
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
File: oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json)
Hash identifier: NH7u/FFr38JMzyJPTsXTcKD5tYJR+1kS4M3at/6Z608=
Subject key identifier: 14:CB:51:2C:83:38:E4:1D:1D:2E:2E:E7:2C:FB:FC:58:D5:01:54:04
Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
Certificate issuer: /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
Manifest number: 56
Signing time: Sat 13 Jun 2026 08:16:23 +0000
Manifest this update: Sat 13 Jun 2026 08:16:22 +0000
Manifest next update: Sat 20 Jun 2026 08:16:22 +0000
Files and hashes: 1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: 5eUfv/cyK9E5uxRTwYIFTj4B/7FmXl4307wHOjfdpEc=)
2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl
rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Validity
Not Before: Jun 13 08:16:22 2026 GMT
Not After : Jun 20 08:16:22 2026 GMT
Subject: CN=6a2d11d6-220d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:7e:7b:70:09:ba:c8:0b:2a:d9:c1:14:db:
61:2f:02:00:24:d0:69:0e:25:53:ea:11:fb:77:ef:
83:be:ee:51:1f:91:c8:a1:78:d7:e1:0f:7d:71:a3:
58:de:09:d8:f9:6b:30:8b:54:65:0a:81:50:c7:ca:
e3:85:35:74:5f:3a:ae:8c:5d:13:33:51:ad:d3:f8:
da:4c:1b:b4:c8:2c:20:09:71:69:fc:1d:25:98:1e:
29:61:a4:2a:f5:23:6e:c0:60:b8:71:e5:06:08:60:
95:85:a9:7d:26:bb:5e:94:7f:b3:de:11:cd:63:27:
53:3e:01:ec:67:b7:c6:1c:6c:e7:16:fd:73:07:64:
33:61:3f:94:78:e0:df:3f:ee:5b:47:c5:7f:81:37:
ed:48:ae:17:bb:b6:75:14:27:59:07:94:de:5a:68:
b4:8a:9b:6b:f7:ae:ae:06:86:c2:38:79:c1:18:9e:
13:90:e1:85:a1:0b:a6:0f:55:32:9b:66:ca:dc:c6:
b0:a2:80:d6:9c:0e:82:da:0a:aa:ed:69:73:76:82:
2a:bc:8e:5f:a6:07:bf:d5:a0:c7:26:55:b9:82:de:
64:87:03:9f:c7:2d:a1:ef:71:2f:d3:bc:66:00:96:
e3:e4:e2:ad:d9:e8:55:51:c3:ed:40:28:d6:2e:b4:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CB:51:2C:83:38:E4:1D:1D:2E:2E:E7:2C:FB:FC:58:D5:01:54:04
X509v3 Authority Key Identifier:
keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:15:eb:1a:e1:bd:10:c9:9e:fe:c6:4b:c3:76:c9:9e:e1:92:
e9:97:58:c1:08:fe:c7:b1:da:e9:0c:19:fb:bd:81:43:73:38:
6f:c2:b1:07:61:81:61:3a:7f:12:21:0f:9f:58:75:b9:0c:c7:
01:13:45:de:a6:a0:2f:7d:f8:ff:2b:e4:de:3a:27:a8:9c:ac:
a0:4f:ad:a0:ba:83:d7:fd:5b:a0:28:bd:67:0a:e1:5b:5e:da:
67:50:a5:39:64:11:17:84:4f:69:d3:91:bc:02:79:a6:f3:57:
de:e5:a0:50:c6:a6:5c:0c:e2:d6:18:97:6f:b3:9d:92:e0:7b:
30:94:87:ef:f4:18:ca:50:75:a8:60:0e:5f:a0:5b:82:00:7e:
32:2e:15:56:40:1e:58:e8:86:b7:74:4f:31:40:dc:64:61:73:
73:55:01:63:0d:93:01:93:9f:78:e4:76:66:f9:b9:5c:6a:4c:
0c:4e:a7:74:8b:a8:48:09:2c:19:ef:c4:c1:92:95:cc:7a:a4:
fc:93:dd:a0:ce:1e:c5:6a:a0:be:db:bf:f1:ef:6a:98:21:f7:
6f:25:fd:4f:7b:5f:70:b8:24:ab:04:b8:25:3e:ec:87:d2:48:
6a:36:83:7e:8d:0a:4a:04:c9:a8:bb:7f:11:99:7b:45:71:29:
31:37:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:13:59 2026 by rpki-client