
$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
File: oo2gvpAdmDpDPYM1idFnv0hvZPw.mft (raw, json)
Hash identifier: SH4rIkTZehqOmy2kUKHgQ+ENy881p5vL2UTDsbh0gLs=
Subject key identifier: D5:F4:49:CC:C6:A6:04:F4:E4:3C:72:00:65:01:94:2A:44:0A:C0:03
Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC
Certificate issuer: /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
Manifest number: 0216
Signing time: Fri 17 Apr 2026 02:37:28 +0000
Manifest this update: Fri 17 Apr 2026 02:37:28 +0000
Manifest next update: Fri 24 Apr 2026 02:37:28 +0000
Files and hashes: 1: oo2gvpAdmDpDPYM1idFnv0hvZPw.crl (hash: YtEiJ8CB65LtU0bBfPlLeDIYu9fFoNXh4Ig+8BfngkQ=)
2: DB27568209DA11EEBA18A082C4F9AE02.roa (hash: bQjm4G+Xbuc3BrxcneYGH9ivdneUdSDZ8ioYNeVkHc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl
rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912720E, serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
Validity
Not Before: Apr 17 02:37:28 2026 GMT
Not After : Apr 24 02:37:28 2026 GMT
Subject: CN=69e19ce8-686a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:7e:11:ce:2b:07:f3:4b:57:c0:f8:a4:50:
e2:7c:a6:b1:05:2b:bf:ad:c8:1f:b9:b7:19:e0:38:
c3:bf:77:c9:c5:b5:1c:69:06:77:1c:5b:e6:23:e0:
da:a5:55:62:ac:24:ff:f3:a7:96:69:04:39:f9:37:
1c:c2:da:55:4c:87:3c:ba:7d:e0:8b:c2:b3:58:25:
95:31:eb:0b:58:b3:a5:3a:e6:c5:28:66:b6:3c:eb:
12:75:54:8d:32:f0:f6:66:5c:ab:db:48:91:cf:8a:
36:54:3b:35:3e:e8:ba:12:d7:96:fd:23:8e:11:c3:
7e:a8:ff:a9:22:68:f9:54:75:2b:cf:f4:42:21:6c:
fb:8a:42:d2:ee:02:54:38:78:0f:04:68:13:b5:d1:
71:f2:5c:e8:89:0e:6b:e6:1d:99:e5:8d:a5:02:b4:
f9:a4:e3:f9:ca:da:99:3e:d1:32:46:cb:43:cc:db:
85:57:27:4c:a8:da:26:23:24:81:ed:30:0b:bf:f0:
16:fb:25:82:9c:63:3f:66:7b:3f:81:d1:8c:16:82:
52:8f:3e:e5:4f:e1:47:7b:5e:3a:c9:a0:02:41:dc:
70:5c:ef:dd:20:08:b1:ef:c2:2c:ae:c0:37:e6:ea:
ca:59:46:fd:73:7e:d3:35:95:62:05:1a:59:65:d3:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F4:49:CC:C6:A6:04:F4:E4:3C:72:00:65:01:94:2A:44:0A:C0:03
X509v3 Authority Key Identifier:
keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:9c:fe:9e:03:b5:2e:41:32:fd:db:f2:ef:03:7a:d1:38:cf:
40:20:57:f4:a9:fd:22:01:60:dd:c7:09:44:7b:aa:49:39:17:
04:34:f5:fe:9c:29:50:c9:45:b1:d0:cd:41:57:e5:b7:90:f4:
de:19:39:c6:c0:42:0b:c5:e8:c4:de:22:22:27:e4:32:fe:de:
ac:fc:f3:e7:fd:18:d7:40:63:c5:3e:0a:4e:fe:42:a1:65:c2:
1f:89:2e:84:fd:b3:4d:f3:6e:29:7c:aa:22:cc:18:1d:b7:ed:
72:af:9b:b7:fc:49:36:54:21:d2:b1:76:72:be:8b:74:75:aa:
a2:8d:1b:43:33:a6:2c:9f:f5:df:ee:2e:c3:ca:63:a6:86:65:
4c:72:3c:bf:0d:16:c5:c2:3f:1f:21:a6:07:a5:36:0f:b3:43:
d9:55:40:c3:ee:4b:7d:d1:6d:50:30:68:60:f1:23:f9:b6:b1:
ec:ba:54:53:07:ad:d8:80:c4:d5:99:9e:17:e4:b2:73:d4:89:
6e:10:35:31:6f:e0:dd:4c:c8:50:b5:55:9c:08:01:2c:61:3d:
5f:da:9d:15:35:b6:dc:7d:90:29:56:57:0a:81:41:83:c4:18:
78:57:74:a1:62:b5:77:70:c7:48:ba:f4:b7:44:fb:d5:83:24:
ef:e9:eb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:19 2026 by rpki-client