
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json)
Hash identifier: L3i5Aq/0W26HSSzWWqnquWOnWeNYmAZMeRqL/hZiVuI=
Subject key identifier: 02:DE:18:61:6E:67:C3:24:0D:E6:59:99:7E:45:6E:8B:09:9C:BA:84
Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Certificate serial: 0390
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
Manifest number: 038A
Signing time: Sun 01 Mar 2026 01:19:07 +0000
Manifest this update: Sun 01 Mar 2026 01:19:06 +0000
Manifest next update: Sun 08 Mar 2026 01:19:06 +0000
Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: brzBd+Z1OEzYjsjGOou5KosWlV/ztZuTbS3C2p5ZCKw=)
2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: Utn78ATYCOJD2s8KH2tHbQkxop0M2VDIkapS9+XLIf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Validity
Not Before: Mar 1 01:19:06 2026 GMT
Not After : Mar 8 01:19:06 2026 GMT
Subject: CN=69a3940b-0f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fc:16:cd:43:b7:78:d2:19:5e:bb:a8:d9:91:
93:0f:a2:0e:77:c3:e9:20:1c:34:64:48:f4:b8:47:
dc:eb:0b:d6:6b:9e:60:d9:e7:78:56:d0:87:f5:bc:
3b:ca:11:ca:af:c4:03:81:e6:93:e0:00:fc:04:b0:
e3:55:b0:1d:d8:48:75:63:0a:d9:73:1d:49:94:18:
0a:03:64:65:1b:52:fd:58:1a:2f:52:20:59:0d:cd:
fc:ea:f2:08:68:72:13:81:76:f8:55:be:24:d0:ea:
b3:93:c3:26:33:0d:7b:9b:18:dc:25:10:d5:c3:32:
a2:c3:b5:c1:c6:07:ee:a6:90:c1:83:bd:da:db:57:
7b:10:0b:52:3b:fe:56:ff:f3:5f:4b:e5:38:66:07:
c7:5d:f7:b6:11:81:ae:4d:7e:36:fd:d4:d1:21:93:
82:31:ac:53:09:86:d8:bc:46:0d:32:2d:79:10:76:
a7:39:0e:d7:97:9d:30:48:3d:63:75:73:bc:b1:2b:
ec:4f:35:08:0e:9b:d3:4e:d7:a7:11:f8:be:69:4c:
a8:4b:e2:ee:7d:7c:93:f0:19:51:4f:c4:cc:e6:ec:
63:8a:dd:ee:d8:0d:52:6c:0b:3e:f3:5f:9d:8c:80:
c0:b3:b4:26:d7:67:42:a7:17:5d:cc:83:0b:a4:c3:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DE:18:61:6E:67:C3:24:0D:E6:59:99:7E:45:6E:8B:09:9C:BA:84
X509v3 Authority Key Identifier:
keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2b:b7:cd:96:4c:42:1e:61:96:c7:08:c3:23:2b:d1:3b:99:
62:bf:b3:a7:02:78:75:04:db:61:73:f9:5d:ac:58:87:55:64:
fd:0c:db:a7:e6:5f:fe:5a:8b:4e:bb:2d:40:5f:8c:c5:8c:ee:
dc:5b:00:99:5e:f2:19:71:1b:f1:c9:01:c7:06:74:ca:60:ff:
b0:1e:cc:f9:3b:9d:2b:c4:1f:d7:50:80:cb:d9:08:7a:59:03:
78:79:ef:4f:b5:6a:2f:eb:22:77:db:b2:b2:f9:c7:c2:a1:9c:
cc:e5:76:a0:e4:29:be:52:ce:ae:a9:3f:e3:e4:39:28:1d:bf:
be:2f:a2:90:de:d2:4c:26:d9:9a:63:5c:b5:03:a4:c5:83:97:
e2:19:6f:78:29:13:fb:68:a7:b9:88:69:8f:01:36:69:03:46:
a8:67:e6:4e:4d:e2:46:e2:ab:ed:27:8c:d0:75:ab:d5:7e:58:
57:d4:ed:f3:2b:8c:fb:f3:7e:fd:dc:b4:9b:4b:a1:93:0a:0b:
d1:08:58:44:09:c0:56:1b:58:48:79:36:13:30:1d:76:ae:0f:
58:ed:62:98:f2:8f:e3:f8:ab:7c:3c:4a:bf:08:a4:15:d9:47:
74:96:02:bf:85:c0:a6:19:15:5c:1d:11:96:c5:d7:d0:c8:f6:
7a:dd:55:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:54 2026 by rpki-client