
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
File: mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft (raw, json)
Hash identifier: 6nporpLPrTlEJg3WTOjPG6BuO1Ua9MYeV38XQtgVhgw=
Subject key identifier: 24:D6:19:A5:56:A3:81:C8:84:94:67:04:F9:3F:99:3E:7F:0E:9A:18
Authority key identifier: 98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F
Certificate issuer: /CN=A9148141/serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
Manifest number: 7D
Signing time: Mon 21 Sep 2026 07:45:44 +0000
Manifest this update: Mon 21 Sep 2026 07:45:44 +0000
Manifest next update: Mon 28 Sep 2026 07:45:44 +0000
Files and hashes: 1: mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl (hash: eX7vaDDCxajAFnbOA02rmgFDLzua8rl25XCOYSmnONw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl
rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148141, serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
Validity
Not Before: Sep 21 07:45:44 2026 GMT
Not After : Sep 28 07:45:44 2026 GMT
Subject: CN=6ab0e0a8-415e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:e6:b3:c1:4b:43:ba:c4:77:61:ab:25:f3:
7c:4c:41:5e:c5:42:7c:75:35:9d:77:7e:03:cc:37:
5d:5f:6b:c1:0a:c2:9e:2c:c1:a8:82:87:12:5b:13:
d8:38:57:ab:91:4b:cc:af:aa:3e:0b:c7:05:d3:cd:
f7:dd:9a:c7:cf:18:8f:83:75:a6:d0:f9:e7:96:77:
ab:9e:9b:2e:28:54:3a:7b:58:92:9a:06:38:6b:c1:
4c:6f:11:bf:96:b8:5e:47:7f:c9:ee:a1:62:50:d4:
82:c3:b1:d0:77:7d:a3:fb:36:0d:99:7c:f2:f1:df:
25:47:d0:3e:ea:a1:ea:12:23:ef:55:ed:ff:3b:1d:
f0:62:96:c6:62:5a:29:99:c0:75:66:83:bb:79:81:
14:2a:a8:30:8d:0d:a3:17:ee:c9:1f:08:2d:c6:a0:
67:7f:1e:cb:11:74:5e:04:7e:6f:4a:63:dd:9c:68:
59:64:92:46:dd:32:9a:43:e3:0b:d1:6c:c4:88:ba:
e6:79:f4:59:d1:5e:c1:39:fc:40:46:c3:2b:5d:13:
b7:b0:3a:39:bf:22:0e:f5:90:dd:ea:74:9c:49:6f:
ea:c3:36:8e:db:4f:7a:86:dc:bb:1a:0b:9d:af:1b:
db:7f:5a:62:b1:06:59:94:8a:8a:60:91:6f:62:14:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D6:19:A5:56:A3:81:C8:84:94:67:04:F9:3F:99:3E:7F:0E:9A:18
X509v3 Authority Key Identifier:
keyid:98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8d:e1:7e:50:27:b6:9a:8b:d7:0a:9e:96:6e:14:ec:17:bb:
2a:7a:25:d1:20:39:18:ea:49:ea:ab:d2:95:1d:d1:0b:c7:3e:
5c:bd:76:51:22:ac:db:ab:7e:97:23:7d:e7:60:de:c5:39:24:
5a:df:11:8c:d1:34:ad:2e:9d:c0:4b:5c:bd:f6:b9:bc:86:8f:
a5:9f:21:50:da:8f:2b:00:ee:52:06:1e:41:fd:b1:da:5c:52:
2f:a3:c1:ef:21:cc:02:3b:84:65:4a:36:b7:21:a7:4d:49:1a:
c5:a9:b6:02:6d:bc:a7:9e:0d:3a:6a:73:a5:26:b2:fd:2a:80:
2c:5b:31:a1:a7:83:33:6c:7e:a2:25:71:35:42:a8:b5:d2:b8:
49:ba:6d:bf:da:b5:7e:58:27:82:93:63:91:a3:b2:5c:15:30:
c2:26:36:12:3a:90:be:55:c5:c9:3e:59:a9:8c:e9:5d:9a:0e:
fc:d6:dd:46:84:62:29:d0:86:61:3f:9c:36:5d:7d:49:0f:57:
18:41:5f:b8:52:a6:de:b7:d8:fe:d7:fc:9c:2d:f8:52:e3:21:
5d:a0:1d:69:0b:8a:94:5a:e7:0c:a0:be:8f:63:0c:97:50:97:
37:dc:77:6f:5a:d9:d6:8f:8a:e1:cf:21:62:9e:c2:cc:4b:1b:
a2:30:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:25:54 2026 by rpki-client