
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
File: oiK21tBSghQiHUrOpH4axhHvQno.mft (raw, json)
Hash identifier: t3lXWprRhYYlZ1eOX++UIxCYIG2H9PdKl3oeN4zMte4=
Subject key identifier: 53:3C:D5:20:46:27:A1:E9:03:88:11:1C:9E:9C:6F:3B:AD:C7:CB:BB
Authority key identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
Certificate issuer: /CN=A911F177/serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Certificate serial: 0822
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
Manifest number: 081A
Signing time: Sun 01 Mar 2026 23:11:41 +0000
Manifest this update: Sun 01 Mar 2026 23:11:40 +0000
Manifest next update: Sun 08 Mar 2026 23:11:40 +0000
Files and hashes: 1: oiK21tBSghQiHUrOpH4axhHvQno.crl (hash: RR1Fkn3KVllS0pB7hShzTSC7uWnKokd1Dp9wgEVPEW4=)
2: 90203ACEDEE811EBA82BEF41C4F9AE02.roa (hash: oot2eMtZy8Bb20t9t+iEwLkFtUPz+/MiX0LVfUtGAbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl
rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2082 (0x822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F177, serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Validity
Not Before: Mar 1 23:11:40 2026 GMT
Not After : Mar 8 23:11:40 2026 GMT
Subject: CN=69a4c7ad-2822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:96:31:a3:33:90:0a:ab:b6:35:76:be:7d:e9:
68:75:70:56:54:c4:eb:8e:de:e1:d1:a1:53:33:a4:
12:ea:ea:93:ba:8f:fd:81:30:80:3f:3f:82:b5:30:
25:ec:24:42:da:93:33:8b:29:3a:45:32:67:76:29:
9a:69:e7:7e:13:89:83:ad:4b:dc:ff:f6:7e:88:9b:
75:19:4f:0a:cc:85:33:98:4c:0c:83:79:95:88:17:
5c:4b:22:dc:04:26:17:0a:0f:7b:66:ef:07:be:89:
e8:c5:b1:af:be:5b:8b:ba:4a:78:00:6c:c9:0e:ba:
63:5d:0c:30:35:d2:70:52:42:45:8d:e4:02:8c:96:
5a:b9:ad:a9:0b:e2:18:50:92:a3:87:c0:b9:be:c0:
bb:aa:5d:d1:e3:cc:ce:ed:a0:c1:84:e9:7d:54:14:
42:85:75:62:ed:dd:b5:f8:5b:9d:e2:cb:26:f3:53:
37:ab:ed:1e:2c:86:ca:ea:11:55:a6:88:bc:fd:02:
38:6f:f9:dc:87:c0:b2:b1:bb:15:31:33:5b:a9:51:
53:c9:29:83:59:1c:89:35:7c:b3:b9:9d:82:44:40:
79:66:51:29:10:af:09:79:51:ce:ff:40:86:8f:b3:
72:ba:97:fd:1e:e5:1f:39:e1:bb:4c:46:ad:8f:98:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3C:D5:20:46:27:A1:E9:03:88:11:1C:9E:9C:6F:3B:AD:C7:CB:BB
X509v3 Authority Key Identifier:
keyid:A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:d2:4c:fe:14:20:25:60:9c:db:b6:3d:d9:c3:e4:13:c0:e8:
d7:52:63:04:1d:c8:f0:65:ab:55:73:c4:ca:ef:a9:c8:04:ce:
53:b5:b5:6b:06:1e:f2:7a:7b:9d:e6:c2:c7:1f:62:b8:21:e8:
85:54:5e:c7:01:b3:2d:a6:61:22:ac:b4:e5:38:c7:69:8e:17:
6a:7e:96:bb:c8:f9:d7:35:0e:33:10:87:92:f0:d2:8a:62:00:
c3:0f:74:2b:97:75:ec:45:50:85:50:ea:44:45:f0:a8:93:56:
82:74:9d:54:d6:74:ad:78:b7:32:91:07:47:71:7d:56:21:fb:
15:0f:35:f8:14:b1:b6:c2:e9:85:35:9d:c1:62:c4:5d:b7:a3:
17:ec:a7:0b:66:eb:87:60:a8:d4:19:a1:3f:ef:94:32:3e:8a:
bb:c7:d9:9d:1d:c9:2e:87:90:f8:50:01:32:37:b5:88:eb:e8:
07:25:94:db:3f:9c:3e:16:95:60:9b:f9:ae:95:ee:62:50:1d:
5b:c6:17:fd:17:03:8a:dd:ce:f6:95:3a:f3:e7:8f:03:26:53:
8f:55:7a:8c:2b:d4:4f:c0:72:d3:e7:f4:e6:1f:16:7b:8e:a5:
56:8a:a4:57:da:5e:df:06:36:fe:53:16:4b:d8:bf:ea:8c:cb:
0a:5a:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:02 2026 by rpki-client