
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json)
Hash identifier: t3LZdd2NFMxBdI43mIYvoFbuSZzsHJ9x9W+c69OHPkM=
Subject key identifier: D3:36:96:15:8D:AB:B5:D6:E3:16:14:E1:3A:24:5D:D9:DB:2E:BE:FA
Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Certificate serial: 08EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
Manifest number: 08E6
Signing time: Tue 28 Jul 2026 20:45:44 +0000
Manifest this update: Tue 28 Jul 2026 20:45:44 +0000
Manifest next update: Tue 04 Aug 2026 20:45:44 +0000
Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: FGrFvy74cuMzYbrUCv+cyAwhmbizj/lin7nZDTtGf+U=)
2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: 4i5AOZWsffBcYvR2KypBRmQ6TWACokAcBSGDEbGPTU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2287 (0x8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Validity
Not Before: Jul 28 20:45:44 2026 GMT
Not After : Aug 4 20:45:44 2026 GMT
Subject: CN=6a6914f8-38e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:18:57:bc:e0:b7:8c:fe:87:10:8b:d6:68:
3e:be:2a:77:dc:00:3c:4d:b9:10:4c:ed:34:b8:e4:
8f:e4:eb:ce:06:7b:86:0f:ff:f2:c1:43:12:2a:84:
62:71:b9:39:c4:de:5b:88:d6:3b:fd:51:58:ae:19:
30:e0:80:6a:66:5d:92:af:01:30:ee:ba:94:ad:5a:
6c:ab:e3:a6:a0:ab:a2:a5:72:c8:e3:fb:d1:90:70:
ad:2d:a0:8e:be:7d:9d:b6:3a:b3:9e:e1:1d:8f:a7:
fb:d0:2c:d6:89:f8:7f:77:a6:79:b0:b1:d6:06:ce:
2b:1b:2a:88:33:64:35:c7:26:b7:01:b2:45:64:ba:
63:f6:83:c7:4e:3c:60:61:61:15:19:80:09:5a:33:
53:83:64:0a:41:ab:80:dc:54:9d:f0:df:b4:14:de:
f1:7f:b8:a2:74:13:8b:db:00:c9:cc:d5:c6:a2:bf:
14:66:31:4c:0f:83:b5:81:fb:5e:58:b2:a1:d2:f8:
b2:bf:65:df:24:fb:f9:08:4d:02:8a:52:a3:22:cd:
37:03:99:cb:c4:1c:e2:bb:bd:03:d6:25:3a:2a:56:
58:41:3a:ec:c8:3f:bf:f0:ed:01:bc:3a:bc:67:91:
43:17:4f:76:23:b2:2d:24:57:1f:ea:be:4e:98:ae:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:36:96:15:8D:AB:B5:D6:E3:16:14:E1:3A:24:5D:D9:DB:2E:BE:FA
X509v3 Authority Key Identifier:
keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b6:e4:dc:70:1d:7a:36:7f:8c:02:dc:09:de:9f:cb:64:4e:
84:f7:0a:38:78:47:17:77:29:1b:66:08:2b:8c:76:4f:c1:43:
7e:ab:f5:39:3f:4b:75:4d:9d:12:58:26:5c:77:a6:fb:f4:1d:
ab:f1:84:24:3a:15:10:a4:a8:3b:61:d5:8e:b7:01:0b:51:c0:
fc:b0:c6:5e:a3:b0:b9:d1:7c:d8:8f:f7:82:1b:dd:71:35:cb:
7c:87:ac:94:1b:64:5b:14:fd:16:ec:8d:d6:54:71:c6:a4:a9:
89:fb:b5:d9:2c:d9:32:77:4e:3d:72:0e:4e:0c:10:2a:68:0f:
a1:b8:02:48:ae:10:23:9e:ef:4d:cf:27:96:34:bb:a7:da:89:
a0:bd:3c:bf:93:4b:96:3e:fd:69:e7:17:12:d3:b6:6e:17:d7:
85:7e:da:27:cf:55:3c:ac:83:28:92:7a:48:27:71:15:fa:08:
58:e4:e5:a0:b3:6a:60:de:e6:85:87:3e:82:35:14:f7:59:34:
54:24:5e:de:3a:6e:27:40:24:e2:33:b3:ac:0f:3f:35:4b:67:
b4:33:8f:ef:e7:26:e1:bb:70:b5:ad:91:93:90:91:83:88:d8:
b0:c9:95:34:84:9c:f5:f7:62:93:5c:bf:91:a5:0b:4e:36:3f:
47:b1:c9:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE
QzlEMTRDQTIwHhcNMjYwNzI4MjA0NTQ0WhcNMjYwODA0MjA0NTQ0WjAYMRYwFAYD
VQQDEw02YTY5MTRmOC0zOGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+EYV7zgt4z+hxCL1mg+vip33AA8TbkQTO00uOSP5OvOBnuGD//ywUMSKoRi
cbk5xN5biNY7/VFYrhkw4IBqZl2SrwEw7rqUrVpsq+OmoKuipXLI4/vRkHCtLaCO
vn2dtjqznuEdj6f70CzWifh/d6Z5sLHWBs4rGyqIM2Q1xya3AbJFZLpj9oPHTjxg
YWEVGYAJWjNTg2QKQauA3FSd8N+0FN7xf7iidBOL2wDJzNXGor8UZjFMD4O1gfte
WLKh0viyv2XfJPv5CE0CilKjIs03A5nLxBziu70D1iU6KlZYQTrsyD+/8O0BvDq8
Z5FDF092I7ItJFcf6r5OmK5wlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNM2lhWN
q7XW4xYU4TokXdnbLr76MB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw
MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF
Y0Nya0lzc25ubEhjblJUS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoLbk3HAdejZ/jALcCd6fy2ROhPcKOHhHF3cpG2YIK4x2T8FDfqv1OT9LdU2d
ElgmXHem+/Qdq/GEJDoVEKSoO2HVjrcBC1HA/LDGXqOwudF82I/3ghvdcTXLfIes
lBtkWxT9FuyN1lRxxqSpifu12SzZMndOPXIOTgwQKmgPobgCSK4QI57vTc8nljS7
p9qJoL08v5NLlj79aecXEtO2bhfXhX7aJ89VPKyDKJJ6SCdxFfoIWOTloLNqYN7m
hYc+gjUU91k0VCRe3jpuJ0Ak4jOzrA8/NUtntDOP7+cm4btwta2Rk5CRg4jYsMmV
NISc9fdik1y/kaULTjY/R7HJEw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 21:56:39 2026 by rpki-client