
$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft
File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json)
Hash identifier: WcZgPPfiqKFGumlzsfJoaQ4MT7wCKS54IEk4Ny/MVPE=
Subject key identifier: 49:88:18:E7:36:AA:E6:E7:B7:D6:4A:CD:17:9C:FD:A9:F8:D3:89:E9
Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04
Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804
Certificate serial: 0E60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft
Manifest number: 0E50
Signing time: Tue 28 Jul 2026 17:53:39 +0000
Manifest this update: Tue 28 Jul 2026 17:53:39 +0000
Manifest next update: Tue 04 Aug 2026 17:53:39 +0000
Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: xAdKrLruZfvAKfH0rc/GnofFk4k1uYq8yx4pgGD6Xms=)
2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: SKoROXW9CuXa5cRiDNUDX/4Tb8dZn6LAdzs1mwVKND0=)
3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: nbXF9K4to2LuEPQSJW4J/x772YkxMatEHSBdH9bhwIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl
rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3680 (0xe60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804
Validity
Not Before: Jul 28 17:53:39 2026 GMT
Not After : Aug 4 17:53:39 2026 GMT
Subject: CN=6a68eca3-b301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:14:1c:37:a1:09:4d:af:fa:e4:53:93:ca:
2a:af:43:b7:54:2c:2a:35:10:90:d2:f2:3c:d9:74:
bc:9a:3d:7b:20:78:b2:45:9f:45:37:40:44:3b:a7:
55:bd:77:82:f8:b1:f6:b8:5e:f5:26:c6:6b:88:ff:
3d:02:1a:7d:01:e5:c5:37:b0:a5:db:7b:f1:bd:a2:
46:c2:d6:6a:20:4d:c6:6c:30:a4:8c:56:3a:e7:3a:
03:cc:98:10:41:f5:f3:ee:d8:35:c9:dd:3b:af:55:
92:28:fb:1a:57:68:01:d2:84:30:cd:91:bc:2c:81:
0a:93:de:70:ac:fd:48:74:e1:66:b9:86:34:94:7c:
46:72:e2:d5:8d:39:01:72:d3:23:c3:8d:c8:cd:3e:
27:22:8c:60:e0:ab:f1:d7:9e:58:97:8a:2c:a5:2d:
63:75:4c:9a:2b:5c:ea:d2:6f:a1:17:a0:28:59:dc:
00:da:a4:92:fe:db:62:55:fa:6a:76:79:da:ec:62:
23:52:2d:67:14:af:09:c6:72:26:2f:8c:20:20:cd:
18:37:53:7b:8b:46:ec:c6:be:4f:1f:f0:4f:5c:1b:
7a:72:f7:18:65:7d:b2:21:ef:e1:68:f1:a7:1d:c7:
db:61:fe:33:ff:24:c7:f8:3a:d4:b4:78:62:75:4f:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:88:18:E7:36:AA:E6:E7:B7:D6:4A:CD:17:9C:FD:A9:F8:D3:89:E9
X509v3 Authority Key Identifier:
keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:d2:66:b4:85:d6:73:3e:b0:cc:58:f1:17:bc:46:0a:a0:03:
d5:45:ae:8e:a2:be:57:cd:9e:16:e5:7a:71:0c:93:a0:1c:b5:
df:37:fc:97:92:ca:06:54:a1:5b:f2:df:74:10:93:cf:49:e4:
35:97:5f:d3:7d:c2:7d:f5:2f:f9:9c:11:ee:7e:82:1f:5d:0c:
c8:e5:c7:2d:75:f1:92:b2:7d:5f:c1:bb:39:7e:54:24:1e:89:
18:3b:14:6c:f6:76:00:4c:6e:48:e9:14:d3:bd:d7:ea:59:3a:
70:fc:00:c6:fc:9e:33:80:6d:b8:a7:eb:00:25:cd:b4:2f:0a:
49:36:86:2b:3a:fe:f8:99:1f:45:77:5e:da:b3:c9:dc:f2:a2:
57:60:12:1b:18:67:2d:17:15:c4:e5:a3:e5:39:d5:4a:b9:19:
fe:4c:a5:62:46:cb:0a:a4:39:fd:a7:ad:50:46:f8:70:3b:9c:
0f:bb:d4:15:5d:0a:7a:66:04:1e:96:54:b3:6a:c0:6b:c0:df:
08:54:98:a4:21:d6:8c:46:33:2e:ad:68:ee:9b:8b:54:2a:f5:
16:b0:30:e9:ed:73:5c:a7:14:fd:01:c5:1b:8c:b4:ff:cc:7e:
62:6e:c6:a5:89:ca:cb:d4:33:10:ce:12:fe:d6:c4:cd:d3:60:
b4:d2:e9:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND
NDlBMTY4MDQwHhcNMjYwNzI4MTc1MzM5WhcNMjYwODA0MTc1MzM5WjAYMRYwFAYD
VQQDEw02YTY4ZWNhMy1iMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7BIUHDehCU2v+uRTk8oqr0O3VCwqNRCQ0vI82XS8mj17IHiyRZ9FN0BEO6dV
vXeC+LH2uF71JsZriP89Ahp9AeXFN7Cl23vxvaJGwtZqIE3GbDCkjFY65zoDzJgQ
QfXz7tg1yd07r1WSKPsaV2gB0oQwzZG8LIEKk95wrP1IdOFmuYY0lHxGcuLVjTkB
ctMjw43IzT4nIoxg4Kvx155Yl4ospS1jdUyaK1zq0m+hF6AoWdwA2qSS/ttiVfpq
dnna7GIjUi1nFK8JxnImL4wgIM0YN1N7i0bsxr5PH/BPXBt6cvcYZX2yIe/haPGn
HcfbYf4z/yTH+DrUtHhidU+2rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmIGOc2
qubnt9ZKzRec/an404npMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5
OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1
d1E4aUxlN05tblBFbWhhQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ9JmtIXWcz6wzFjxF7xGCqAD1UWujqK+V82eFuV6cQyToBy13zf8l5LKBlSh
W/LfdBCTz0nkNZdf033CffUv+ZwR7n6CH10MyOXHLXXxkrJ9X8G7OX5UJB6JGDsU
bPZ2AExuSOkU073X6lk6cPwAxvyeM4BtuKfrACXNtC8KSTaGKzr++JkfRXde2rPJ
3PKiV2ASGxhnLRcVxOWj5TnVSrkZ/kylYkbLCqQ5/aetUEb4cDucD7vUFV0KemYE
HpZUs2rAa8DfCFSYpCHWjEYzLq1o7puLVCr1FrAw6e1zXKcU/QHFG4y0/8x+Ym7G
pYnKy9QzEM4S/tbEzdNgtNLpsA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:21:51 2026 by rpki-client