
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
File: oQCGP_euS0zjitmLfMw3suVvSQk.mft (raw, json)
Hash identifier: kVrl3Qyc+OtjL+1crSSDiwqdumKwI3P83ur8M2qdub4=
Subject key identifier: 85:7E:EE:7E:D0:A6:B6:36:55:69:E9:56:0C:04:B7:3E:30:68:5C:6D
Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Certificate issuer: /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
Manifest number: 6A
Signing time: Mon 21 Sep 2026 08:02:54 +0000
Manifest this update: Mon 21 Sep 2026 08:02:54 +0000
Manifest next update: Mon 28 Sep 2026 08:02:54 +0000
Files and hashes: 1: oQCGP_euS0zjitmLfMw3suVvSQk.crl (hash: ZgxNuCLuEGNp0qLnsPm08n8FLb75aFM0k/IEJ97mcC0=)
2: D1960A28493D11F1A113D1E6B5833773.roa (hash: 3ZGbdg04NB+U1p4ArMrgy7RjHgfQTqsGhjizYBFQoP0=)
3: 68869A98493D11F1A62A19BFB5833773.roa (hash: G98XlGylGqD4IWLKPRkQ33JbE0HvP479vwIkVZry/iM=)
4: 9EE84698489A11F1AF98834FB4833773.roa (hash: HyVMau6tP4Gxadmevajmg0fDJUTUHCH9joRR5GgFIHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Validity
Not Before: Sep 21 08:02:54 2026 GMT
Not After : Sep 28 08:02:54 2026 GMT
Subject: CN=6ab0e4ae-1e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:d9:42:9c:c9:23:31:ff:13:dc:77:67:bc:
63:fc:75:5e:1a:92:67:01:ee:dc:db:71:37:d1:de:
20:27:ef:5c:5e:90:6a:7c:7c:8d:a1:b8:1f:06:3c:
f8:ed:9e:32:13:8b:3f:8e:38:9b:a3:73:bf:01:31:
a8:75:dd:e5:e2:9c:0b:f9:aa:81:f4:0c:42:3a:ed:
d4:f3:d3:58:f5:a8:50:9a:1a:c8:5f:1c:4b:ee:50:
72:04:f3:fe:58:fb:2f:0a:32:0a:69:25:24:95:f6:
a9:3a:6b:48:3f:31:6a:22:4c:1d:7c:1e:21:2c:06:
51:0c:8f:cf:39:ef:6d:7b:fa:d8:80:9e:71:96:5c:
b2:f4:61:6b:3f:26:9b:cb:31:85:1b:bb:82:e0:32:
e1:fa:9c:07:bf:dd:53:cc:7c:4a:6c:45:24:71:01:
3d:c5:08:ae:38:aa:b0:a3:2f:93:33:5a:4b:be:b3:
07:7a:06:64:d2:c6:0f:c7:10:dd:56:38:df:d4:6f:
52:5d:bc:85:63:96:44:06:03:51:f0:e6:16:e3:94:
23:19:1e:3e:c2:56:5f:18:6f:fd:a7:51:2f:8f:53:
18:34:60:a0:bd:d3:16:0e:f6:e4:5e:18:03:68:44:
e7:e0:7b:b8:22:9f:62:b9:9e:3d:a0:7f:e4:76:d1:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7E:EE:7E:D0:A6:B6:36:55:69:E9:56:0C:04:B7:3E:30:68:5C:6D
X509v3 Authority Key Identifier:
keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:9b:57:70:43:88:a0:05:0f:55:1d:b7:6d:96:e1:1c:7c:6b:
ce:a9:20:28:00:b4:cb:ac:4e:de:04:11:20:a7:56:80:26:d1:
44:46:88:a2:a2:8f:df:74:90:ff:28:75:29:82:db:54:b1:63:
78:28:4f:18:4d:3f:52:2e:0d:12:7d:a5:49:11:7b:19:31:b9:
48:5b:29:b0:3b:01:2f:8c:e5:7d:2f:a0:bb:21:b4:9f:5a:03:
77:8c:a0:a0:f8:a6:b8:91:98:1d:2f:19:d6:b1:38:32:68:f0:
ce:2b:14:47:c2:0b:40:1b:37:90:0e:f4:ea:a6:56:c3:28:94:
96:ce:d6:99:27:ff:ae:37:f2:29:04:0f:af:f7:eb:01:55:67:
ae:1b:df:cd:cb:13:56:2f:cf:5c:5e:56:10:9a:c3:d9:5c:a3:
37:da:6e:60:30:e0:ae:4b:57:0f:2a:46:95:4f:20:a0:a0:a9:
10:1c:2e:65:b5:97:93:a0:f2:97:44:97:24:ca:a0:4c:fd:ad:
90:bf:62:89:a7:7a:a6:c3:22:96:23:b1:2e:ae:74:09:45:ab:
32:d9:f4:27:42:dd:25:82:e3:d3:b8:5d:b3:4b:6b:d7:41:d3:
75:b1:50:eb:d2:66:71:db:84:b6:90:6d:98:93:bf:49:66:ce:
1b:53:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:07:24 2026 by rpki-client