
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json)
Hash identifier: DY6ckB7/hjsiRiln/ftYf+Xj6bhzxjjNioVjLRXlVBQ=
Subject key identifier: 9D:D3:C8:EF:85:EF:51:DB:2B:0C:79:33:92:63:6F:05:B4:D0:1F:90
Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1
Certificate serial: 0D1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
Manifest number: 0D0E
Signing time: Thu 16 Apr 2026 18:02:38 +0000
Manifest this update: Thu 16 Apr 2026 18:02:37 +0000
Manifest next update: Thu 23 Apr 2026 18:02:37 +0000
Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: XxJz0vE93HJ/FQa+OkZ8Xd80iA0D+GSE5Mc/gEvqYos=)
2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: p/HN4+cYHb4pXYatqROBo401SMy00O/P6+sd+OS9rlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1
Validity
Not Before: Apr 16 18:02:37 2026 GMT
Not After : Apr 23 18:02:37 2026 GMT
Subject: CN=69e1243d-cdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:41:fc:21:94:4b:49:29:21:27:b3:aa:88:
30:f6:16:85:aa:4d:29:f2:77:00:f6:07:11:eb:b8:
0d:ac:77:4d:a0:31:6f:61:51:48:0a:68:9d:79:1c:
d3:12:0c:d3:7a:cf:09:22:45:13:31:7e:a9:eb:df:
5b:cd:c2:98:56:b2:bb:63:f9:50:f3:57:20:6c:33:
e7:b5:86:ba:4c:ef:14:14:47:1e:17:0e:9e:e8:b3:
4d:68:e5:13:61:2f:90:83:c1:e6:ae:3c:6c:c5:42:
fa:04:30:50:16:07:1c:d1:8e:aa:eb:ee:65:45:d2:
29:dd:c5:87:4a:84:3d:28:c4:3a:87:63:51:11:28:
6c:cd:f8:69:af:22:9f:52:f9:8c:2c:66:fc:6c:ee:
66:74:d7:62:90:ee:2c:42:04:04:d0:b6:ef:ff:83:
3b:af:f6:bf:65:cb:44:b3:1e:ce:99:8a:f6:2f:4b:
cf:c7:8f:32:94:7a:e7:48:3c:81:f4:fb:d8:db:be:
ab:cc:23:33:b2:87:a0:ef:2a:9b:e7:4c:7b:40:c4:
5c:54:67:ec:e1:f1:2b:c0:8a:cd:b5:81:0a:0b:3a:
c0:b2:06:98:98:dd:57:cf:4e:09:3a:91:83:04:5f:
d2:58:b7:ac:2e:4a:f1:d8:52:b1:4f:65:28:76:46:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D3:C8:EF:85:EF:51:DB:2B:0C:79:33:92:63:6F:05:B4:D0:1F:90
X509v3 Authority Key Identifier:
keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:78:f5:74:3c:e9:10:d5:23:c3:a9:67:31:3f:07:f6:5d:2a:
67:7f:b8:8c:f7:d7:23:90:28:20:7a:db:73:1d:b3:5a:e7:6d:
20:61:43:38:1d:1f:c5:30:d0:ad:07:29:85:82:5b:55:e6:07:
ae:60:bc:97:20:70:7d:af:ed:1b:7d:d9:cd:db:9a:87:d8:b4:
7c:1a:a2:de:dc:e9:52:f2:d8:e4:49:55:0c:55:5f:22:36:1f:
3f:52:f1:fe:d2:6b:22:12:3f:e7:95:c9:9b:30:bc:5e:f9:83:
0d:d1:3f:33:f6:d1:b6:b8:52:9b:d2:77:fe:2d:a1:12:e5:9c:
cf:05:40:74:3d:3b:a8:0e:c2:c8:df:25:98:9e:8b:e3:8d:7c:
ae:64:be:fd:f0:32:a3:61:8d:d2:fa:b7:2e:d6:c5:d0:30:55:
14:f7:f5:6c:6c:a5:b9:22:26:c6:dd:66:ee:f0:7f:c1:25:c6:
08:42:25:f0:49:ae:4b:a6:1c:3d:64:c2:e8:cf:7e:ea:39:f7:
a3:18:d1:c1:93:a2:4b:80:48:33:dc:69:67:d4:2a:e6:dd:16:
d5:95:e1:3f:0f:20:25:9f:90:05:55:b5:8f:f7:6b:e2:d6:43:
ac:60:f2:cc:19:64:f0:86:30:56:83:eb:ef:4d:3b:4c:18:d2:
93:1b:08:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:48:12 2026 by rpki-client