
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
File: oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft (raw, json)
Hash identifier: tAObEl0WsGYB9+PHuk3p3tZfeWdJGlqgCfbBZg8yuBA=
Subject key identifier: CD:12:2A:0B:10:01:87:F3:69:53:0F:65:A0:08:77:EC:F6:CE:75:20
Authority key identifier: A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F
Certificate issuer: /CN=A9159558/serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
Manifest number: 2F
Signing time: Mon 27 Jul 2026 11:03:13 +0000
Manifest this update: Mon 27 Jul 2026 11:03:13 +0000
Manifest next update: Mon 03 Aug 2026 11:03:13 +0000
Files and hashes: 1: oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl (hash: IWwLAxTMwQmNK/nyzplyQfoyYncj5GKj2PLeGbISnf0=)
2: C8482E4C435C11F18454B6E5B6833773.roa (hash: kpOLgyl4KEGTvF971USy71Gh3dYWWDj9RJbZtYOEjJg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl
rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159558, serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F
Validity
Not Before: Jul 27 11:03:13 2026 GMT
Not After : Aug 3 11:03:13 2026 GMT
Subject: CN=6a673af1-774a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:81:e8:dc:a5:c1:0b:3e:8b:ce:1c:61:72:
6a:48:5f:b7:7b:e5:91:02:86:2f:1d:67:05:9f:50:
e5:84:fc:aa:ae:97:07:74:df:3d:19:7c:6a:ef:fe:
71:a9:d4:11:34:66:1a:e8:83:85:01:c9:a1:09:7d:
b7:1f:f7:45:06:ba:22:45:9e:89:4c:6a:94:0c:20:
77:b5:94:ef:dd:c6:fe:62:97:eb:7b:65:25:b5:6b:
7d:f5:8b:1f:c6:8d:d0:b2:42:8d:01:11:e2:4a:17:
44:0e:4a:21:b4:fb:b4:ed:63:1e:37:91:30:92:bf:
4d:dd:6f:a6:82:03:02:53:8b:c5:36:10:c1:e4:14:
69:ce:57:6e:dc:f1:43:af:41:64:fa:0b:da:66:1d:
96:d0:79:80:fb:bd:7a:ac:43:a1:20:33:66:17:d0:
96:55:89:a9:e8:65:47:c7:b2:cd:be:95:67:03:35:
27:f3:23:7b:76:98:23:06:d9:c2:a2:64:39:ba:14:
4c:4e:1a:6f:60:0a:00:7e:d4:11:9c:35:46:18:c3:
2b:39:fd:6f:66:47:35:0a:53:fc:a5:c8:f3:b9:24:
cf:dd:51:0c:64:cb:b6:2e:90:03:5e:d5:13:74:43:
c0:15:de:b4:a9:96:0a:2e:df:81:5a:4e:ac:99:78:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:2A:0B:10:01:87:F3:69:53:0F:65:A0:08:77:EC:F6:CE:75:20
X509v3 Authority Key Identifier:
keyid:A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:56:a9:e6:07:a5:34:db:4a:57:44:8f:db:47:02:8c:09:f5:
54:03:94:62:5d:f8:f4:f4:10:a3:9c:e4:cf:b5:39:03:c9:9d:
46:07:ee:22:d8:b5:fd:3a:4b:ab:c0:ba:da:b5:0a:4f:01:dc:
13:9d:34:87:c7:29:ea:33:e1:a0:18:28:75:76:dc:72:c6:87:
6b:37:3a:67:c4:31:fd:72:a3:de:08:d9:4e:0d:0d:69:54:e8:
42:2f:07:87:7f:7b:d4:75:4a:2d:f8:6a:12:87:40:5a:e0:a3:
9b:65:7a:0a:0e:4e:e3:61:36:0c:a3:b0:38:70:0e:f0:17:b6:
30:db:f1:9a:06:12:5d:1b:22:b7:1d:dc:85:a4:a8:06:b6:33:
0b:e6:af:b8:08:6e:dd:0c:c1:0b:8f:83:c5:48:5b:38:00:7c:
71:34:a4:90:01:20:6b:0f:fd:83:42:86:6a:79:00:14:3a:7b:
8b:93:0c:24:7f:57:aa:4d:cb:56:e8:df:13:2c:68:48:eb:f4:
48:00:19:a7:09:c4:01:4c:5e:2a:3f:8d:5a:4f:17:1b:20:fe:
73:ea:54:a9:fc:20:6d:0e:99:0d:8e:13:4a:5e:ca:32:5f:89:
7f:f2:0d:4e:ee:2d:c8:0f:fb:2b:b0:fc:91:7e:97:f9:bf:a2:
80:b7:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:03:35 2026 by rpki-client