
$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json)
Hash identifier: exMPF3mFD5qerXwqUUjq23sSmnah+ZhP1xFNExtlDO4=
Subject key identifier: E9:D9:46:54:BC:15:DE:A2:11:E9:5D:6E:F7:54:B1:99:E1:D4:D9:4E
Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
Manifest number: 0257
Signing time: Mon 27 Jul 2026 03:42:21 +0000
Manifest this update: Mon 27 Jul 2026 03:42:20 +0000
Manifest next update: Mon 03 Aug 2026 03:42:20 +0000
Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: FUd6iGI5ypiHPTVbuHBXBBuCMtuKD5IzLiXR+wrvSpk=)
2: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: uOBgq1wqwkIdJF6l8fQkWsM2YOmgJUVNC/DA3LL3Uc0=)
3: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: f+SXz/7qnkULN0UO8ykoynDM3JBtbR5ZSL/l0DN40Vo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Validity
Not Before: Jul 27 03:42:20 2026 GMT
Not After : Aug 3 03:42:20 2026 GMT
Subject: CN=6a66d39d-da6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:26:c5:fb:d1:22:90:89:c0:97:31:67:94:
c4:b3:d7:02:13:77:30:6b:82:fd:e3:bf:8a:d6:7d:
a5:25:d9:69:d2:ec:02:3c:2f:38:e4:af:23:ad:cb:
69:cc:96:78:5f:87:bd:ef:29:0f:6d:e5:cd:7e:a0:
6b:67:9a:4a:cb:67:6b:77:19:4f:86:23:47:e5:2a:
d1:cc:79:e4:d0:7b:55:5e:55:fe:96:e1:74:57:f3:
be:a7:2a:33:ea:bf:0c:38:d0:67:71:53:89:66:5d:
1c:56:f8:09:c6:b3:49:3d:9b:c4:0f:15:f7:ce:25:
e7:17:4b:cf:0e:1d:0c:b6:47:dc:02:e0:90:06:ac:
19:27:3d:21:e0:58:38:51:21:cc:3d:7d:56:59:3b:
81:08:6e:c5:73:51:d6:ef:de:29:54:90:91:bc:c2:
c9:9b:6e:96:44:3d:28:c8:53:3c:f0:8a:f2:6c:3c:
35:70:01:61:58:09:79:9f:09:dd:ed:ac:b8:b1:23:
14:10:34:0b:42:9d:23:d0:62:f9:0c:e6:f2:f2:ba:
3f:61:48:b5:b0:3a:dc:ec:89:48:5c:69:5e:1d:07:
90:22:ea:05:f9:61:0c:48:d4:3d:d8:36:bd:89:94:
d5:db:dd:91:b7:a0:34:44:6c:76:60:35:d9:df:21:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D9:46:54:BC:15:DE:A2:11:E9:5D:6E:F7:54:B1:99:E1:D4:D9:4E
X509v3 Authority Key Identifier:
keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d3:23:d4:3e:7e:6c:f3:62:64:16:a7:da:ac:48:c5:36:80:
29:6a:a1:6b:e3:40:13:44:cc:79:9e:f6:13:52:8a:5b:da:a2:
12:ec:0c:e5:ff:53:44:52:52:17:c0:e7:fa:61:56:ec:ca:ff:
c4:4f:35:31:53:d6:7d:51:47:c6:3e:3a:c0:4e:68:22:6a:9b:
c4:e9:70:a3:80:40:3e:21:03:f2:87:48:47:18:89:4d:8d:b7:
59:94:e3:93:8d:97:7f:5d:d5:07:8f:34:46:56:ca:0b:9f:93:
e4:21:44:eb:ac:d5:14:0b:85:84:23:bf:19:25:24:b4:c7:09:
29:f9:9c:98:8e:c2:b1:13:47:5e:4f:18:8b:da:4c:a1:a4:37:
be:3c:40:62:2c:62:59:fb:f1:bc:fb:da:1b:5a:0f:6c:99:f0:
66:42:f7:49:17:f6:52:94:75:fc:9e:21:28:6d:bc:e3:bb:1c:
64:8f:58:c0:44:14:76:59:8d:7b:d1:96:f1:9d:31:e0:74:29:
70:cc:20:52:9b:14:d9:f0:c4:9d:06:24:e3:cb:8a:6a:d4:8b:
c2:db:a2:d0:a5:16:64:47:89:b6:24:bb:3a:71:e7:3e:8f:c5:
6f:1f:a2:0e:28:d0:f7:88:a0:b6:d1:e1:6b:bd:b6:b6:03:f2:
bf:5d:89:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:18:51 2026 by rpki-client