
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
File: mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft (raw, json)
Hash identifier: SyyIVC/FSA0Yy/M36GUpA8r9XY+uRJwKcRhVZ9i5Pc8=
Subject key identifier: AD:52:0E:A9:18:1E:68:A5:A1:C1:19:59:FB:8F:32:D7:13:23:0A:5C
Authority key identifier: 98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F
Certificate issuer: /CN=A9148141/serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
Manifest number: 60
Signing time: Mon 27 Jul 2026 10:23:45 +0000
Manifest this update: Mon 27 Jul 2026 10:23:45 +0000
Manifest next update: Mon 03 Aug 2026 10:23:45 +0000
Files and hashes: 1: mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl (hash: d9ct6o37iWiUlGU9EMDc9S7xU7qIWsKFghq09uKk46c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl
rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148141, serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
Validity
Not Before: Jul 27 10:23:45 2026 GMT
Not After : Aug 3 10:23:45 2026 GMT
Subject: CN=6a6731b1-ea88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:61:26:7d:25:67:61:40:b7:33:2c:c7:95:
0d:7d:7b:fe:0b:67:9d:17:8b:23:a3:46:3a:87:a4:
c6:31:a2:ac:ce:4d:01:40:1c:bb:b4:d8:0f:38:7f:
ef:13:c0:56:4e:3a:b7:a2:ba:5b:45:42:f5:5c:3c:
11:d8:02:b6:5c:7d:42:bd:97:ff:6f:10:f7:8a:8b:
a0:cf:d3:46:a5:23:43:35:31:3b:a4:b8:30:3d:9f:
69:2e:32:fc:92:f6:a9:ea:23:aa:4f:bd:fb:d6:26:
d7:70:d1:66:36:c8:b1:36:29:5f:19:86:70:a5:22:
c4:35:35:b9:10:03:fd:0e:c0:1c:10:f3:ef:c0:e4:
9b:c5:73:e4:3a:cd:20:bd:08:d3:82:f6:8d:cc:c1:
5c:8a:f5:64:03:bb:46:9e:11:29:b8:ab:fd:64:b2:
a6:73:25:27:a2:84:14:e2:8a:cb:a3:55:21:54:4e:
1f:72:6b:2f:7a:58:cc:17:56:8d:90:06:49:37:ff:
25:e2:f1:ed:3c:dd:0d:cd:dd:cb:6e:ce:ce:03:21:
22:7e:6a:69:28:c6:6a:63:a5:f0:bd:cb:7b:c1:f8:
87:6d:d6:2f:cb:a9:b5:d0:0b:65:b2:46:58:ce:a8:
dd:c9:cc:bc:f3:c1:36:e0:76:df:6a:bf:7d:17:f6:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:0E:A9:18:1E:68:A5:A1:C1:19:59:FB:8F:32:D7:13:23:0A:5C
X509v3 Authority Key Identifier:
keyid:98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3d:38:d7:d0:33:4f:7d:a7:10:b6:d2:28:a3:1e:ea:3c:b2:
1f:b1:e6:3a:6b:d4:c9:c5:77:39:2e:22:e5:a1:0e:e6:b1:da:
d5:13:86:f3:01:0d:b9:da:c4:91:1a:7d:fc:ea:11:2b:d2:27:
58:5b:62:0a:20:1d:eb:84:57:31:3f:fd:31:ba:bb:0a:ff:cc:
4a:8b:65:c2:78:d6:76:f2:48:a8:d6:3f:98:42:da:3d:7b:f7:
bd:92:b0:98:2e:40:85:df:e0:4b:6e:62:b5:57:09:28:16:f6:
b7:29:40:df:d6:74:e9:93:fd:71:40:12:29:24:0f:27:6e:00:
c0:0c:0b:e5:da:9d:c3:32:3d:0f:76:9b:d7:67:6f:32:29:94:
cd:c8:9d:d4:c6:6e:ce:a6:ee:33:36:fb:88:b4:00:8a:45:f5:
b7:9d:f9:b5:af:5b:fe:3a:7b:ab:60:fa:c1:88:4d:50:43:2a:
e6:ae:54:80:02:f3:0c:17:d4:a1:77:f5:98:4b:db:06:87:60:
d5:24:7e:e1:e2:2f:17:a8:06:42:60:15:3f:71:1d:6a:77:5a:
cf:3f:4a:95:c2:bd:96:3b:fe:d7:32:79:f9:a1:9b:0d:1b:7e:
a3:bc:44:c4:8a:c2:62:74:6c:f0:69:7d:d4:4a:dc:c1:c6:33:
e4:3e:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:46 2026 by rpki-client