
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
File: OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json)
Hash identifier: Ysy7iZAGmjjYwnrnTsLme2VU/h/PWd3LlE4aGrnGPEs=
Subject key identifier: 0A:1E:37:95:A9:F4:33:D8:D4:D4:23:85:31:DE:63:C0:00:41:EB:5E
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial: 0945
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
Manifest number: 15B0
Signing time: Thu 16 Apr 2026 18:30:06 +0000
Manifest this update: Thu 16 Apr 2026 18:30:05 +0000
Manifest next update: Thu 23 Apr 2026 18:30:05 +0000
Files and hashes: 1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: 7+wJNdi+Y75NgtKiA4eVSK/7rIUu0JicBWugF8P0KSY=)
2: 4EF2EC842DAA11F181B163FBA3833773.roa (hash: f+EcCuzdqO4iMndLIpmYMeE8cc5kWF9Vq+ftn88/tz0=)
3: 1245956E2DB611F1B8EF9758A8833773.roa (hash: mMM2Ni5pcLVmUU40zu9mR7XX9fNyNXL41cXI4bsQQ2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373 (0x945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Validity
Not Before: Apr 16 18:30:05 2026 GMT
Not After : Apr 23 18:30:05 2026 GMT
Subject: CN=69e12aae-80e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:7a:78:8f:8b:94:4b:41:47:05:5e:2e:ad:
29:6e:f0:9e:a5:8b:45:d9:ed:a6:eb:f4:ac:2e:dd:
19:6f:35:7c:ee:71:56:72:6e:72:93:0f:c4:46:f6:
2d:fa:4e:99:bb:fe:69:07:ea:48:73:87:a9:74:c8:
31:58:4c:6b:c8:d5:1d:4e:94:07:f0:93:55:9f:a0:
fc:27:d2:6d:be:62:e4:d7:d5:38:39:28:e4:93:81:
bd:09:8a:88:f2:c4:a7:ea:a9:7a:ca:82:aa:b9:a0:
30:35:b7:7b:44:93:96:5f:09:88:72:e8:51:1f:72:
df:d1:d6:d6:73:9e:8e:1f:2c:14:91:45:4e:50:d4:
63:87:22:9e:0c:3b:5e:e7:53:aa:36:14:42:f5:5a:
9c:d6:4b:d1:d1:8f:44:0f:b8:72:6e:33:bf:8d:ab:
17:72:4a:8d:2b:9a:be:e3:5a:3c:3c:2e:e1:04:d3:
e3:c6:57:ab:0b:2e:fb:a6:11:9c:41:21:fa:d7:aa:
46:37:35:41:10:1a:74:40:4c:9f:8c:60:62:79:dc:
12:b5:f6:ee:2c:ee:db:7e:58:69:33:1c:d6:10:33:
9a:b7:6f:4a:84:16:66:f5:c6:ce:0d:c6:43:c4:72:
b0:df:99:55:cb:c7:50:ef:73:5d:90:19:7f:90:03:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1E:37:95:A9:F4:33:D8:D4:D4:23:85:31:DE:63:C0:00:41:EB:5E
X509v3 Authority Key Identifier:
keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:00:e8:36:5e:67:12:c5:72:4e:4b:61:1e:73:83:8a:d1:ae:
68:e0:c5:bb:01:3f:6c:ae:bf:08:8b:ee:5f:b5:10:34:72:db:
b1:84:8a:38:55:af:0b:0e:c9:6e:c4:83:93:22:4d:96:d0:39:
a9:77:90:f2:5c:86:16:38:47:b6:fb:3b:f1:63:16:95:34:b8:
7c:b2:0a:1b:4e:45:55:ab:ff:54:e0:32:2a:59:b2:41:44:0e:
b3:d3:27:df:b2:06:c3:9f:0d:6d:8f:bc:cb:32:1f:7a:63:b8:
1a:fa:8e:8e:4d:32:87:cb:7a:7f:75:0d:f9:83:ce:f7:d2:32:
4c:cb:a1:a8:4f:3b:a3:6b:00:6c:8c:34:1b:06:33:c4:02:2d:
79:3b:38:c7:09:ed:1c:1b:9b:0e:c3:ce:ee:76:e5:bc:27:00:
7c:c8:09:2a:aa:b1:be:a6:16:5d:ac:7d:3b:7e:99:48:49:0e:
5f:8a:6e:e4:a0:89:a2:07:1a:fc:9b:c0:0d:3f:fe:eb:58:f4:
a9:a5:28:50:5f:d5:98:93:30:2c:6b:fb:52:fe:33:f2:b6:53:
f3:c7:17:9a:40:66:59:cb:57:2f:ef:dc:e8:65:41:14:75:d4:
e4:09:8f:c3:5c:5b:bf:5d:18:3e:84:3e:13:db:5c:2e:9b:8b:
e0:3e:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:03:32 2026 by rpki-client