
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json)
Hash identifier: a8qD+tnkcKFk6aBgAnynBN7hNHhHi3f5KXd0oQIgZnU=
Subject key identifier: BB:D5:23:43:3B:C2:12:EC:57:54:D8:15:A4:AC:36:30:A1:21:53:02
Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Certificate serial: 095E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
Manifest number: 0955
Signing time: Sun 26 Jul 2026 20:40:53 +0000
Manifest this update: Sun 26 Jul 2026 20:40:53 +0000
Manifest next update: Sun 02 Aug 2026 20:40:53 +0000
Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: oyFFVWwCHK+2J6g4lX+rcpvaMmGHD7aqfBYlXE8AVUg=)
2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: PcM9VvZwEtkWziWmDAYLmLOnlkBtxqnyiAkGfpwesWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Validity
Not Before: Jul 26 20:40:53 2026 GMT
Not After : Aug 2 20:40:53 2026 GMT
Subject: CN=6a6670d5-2a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:d4:88:43:8e:15:78:7f:00:60:6c:dc:38:
3b:02:ba:16:f2:fb:1b:24:34:26:f2:25:bb:f0:10:
10:2b:b0:c4:7f:b6:6e:5f:bc:76:d0:3d:5e:41:6e:
d0:fc:a2:6e:c5:bb:5b:42:05:4b:93:6e:e5:65:76:
55:9a:b6:13:0b:d5:20:4f:bc:fa:f3:02:d9:eb:64:
39:7f:99:6f:3c:cb:24:d5:3d:a1:e3:e7:7c:b5:1e:
93:70:05:eb:ee:76:5a:3f:b7:c8:2a:1d:3e:aa:48:
ff:5a:bf:b7:4a:dd:94:ab:04:fe:32:61:6e:29:f5:
1d:58:17:3c:da:8c:df:62:22:c2:dc:cc:42:36:80:
df:f4:f4:13:d7:bd:50:ff:7b:c8:9e:81:e4:02:12:
12:59:2f:fe:2f:91:44:9b:81:e7:ec:f2:5e:ab:04:
0d:3c:fe:57:2e:41:7c:aa:92:e1:eb:7c:19:9c:e1:
88:ad:fe:dc:c9:0f:09:78:dc:77:ec:34:5b:bf:b1:
bc:34:e7:c8:90:2e:a4:94:ee:c2:2d:05:36:d8:99:
9f:71:14:7c:43:5b:39:fc:df:21:85:bb:b6:1d:fd:
6a:9c:f5:4c:32:ad:d7:a8:bf:e5:37:5a:24:82:ad:
51:d3:da:85:c4:8d:73:53:15:41:a5:06:06:6a:69:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D5:23:43:3B:C2:12:EC:57:54:D8:15:A4:AC:36:30:A1:21:53:02
X509v3 Authority Key Identifier:
keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6a:fd:a2:2f:be:45:96:f0:40:e4:c5:35:e4:22:62:c3:a2:
1e:a6:42:4c:6e:69:47:a3:f8:16:a6:2a:33:03:43:5b:ef:02:
0b:9d:76:a1:b4:a8:f1:d0:7c:e9:90:ec:ec:0b:44:d7:ad:e9:
dd:2e:47:ed:ca:a9:c5:cf:16:9f:ec:12:b9:21:7a:1c:c1:63:
54:17:08:9e:92:9d:50:e1:32:05:89:ba:f4:60:40:d5:1b:db:
d8:f8:37:2e:c0:7a:64:8b:5f:eb:e6:f0:af:6c:f9:46:46:b0:
fb:e6:18:79:44:23:11:22:f1:ed:48:54:66:20:4a:af:cf:12:
70:d7:b8:8a:ef:a7:45:37:1d:84:1c:20:06:cc:da:2a:ee:5a:
b0:52:a4:38:bf:49:77:19:ff:6a:92:09:0c:62:e8:91:b3:6e:
3c:6d:c5:e8:9c:e1:e9:90:fa:b1:fc:ef:d9:ce:3d:6c:0b:12:
ae:ac:75:73:a9:da:73:1b:7b:ec:d4:b2:e7:e1:a7:8e:04:78:
c2:ce:db:6f:f3:f6:7a:f8:60:37:4f:ab:6f:a4:b0:1f:b3:d7:
17:72:14:e7:48:25:12:a7:de:bd:f5:9a:c1:e2:c8:8c:6a:51:
45:71:97:ca:9b:c4:b4:ca:86:3b:ab:45:20:3f:76:3d:9a:92:
4a:d8:72:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw
QzEwQkUzRTcwHhcNMjYwNzI2MjA0MDUzWhcNMjYwODAyMjA0MDUzWjAYMRYwFAYD
VQQDEw02YTY2NzBkNS0yYTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuoDUiEOOFXh/AGBs3Dg7AroW8vsbJDQm8iW78BAQK7DEf7ZuX7x20D1eQW7Q
/KJuxbtbQgVLk27lZXZVmrYTC9UgT7z68wLZ62Q5f5lvPMsk1T2h4+d8tR6TcAXr
7nZaP7fIKh0+qkj/Wr+3St2UqwT+MmFuKfUdWBc82ozfYiLC3MxCNoDf9PQT171Q
/3vInoHkAhISWS/+L5FEm4Hn7PJeqwQNPP5XLkF8qpLh63wZnOGIrf7cyQ8JeNx3
7DRbv7G8NOfIkC6klO7CLQU22JmfcRR8Q1s5/N8hhbu2Hf1qnPVMMq3XqL/lN1ok
gq1R09qFxI1zUxVBpQYGamkpXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLvVI0M7
whLsV1TYFaSsNjChIVMCMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx
OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1
dG1YdmN1a21RRjhNRUw0LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASmr9oi++RZbwQOTFNeQiYsOiHqZCTG5pR6P4FqYqMwNDW+8CC512obSo8dB8
6ZDs7AtE163p3S5H7cqpxc8Wn+wSuSF6HMFjVBcInpKdUOEyBYm69GBA1Rvb2Pg3
LsB6ZItf6+bwr2z5Rkaw++YYeUQjESLx7UhUZiBKr88ScNe4iu+nRTcdhBwgBsza
Ku5asFKkOL9Jdxn/apIJDGLokbNuPG3F6Jzh6ZD6sfzv2c49bAsSrqx1c6nacxt7
7NSy5+GnjgR4ws7bb/P2evhgN0+rb6SwH7PXF3IU50glEqfevfWaweLIjGpRRXGX
ypvEtMqGO6tFID92PZqSSthydQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:19:15 2026 by rpki-client