
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json)
Hash identifier: uRnX8LmmhnZcLQiWzLJ/gS4BcBvWfMw3x1/XThI8HR0=
Subject key identifier: DB:3B:4F:AA:29:2D:53:FE:88:8C:66:3D:BA:F8:D7:B2:B1:F1:B1:BD
Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Certificate serial: 067E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
Manifest number: 0677
Signing time: Sat 18 Apr 2026 22:27:24 +0000
Manifest this update: Sat 18 Apr 2026 22:27:23 +0000
Manifest next update: Sat 25 Apr 2026 22:27:23 +0000
Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: ZueAdy/LrXcXEOKel70zJS6tNf1t/qKUEppja+MTbP8=)
2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: LkWBUiZRF9C2VJ1E3RZPIAtHdVr7r2jvAKoSLz3FinE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 22:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Validity
Not Before: Apr 18 22:27:23 2026 GMT
Not After : Apr 25 22:27:23 2026 GMT
Subject: CN=69e4054c-383b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:e0:ac:87:e9:b4:ea:1d:93:d2:64:e1:3f:
48:3e:d3:cf:c1:15:fb:1a:dc:ab:5e:0a:85:93:85:
a2:2c:92:f2:1d:c7:44:f3:1b:3f:2e:aa:4e:86:04:
4e:81:dd:24:e2:9f:58:27:8b:6b:d2:c2:82:de:f7:
c0:79:ad:00:6d:40:cc:50:39:97:00:e8:dd:17:78:
db:df:3c:9d:c8:21:3c:ec:64:88:30:3a:4e:10:f2:
0a:ad:57:4c:4f:07:6f:a2:67:32:dc:29:1a:6a:36:
c0:5b:48:d4:80:a7:39:c3:98:04:c4:ad:3c:5c:24:
75:2a:5c:92:00:c8:9b:5d:b5:aa:0e:de:89:6c:94:
3c:46:38:1a:92:82:70:a0:9c:09:bb:04:67:cf:db:
3a:ee:db:3f:fb:b3:db:97:6c:2a:64:a4:f8:d7:ed:
9f:0f:b9:48:7a:3d:ef:96:42:c7:21:c2:4f:65:57:
f6:ed:95:52:e2:9d:b1:36:04:b1:e8:be:61:bc:e9:
1f:bd:c8:67:42:98:54:e7:01:f8:f0:f6:43:da:14:
47:36:f3:fa:ce:4c:3f:a5:57:d4:c6:fe:a1:aa:5a:
77:eb:61:66:e6:79:cd:f9:8e:1d:35:8c:65:d6:40:
bb:01:3d:bd:a3:4a:b6:3a:c7:4b:ff:ee:c6:b4:6e:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:4F:AA:29:2D:53:FE:88:8C:66:3D:BA:F8:D7:B2:B1:F1:B1:BD
X509v3 Authority Key Identifier:
keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:5f:4c:29:ba:4d:55:0b:a5:96:eb:dd:db:b0:53:c0:33:4f:
9a:48:59:e4:1a:9e:21:8a:66:95:4b:83:f7:38:bf:33:61:b3:
84:67:4b:86:a9:cd:26:10:de:9a:e3:7b:b9:0f:e0:fa:3e:a8:
7e:3b:23:c3:ce:55:60:23:5a:94:2b:44:79:ce:09:89:65:2a:
e5:77:2d:48:b6:39:60:a9:4c:8b:5f:3c:d7:fc:1d:6a:26:e2:
ff:bf:6e:8c:8f:02:8e:67:5e:ae:ae:8e:a7:4c:35:f6:28:c0:
4a:74:18:48:55:07:9d:6c:cf:3a:af:e0:a8:66:ee:43:89:62:
50:ad:0f:d8:ce:03:3d:0e:79:7e:a2:89:99:68:1e:a9:4e:11:
5d:18:94:65:88:4f:61:8a:e6:30:67:07:f4:7e:ac:9c:02:89:
67:b8:00:61:81:27:4a:e0:65:fa:87:ec:7a:5e:5a:8a:26:e7:
09:2c:af:31:93:0c:ba:8e:b8:04:3a:ef:a6:08:57:0c:c5:fa:
02:1a:ed:83:67:88:58:cf:8e:f9:2a:a6:aa:22:8f:e3:05:6b:
53:4d:7e:ec:3e:4d:35:5e:29:90:88:fa:3e:55:e6:d6:44:41:
dd:7f:ce:58:71:ad:85:75:f2:d0:07:70:2f:06:7c:0e:9c:f5:
ae:08:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:41 2026 by rpki-client