78:fe:f5:3c:
e4:7f:be:3f:c5:b1:23:18:f7:b9:37:37:fe:f6:dc:89:c9:31:
1a:5f:bb:24:7a:c5:c7:b4:86:da:90:89:fe:52:25:5b:22:0b:
5f:32:0d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:18 2026 by rpki-client