
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
File: oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json)
Hash identifier: F/2Sh66F7ja44odSFjzxVgCfENXStmUCR3aCC9U2bSY=
Subject key identifier: FD:36:DF:DB:C9:A2:25:92:9B:7D:8D:22:EF:BA:5D:F1:0C:B7:F9:8B
Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
Certificate issuer: /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
Manifest number: 3B
Signing time: Sun 19 Apr 2026 08:07:06 +0000
Manifest this update: Sun 19 Apr 2026 08:07:06 +0000
Manifest next update: Sun 26 Apr 2026 08:07:06 +0000
Files and hashes: 1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: OIb7qoDOwoqk2GBok7Mfe0fBl4t6HstVs3ubZRiOXeY=)
2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl
rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Validity
Not Before: Apr 19 08:07:06 2026 GMT
Not After : Apr 26 08:07:06 2026 GMT
Subject: CN=69e48d2a-9d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:9e:75:0b:93:89:f1:a7:6c:e5:60:2a:12:
b2:30:7f:56:1e:e7:5b:df:df:19:5b:ed:bf:bf:6e:
c6:7c:a6:aa:30:59:f7:5a:2f:c6:e7:f5:e0:7e:4f:
47:25:ff:8a:39:b0:b0:a9:f2:56:87:35:89:f3:aa:
76:6a:f1:90:f1:ac:fc:f8:8b:bd:4b:fc:08:cf:c7:
c3:fb:9a:cd:ff:48:4e:77:ae:e9:c0:17:ce:df:31:
aa:17:df:b8:a6:0e:59:e7:cf:93:82:ee:33:fa:1c:
ff:da:29:14:d7:04:72:c7:34:87:02:29:c1:32:61:
39:7a:7c:7d:5c:4c:6f:b7:29:7e:da:cc:d4:4c:72:
90:12:06:0b:85:83:11:cc:40:50:c2:78:02:ed:b3:
fd:36:9e:69:33:73:c5:d2:2e:71:ff:bb:2c:08:79:
a4:0d:0a:3b:af:78:b9:b7:49:98:5c:89:28:ec:25:
32:24:33:b6:d3:89:54:83:b5:e0:79:eb:35:ca:dd:
28:fa:c1:ba:81:ad:26:24:77:24:c6:63:09:ac:18:
ba:20:6a:48:59:ad:1e:53:d9:8a:a4:27:3f:ef:22:
2e:9d:18:a0:5e:6f:4a:29:46:4a:3c:0e:e5:ab:5b:
90:c9:e5:dd:65:67:83:5c:88:a1:25:0d:6c:76:5f:
3a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:36:DF:DB:C9:A2:25:92:9B:7D:8D:22:EF:BA:5D:F1:0C:B7:F9:8B
X509v3 Authority Key Identifier:
keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:98:22:bc:49:3f:57:f4:54:9c:3f:d2:1f:6d:98:78:04:39:
74:9a:f6:60:0a:82:49:3d:93:3d:da:c9:fd:16:4c:eb:6e:9f:
2b:ba:d0:29:db:24:b0:66:25:5b:8e:40:ac:fc:39:2e:75:42:
bc:cb:cd:21:a5:74:47:e8:7e:c9:47:1b:90:d3:9d:77:84:06:
a3:2a:31:60:51:ad:8d:f8:24:74:d5:6f:4a:61:dd:7e:1a:62:
c7:f9:01:10:1e:44:26:fc:77:a2:9e:00:19:7c:77:86:de:65:
5f:25:e6:f6:fa:04:18:0f:10:29:17:32:a9:d2:e0:ac:1d:43:
e0:ff:bc:41:e0:5b:d5:78:d3:b4:9d:70:80:54:01:32:56:35:
54:0e:16:b7:47:34:5b:e7:7f:70:e0:ae:4d:60:84:fe:f6:00:
0a:3d:9b:2e:2a:48:c7:e6:3d:e0:7e:08:79:b4:7e:f1:95:c0:
5e:13:56:57:48:b6:30:be:23:a2:69:d0:5c:35:35:d1:45:7a:
97:b5:4c:6e:d2:50:b9:28:3b:4c:92:4b:e9:32:01:3b:e3:5c:
1d:8c:ae:3e:be:37:54:71:55:11:53:f5:79:e0:0c:8c:20:fe:
b6:8e:c0:7e:0a:92:b2:79:7c:ee:ba:b8:41:c7:85:19:8d:e3:
19:ef:c3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:15 2026 by rpki-client