
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
File: oiK21tBSghQiHUrOpH4axhHvQno.mft (raw, json)
Hash identifier: DRd4+qeC8u+ijxhpRtMroopaTvmxeGKSgcA69drl4mo=
Subject key identifier: 37:0F:1B:90:D1:52:E0:88:D4:97:44:C5:62:3A:CF:09:9A:ED:33:69
Authority key identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
Certificate issuer: /CN=A911F177/serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Certificate serial: 0857
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
Manifest number: 084F
Signing time: Fri 12 Jun 2026 20:56:03 +0000
Manifest this update: Fri 12 Jun 2026 20:56:03 +0000
Manifest next update: Fri 19 Jun 2026 20:56:03 +0000
Files and hashes: 1: oiK21tBSghQiHUrOpH4axhHvQno.crl (hash: 9azV5sK69CKhZrkAPZ/EqpFnHb8of0D5akZaK6ltFPY=)
2: 90203ACEDEE811EBA82BEF41C4F9AE02.roa (hash: oot2eMtZy8Bb20t9t+iEwLkFtUPz+/MiX0LVfUtGAbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl
rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F177, serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Validity
Not Before: Jun 12 20:56:03 2026 GMT
Not After : Jun 19 20:56:03 2026 GMT
Subject: CN=6a2c7263-499c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:f7:ac:47:0c:4d:d4:e1:44:b7:32:6d:01:
b6:f8:07:10:b1:ed:13:6a:6e:40:fb:ea:d6:d0:8e:
bd:91:88:7d:8f:e5:07:4a:88:f7:ba:6e:bb:e5:7a:
22:db:d5:03:22:e3:18:d6:fd:8d:f7:81:32:07:17:
a2:f3:5a:0e:07:16:c0:63:e1:67:55:4d:86:56:f1:
9b:c8:fe:aa:dc:02:56:17:cd:dd:87:48:24:ad:92:
c5:5f:00:96:56:0c:f6:08:29:57:e1:73:77:4c:51:
af:ef:c0:5b:bf:66:9d:a5:76:44:37:4c:47:ef:fa:
b7:b9:0f:41:81:e0:26:b5:a5:ae:50:47:84:8b:61:
ec:f6:81:c0:33:c0:8a:92:37:df:82:b3:a6:2a:4f:
81:92:5b:ed:72:8c:1f:c0:99:01:be:a8:8d:20:ad:
8d:c4:25:f0:96:ac:0a:86:68:d3:eb:b2:6a:f1:9e:
99:78:eb:dc:a7:ad:54:67:a6:05:a1:88:3d:7f:79:
1d:d5:28:6b:0a:a0:b1:06:bf:87:a6:0a:c2:3f:7c:
2b:a9:dd:ba:af:d5:ae:af:60:52:75:5e:16:25:9d:
a3:67:88:aa:86:59:64:66:ed:23:b3:80:c4:39:ee:
d7:45:96:9d:18:2e:c7:3e:0d:7e:36:5d:c8:ac:9e:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:1B:90:D1:52:E0:88:D4:97:44:C5:62:3A:CF:09:9A:ED:33:69
X509v3 Authority Key Identifier:
keyid:A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f6:a5:dd:89:5b:25:d2:20:90:fc:02:21:e6:65:51:48:a9:2e:
8c:16:42:8c:1a:8c:81:27:4d:a1:4d:73:87:ed:89:13:30:96:
41:34:c3:fe:23:1a:d5:80:8d:3c:59:56:d0:0a:9d:a2:0b:2e:
20:83:a6:11:2c:6d:31:3a:fc:81:27:8e:e5:6a:9e:f3:5b:e0:
21:37:96:6e:0d:8b:5f:4c:2f:86:aa:fb:a9:ba:b8:8d:a7:cb:
27:01:31:a9:a6:3a:2a:e6:b6:07:98:f8:c9:95:e8:7b:08:11:
7e:23:ea:7a:f8:c9:a7:ed:b8:70:0c:57:44:96:e1:d4:49:d4:
c9:4a:f7:7d:05:94:00:27:f6:7a:07:fc:42:3a:fc:b3:8a:8f:
da:dc:12:0b:78:fa:49:5c:e4:c0:78:ed:34:08:78:44:7b:8d:
23:17:ac:63:e9:cf:13:81:ad:3f:55:69:b8:70:78:0a:27:88:
f6:10:10:b6:98:87:d7:72:53:d2:b7:2e:4c:3b:52:a7:52:6b:
b3:e3:94:d4:62:1b:23:a7:9a:ee:bb:27:d2:00:e4:dd:9d:ae:
8a:91:62:e0:7d:5b:9d:05:46:26:ef:e5:f7:cc:a5:53:50:00:
51:c0:ae:c6:49:a3:32:fc:f1:c8:2c:e2:a1:e6:78:90:57:32:
96:78:38:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:59:13 2026 by rpki-client