
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
File: ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft (raw, json)
Hash identifier: /ygcaFOF7q8ic3W/CE4T5LTjM/m2WLgivSgyej9FFaQ=
Subject key identifier: 4A:7D:30:FD:74:BB:FE:A2:79:04:7A:F9:B8:9D:54:47:94:F0:81:7B
Authority key identifier: A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D
Certificate issuer: /CN=A912B1E4/serialNumber=A231A96AA2228A328BC8E6585E73630DB43F112D
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
Manifest number: 0B
Signing time: Fri 17 Apr 2026 08:51:44 +0000
Manifest this update: Fri 17 Apr 2026 08:51:43 +0000
Manifest next update: Fri 24 Apr 2026 08:51:43 +0000
Files and hashes: 1: ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl (hash: m6HpJ9EYKOhXKgPAwpPnkrYl/4Is1hvdLgc2dOXpsPk=)
2: 3BE765AC2E5911F1AF1402DA99833773.roa (hash: 4vN9DxDqav8XQy5RbRHkPzQNR/xKvXelfPI7Z+9SlN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl
rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B1E4, serialNumber=A231A96AA2228A328BC8E6585E73630DB43F112D
Validity
Not Before: Apr 17 08:51:43 2026 GMT
Not After : Apr 24 08:51:43 2026 GMT
Subject: CN=69e1f4a0-0df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:84:ae:21:cb:c0:ec:55:04:30:32:f5:0e:
f3:f7:af:db:b5:f0:4c:f9:fc:77:17:70:df:8b:ab:
97:c6:7a:df:b7:df:ec:2e:2d:26:3e:cc:bd:41:ed:
38:76:aa:4f:ec:56:7e:ef:ba:93:44:11:1d:db:40:
a5:e1:2a:fc:cb:f3:42:70:8c:cc:93:82:11:60:78:
24:ca:b7:02:3e:b2:24:4a:59:42:20:5f:b3:5d:0a:
f6:58:26:ca:73:4d:c0:70:2c:8f:3e:fe:a7:ae:1f:
a5:90:76:7b:6c:7a:0a:b3:43:28:56:08:4f:c9:77:
53:1c:6a:93:21:38:ed:80:f1:51:8f:ad:cc:22:9a:
79:74:30:ab:f9:93:54:c1:fd:02:27:20:32:5a:85:
b4:1d:4c:34:52:b3:2d:9a:29:84:bd:14:84:1b:1d:
3d:e3:b1:8f:42:72:34:82:40:94:4d:65:b7:50:da:
36:2f:57:9b:6e:30:b9:fd:8d:2d:c5:82:a9:84:48:
aa:b9:43:70:69:e4:45:16:cb:3a:ef:de:4c:aa:bf:
b5:f4:c0:56:4f:d0:42:1a:a2:b7:fd:6d:02:1d:bf:
4c:d9:21:1d:68:2b:03:06:76:f7:9b:99:55:45:87:
52:c2:67:e4:89:6a:88:bc:24:63:63:f1:ba:7f:5e:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:30:FD:74:BB:FE:A2:79:04:7A:F9:B8:9D:54:47:94:F0:81:7B
X509v3 Authority Key Identifier:
keyid:A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:26:38:be:4d:76:5a:70:3d:dd:7b:e3:48:57:be:14:5f:e7:
5c:23:49:31:49:fe:a3:cb:80:5a:0f:15:7e:3a:9f:04:16:b4:
03:99:a3:0e:7b:7f:fc:9e:4e:57:cb:f2:68:19:ce:b9:c2:d4:
22:db:a1:99:19:bb:2a:1b:4e:a5:c5:b6:e5:07:bb:4f:5b:d4:
a7:98:a1:2e:f0:68:39:f4:40:c0:69:fc:1a:d6:96:ea:c9:70:
1d:ab:9d:ba:47:c0:b0:2a:6c:2b:19:ea:28:f0:76:59:e2:1f:
95:97:f2:c4:87:e2:dd:f8:68:95:bc:e2:f7:c9:e0:e6:c2:dc:
bb:81:6d:51:3e:25:26:4c:5b:73:ab:82:f4:06:1c:2a:bf:c1:
59:26:3b:7a:5a:da:be:4f:4e:63:2f:8a:53:01:3f:ef:e3:21:
5b:d2:f1:e2:c8:9d:f4:21:b6:d0:05:e7:d6:9e:23:1a:e9:07:
fc:6f:02:95:c3:cc:d4:a2:da:c5:b9:63:7a:f0:d5:2a:ae:97:
82:c8:f9:39:8f:cd:8b:0a:5a:34:45:d5:80:f1:45:35:3a:d9:
16:0d:9f:7c:e3:ef:7e:e0:71:b9:d0:ac:8e:52:16:3c:cf:d8:
7e:b6:0a:30:56:f3:dd:10:fa:e7:37:96:40:59:16:96:bd:b2:
46:dd:c1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:17 2026 by rpki-client