
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json)
Hash identifier: KvQPL4HHSZL2FCCR2CwDWG7MfMtVcZAGA7Dh6TQxYtc=
Subject key identifier: 61:97:D8:B3:B1:F6:26:86:B7:3D:30:AF:1E:A1:D7:AB:D9:3D:A1:5B
Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Certificate serial: 03E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
Manifest number: 03DA
Signing time: Mon 27 Jul 2026 01:17:31 +0000
Manifest this update: Mon 27 Jul 2026 01:17:31 +0000
Manifest next update: Mon 03 Aug 2026 01:17:31 +0000
Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: xqqrwhgfMYiiLDUDq+N9sJQjVMJ0lECqx+Um52F2Fw0=)
2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: zU41dHVA7lg5HqNGf7meOX/A+lf9KSiIpMkJ1tgmeCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996 (0x3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Validity
Not Before: Jul 27 01:17:31 2026 GMT
Not After : Aug 3 01:17:31 2026 GMT
Subject: CN=6a66b1ab-f3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:42:c0:96:5c:39:77:b1:fe:4d:ca:f9:ae:
13:e9:93:71:ec:fd:3f:71:ba:97:67:9c:ad:7f:0e:
9d:95:30:ea:dd:b5:38:ee:d1:d8:a4:4f:c4:71:80:
c0:99:cc:43:06:27:0e:ed:af:e5:c6:ce:8f:d9:e5:
a3:e0:50:26:8c:2d:71:a4:7e:aa:47:fa:74:91:3c:
ca:66:07:9d:69:1b:b6:63:5f:d6:b7:ec:2a:a1:42:
7b:b5:a4:4d:6d:ee:30:cc:73:ca:78:73:be:31:7c:
89:08:a8:1b:90:f2:b6:9e:98:a7:6d:d1:d1:66:93:
0f:ee:a0:7f:df:e3:27:9c:63:59:07:c2:7f:af:91:
5a:82:32:3f:dc:bf:cc:66:a0:03:44:68:0d:fc:a1:
5a:39:d5:bd:7c:de:e4:f1:2b:a9:57:71:3e:b7:42:
a6:c8:dd:44:a8:05:f6:7b:da:3a:a1:51:5f:8c:e7:
50:fb:78:5b:12:03:7e:c0:87:eb:60:d9:f1:a3:01:
e3:78:c8:1e:b0:fe:91:ed:45:d2:d7:4e:80:54:3a:
47:a2:96:cc:27:aa:a5:59:e1:85:af:83:60:4d:34:
69:c2:3a:68:e7:43:af:25:60:28:27:63:fd:5a:66:
c4:ad:73:bd:10:f0:ae:ef:22:fc:a6:ad:f8:00:91:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:97:D8:B3:B1:F6:26:86:B7:3D:30:AF:1E:A1:D7:AB:D9:3D:A1:5B
X509v3 Authority Key Identifier:
keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:79:de:49:71:3c:5c:79:e5:9e:8e:0e:68:0e:0b:40:99:
e9:f4:75:b4:46:3c:d0:b1:7a:04:4d:2d:c6:ee:2d:bd:7d:e8:
d6:1a:e9:d4:b3:4e:b8:ef:c5:5c:1e:e1:f9:a4:44:80:b4:cd:
66:2e:06:e0:8f:23:16:cf:b9:36:48:ed:08:d9:5b:f3:7f:7d:
b6:11:70:eb:5f:fd:65:20:54:c2:95:a7:31:a4:2d:10:c6:23:
e1:0a:7c:25:02:ed:70:96:bc:c7:78:ff:c6:a4:da:ee:de:d8:
bf:4f:c6:df:b7:ee:32:af:70:59:c6:db:cc:91:6c:ee:a0:87:
46:c8:d9:f5:5c:04:cd:02:9f:a6:e7:70:e0:5f:58:39:fa:22:
3b:21:7b:df:0e:06:ad:d8:15:85:45:bc:92:8c:a7:04:c9:31:
ce:5d:c4:3b:65:f6:c3:1c:b0:c9:c7:ce:30:11:d9:01:ed:f3:
f4:80:d2:3a:53:66:93:7a:76:25:4f:cb:e9:7d:83:4c:60:4d:
80:1d:c6:c8:9e:af:47:50:62:e9:e7:34:66:35:12:b9:5c:cb:
1f:b3:95:7f:ad:79:0d:d7:e0:0c:ce:8f:65:de:40:3c:74:be:
22:62:21:c2:a3:86:cb:c3:3c:ed:65:7b:36:32:c0:28:ba:1e:
c0:d1:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:50:20 2026 by rpki-client