
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier: J+xMRSqip6B4RZy5iOaTxc/RFTnZWeclCxeOJUiOomA=
Subject key identifier: A8:EF:EC:C2:18:D6:3D:5B:80:31:D6:25:31:DB:BC:12:88:36:82:E3
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial: 0CDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number: 0CCD
Signing time: Tue 28 Jul 2026 18:38:58 +0000
Manifest this update: Tue 28 Jul 2026 18:38:57 +0000
Manifest next update: Tue 04 Aug 2026 18:38:57 +0000
Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: q3NhmAm9krhWFe3wKly8VvQLyKeFhNADPsEphjHpJdE=)
2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: 0ylwtp+Xde2oLtmDBX2li5EHhsIVUZ6el50n4zuRj9M=)
3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3295 (0xcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Validity
Not Before: Jul 28 18:38:57 2026 GMT
Not After : Aug 4 18:38:57 2026 GMT
Subject: CN=6a68f742-f66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:b9:eb:28:f3:ff:31:68:6c:f8:5f:34:47:
a1:49:a7:8e:7c:6b:bd:f0:71:fe:48:8a:0d:64:5a:
91:fc:66:ec:e8:ef:d3:d5:d5:29:46:57:de:fc:e1:
ff:47:da:f9:66:18:e9:09:39:00:c2:49:95:75:8f:
85:99:ed:b9:35:30:78:07:8f:43:37:b1:7f:7d:88:
e3:18:a2:ba:7f:66:e3:14:bd:bf:66:93:2f:e7:b7:
0e:b9:92:3e:18:e5:51:bd:e7:2b:1f:d7:8e:ae:ea:
11:da:38:a0:f2:5d:09:35:2f:24:b1:79:0f:ce:9f:
07:85:19:a9:49:61:8a:cd:b9:04:21:50:3d:36:77:
e0:7d:83:55:bd:69:56:1d:60:c8:4d:56:8a:2d:f0:
2d:ca:73:8a:2d:b1:f2:c7:d5:a3:39:5a:d1:18:21:
03:29:51:f2:64:66:01:81:55:25:51:7e:0a:d6:3d:
e3:6b:3f:7d:93:1a:77:ac:7a:90:df:da:c7:e3:45:
6b:25:ed:34:01:7e:1b:a0:60:6c:be:8d:57:60:b8:
c1:fe:56:f7:51:28:e5:20:6d:3a:00:b5:1d:0c:6f:
81:c7:f3:e6:54:bb:d4:ac:e0:97:32:5d:6a:81:fa:
4d:e6:53:10:cc:b6:a4:66:13:a3:8c:de:99:ce:ba:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:EC:C2:18:D6:3D:5B:80:31:D6:25:31:DB:BC:12:88:36:82:E3
X509v3 Authority Key Identifier:
keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a3:f1:8c:29:ee:22:15:8e:72:1b:e0:d4:01:84:55:03:3e:
91:50:72:c1:a7:14:bb:ad:8c:6b:84:d9:b5:2f:b4:8f:46:0c:
bf:08:14:e3:9c:17:70:1a:cf:9c:52:b2:c3:a3:bb:ad:d2:0e:
5a:d1:26:28:2f:d7:ce:07:86:35:93:ca:a7:81:eb:1b:df:cd:
a1:8d:43:47:eb:21:27:ca:6b:5c:f9:9e:18:2c:92:50:61:ef:
6f:47:19:cb:a9:bd:6a:32:dd:c1:ad:3c:35:e9:14:20:88:b9:
0e:86:11:b2:16:d8:2d:33:0a:d2:e6:ad:35:bb:fc:f9:5a:62:
bc:a1:8f:b9:fc:57:b9:74:f8:98:c2:d9:2a:73:19:e8:90:0a:
71:3f:88:f7:5f:77:db:e9:de:57:14:5d:58:8c:25:84:0f:78:
9e:f3:c7:0f:27:0d:fb:5c:92:68:0d:df:b2:e8:49:83:57:1d:
9b:29:9c:0c:0d:51:ed:df:7b:0d:95:97:51:09:64:34:ab:a1:
ff:8f:3a:e5:cb:58:d3:8d:a5:2b:3b:48:9a:17:f9:bf:6b:78:
a3:fb:a3:51:9c:3e:a6:a3:07:34:00:ab:57:ff:d4:84:54:81:
e6:8c:97:fc:ba:87:09:05:62:03:3e:ab:73:95:82:9f:14:38:
5b:39:1f:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJCNUQxMTAvBgNVBAUTKDkwRTgxNTQyMDY0M0I1REQ2MzkxMjgzRDY3NzQ0QTNB
QkEzMDcyRDMwHhcNMjYwNzI4MTgzODU3WhcNMjYwODA0MTgzODU3WjAYMRYwFAYD
VQQDEw02YTY4Zjc0Mi1mNjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyxy56yjz/zFobPhfNEehSaeOfGu98HH+SIoNZFqR/Gbs6O/T1dUpRlfe/OH/
R9r5ZhjpCTkAwkmVdY+Fme25NTB4B49DN7F/fYjjGKK6f2bjFL2/ZpMv57cOuZI+
GOVRvecrH9eOruoR2jig8l0JNS8ksXkPzp8HhRmpSWGKzbkEIVA9NnfgfYNVvWlW
HWDITVaKLfAtynOKLbHyx9WjOVrRGCEDKVHyZGYBgVUlUX4K1j3jaz99kxp3rHqQ
39rH40VrJe00AX4boGBsvo1XYLjB/lb3USjlIG06ALUdDG+Bx/PmVLvUrOCXMl1q
gfpN5lMQzLakZhOjjN6ZzrrzuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjv7MIY
1j1bgDHWJTHbvBKINoLjMB8GA1UdIwQYMBaAFJDoFUIGQ7XdY5EoPWd0Sjq6MHLT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkI1RC9GMDI3Q0RCNDE0
RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRkMWprU2c5WjNSS09yb3dj
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tPZ1ZRZ1pEdGQxamtTZzlaM1JLT3Jvd2N0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkI1RC9GMDI3Q0RCNDE0RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRk
MWprU2c5WjNSS09yb3djdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe6PxjCnuIhWOchvg1AGEVQM+kVBywacUu62Ma4TZtS+0j0YMvwgU45wXcBrP
nFKyw6O7rdIOWtEmKC/XzgeGNZPKp4HrG9/NoY1DR+shJ8prXPmeGCySUGHvb0cZ
y6m9ajLdwa08NekUIIi5DoYRshbYLTMK0uatNbv8+VpivKGPufxXuXT4mMLZKnMZ
6JAKcT+I91932+neVxRdWIwlhA94nvPHDycN+1ySaA3fsuhJg1cdmymcDA1R7d97
DZWXUQlkNKuh/4865ctY042lKztImhf5v2t4o/ujUZw+pqMHNACrV//UhFSB5oyX
/LqHCQViAz6rc5WCnxQ4Wzkf/w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:34 2026 by rpki-client