
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json)
Hash identifier: djaOnLspPKc9Z1xv/bHp+bcfsqcIbFR7hjYua/u6B/c=
Subject key identifier: C5:17:35:2B:F1:D7:B4:88:DE:9A:32:50:4B:E0:AE:B0:02:98:95:41
Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1
Certificate serial: 0CFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
Manifest number: 0CF4
Signing time: Mon 02 Mar 2026 03:05:37 +0000
Manifest this update: Mon 02 Mar 2026 03:05:36 +0000
Manifest next update: Mon 09 Mar 2026 03:05:36 +0000
Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: HEMqcfVKKtv1E9Jt2DgQ4UN7ygfE9sFzI3RfTsMppPo=)
2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: 54KnpzSAajGbdQ3jdPXLudRYp5BFk1M8P0KsurR2PD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3327 (0xcff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1
Validity
Not Before: Mar 2 03:05:36 2026 GMT
Not After : Mar 9 03:05:36 2026 GMT
Subject: CN=69a4fe81-5a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3b:91:77:f9:52:79:47:ff:5d:78:97:b0:bd:
f6:e3:d8:ff:6a:de:3c:b7:0a:77:96:27:fd:c4:cd:
e0:35:5f:3c:a0:04:a3:9c:0b:88:de:5a:84:db:94:
b6:56:05:ce:c6:2b:80:3d:64:2a:e9:d1:07:18:19:
32:ac:9a:a9:f5:ef:71:43:a7:f6:20:b9:a0:49:14:
82:f3:b1:b6:87:f6:4f:0d:fe:33:1f:00:9b:cf:52:
a2:b0:11:af:e5:23:87:52:ed:1a:7e:ba:62:86:a8:
d6:b5:4d:c5:ac:62:5d:0b:7c:df:ab:4b:6c:6c:84:
95:7d:c6:9e:c1:12:4c:ff:7f:12:a3:fb:eb:f1:ee:
f7:b5:5f:10:b9:18:f8:ea:4a:7c:7e:12:38:76:f1:
77:5a:f3:57:b6:cf:58:f5:a5:0f:ca:f0:36:87:c6:
03:20:2d:4c:67:d6:58:c9:0f:f7:83:a8:5a:46:15:
28:ee:a6:14:91:91:bd:fc:5d:09:9b:aa:54:0d:63:
30:15:07:d5:6c:57:42:0a:c9:b5:48:1d:3d:5e:bf:
24:74:47:bb:d6:28:ae:90:46:dd:2f:a5:1e:f0:3d:
ed:70:f1:36:6b:43:2a:24:0e:88:a1:76:e9:20:7d:
6d:67:e1:af:59:a0:4f:3d:44:46:44:97:b4:6e:b0:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:35:2B:F1:D7:B4:88:DE:9A:32:50:4B:E0:AE:B0:02:98:95:41
X509v3 Authority Key Identifier:
keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:18:68:64:05:e3:42:84:98:ee:c4:11:fa:67:02:18:fc:81:
2f:d2:34:99:88:dc:13:41:b8:92:19:d6:45:93:61:45:cc:a6:
8b:8d:f9:70:3a:b1:dc:25:91:aa:ac:47:93:db:1f:8b:07:3f:
a8:5f:94:02:36:09:a7:e3:52:1e:68:d6:53:6b:b6:63:50:0c:
c5:22:36:1d:d3:b9:32:67:70:fe:1a:50:73:b0:f6:48:4e:6e:
b3:68:4e:7a:3d:fb:29:3e:bd:4a:cc:11:0e:1b:38:5d:03:c3:
4b:8d:91:20:28:b1:2f:32:5d:b4:f2:2c:22:14:65:a9:1b:3d:
db:2a:5f:33:24:e1:5d:23:0d:85:c5:e8:e2:8f:c2:17:39:73:
d1:b2:b5:8f:66:fc:bb:7c:89:9c:b7:2d:47:7c:3d:83:7d:82:
2a:bf:74:d2:ae:75:83:de:28:b1:31:35:04:36:16:2d:30:51:
cc:77:37:f8:d0:ee:43:9c:ad:5e:13:96:e3:67:23:db:1e:22:
ab:f1:45:97:8b:2d:10:06:85:8b:ac:6a:92:33:32:04:f8:75:
3d:58:55:67:ec:14:9b:7a:fb:e1:1d:f1:cb:41:5f:89:6f:c9:
26:a9:66:46:23:ae:f7:fb:b8:9f:05:07:79:60:cd:7f:5c:1b:
4a:56:ea:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:52 2026 by rpki-client