
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
File: OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json)
Hash identifier: F2U2W/8yhGQXelc/vHOYdaF10Afk3OZq/ckrkS0RbjU=
Subject key identifier: 7C:AF:47:A0:A9:65:07:C0:69:9D:CD:67:0F:34:4F:DA:2B:A0:80:25
Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Certificate issuer: /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
Manifest number: 0226
Signing time: Fri 17 Apr 2026 02:30:26 +0000
Manifest this update: Fri 17 Apr 2026 02:30:25 +0000
Manifest next update: Fri 24 Apr 2026 02:30:25 +0000
Files and hashes: 1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: QO4jpeg5ewEMx1poNReoD7BkSUKFLRDZhu7H7jrXuQo=)
2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: PQd/8cl7exmw5LNAxBVE8+5SKezKc679UfwN3IJFrBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Validity
Not Before: Apr 17 02:30:25 2026 GMT
Not After : Apr 24 02:30:25 2026 GMT
Subject: CN=69e19b41-e04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:bc:b9:3d:dd:a9:6c:1e:e2:6f:9a:5f:93:
77:74:73:97:c7:d6:8b:f9:3a:4e:b9:f1:26:63:7b:
24:0c:a8:a1:ea:2a:87:68:2b:17:ee:91:6b:8d:4d:
61:96:f2:c6:e3:fe:52:68:3d:10:5e:88:27:0d:c0:
74:36:1b:bd:e9:98:fe:ce:03:e1:27:37:54:22:c4:
fa:5a:3c:b7:cf:2e:2e:65:99:86:67:2b:a7:4c:1b:
f5:05:56:23:3f:37:68:b3:5d:11:13:de:79:40:e6:
4c:db:93:7e:a0:75:f5:0a:9f:36:ee:f1:c9:a2:b2:
8f:aa:bd:7c:f2:a4:cc:d5:7c:bb:86:b9:b1:d3:90:
fe:2f:52:b9:0f:3c:e3:28:26:db:75:27:2b:4d:1b:
c7:6b:28:7e:e0:29:37:6a:12:71:dd:a7:77:a8:31:
ef:bd:8c:2b:58:d3:d6:7f:52:82:72:83:19:11:77:
95:a6:e3:c6:4e:41:82:03:9e:b6:83:c8:cb:f2:16:
b0:9d:d9:b6:2e:4c:40:95:59:f6:99:29:cd:a2:aa:
49:8c:0f:b2:9f:dd:dc:64:bc:5f:e7:d7:f1:5d:d8:
8d:63:67:12:ba:ea:16:2f:a0:45:a2:a4:eb:6a:34:
9d:d2:2a:28:eb:52:d5:71:75:22:d7:9f:71:e8:c9:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AF:47:A0:A9:65:07:C0:69:9D:CD:67:0F:34:4F:DA:2B:A0:80:25
X509v3 Authority Key Identifier:
keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:08:ab:8f:6a:99:75:0e:e7:b1:e6:52:25:23:0d:7a:d3:af:
43:8d:91:66:d3:e1:99:06:33:38:b4:7e:0d:b5:50:d1:97:f5:
6c:60:d8:8b:e5:e3:d8:6c:0d:f2:c1:1b:23:d3:9d:54:51:f5:
1d:7b:96:d7:a2:f9:5a:98:b2:4f:94:dc:49:0c:78:44:59:70:
e0:18:f3:d3:17:bf:8a:92:d6:44:14:76:21:f7:9f:e3:6e:60:
53:17:22:3d:94:0b:46:a4:20:d4:7a:66:55:1d:2c:1e:03:68:
15:15:5c:66:86:db:ec:75:f3:1b:8e:e4:1f:35:73:5f:20:75:
d4:ab:bc:49:04:08:cc:5d:ed:7b:ae:c2:98:d4:3b:68:aa:fd:
69:c7:96:d9:af:d0:b7:7c:40:9d:30:e9:87:fb:32:de:a6:2a:
df:e0:72:f6:bb:59:2b:51:1b:6e:f7:d1:11:e3:3d:bd:fc:f5:
0b:b7:41:d8:4f:dd:5e:e6:38:2a:95:24:6a:38:5e:b2:f8:73:
01:ab:48:2e:4f:dc:30:30:75:2c:0e:4a:94:0b:50:9b:ff:18:
51:58:00:45:17:39:95:db:7a:fa:89:01:c8:49:ec:cc:82:11:
59:36:fd:10:fe:b7:9e:2a:74:73:c2:66:7e:4c:6b:2e:11:af:
8f:b3:a6:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE1MzMxMTAvBgNVBAUTKDNBQTVBQ0E1NUM3QjM1RTNGOTIyQkJCOERBQUIxRDdE
ODg3MEUzNzMwHhcNMjYwNDE3MDIzMDI1WhcNMjYwNDI0MDIzMDI1WjAYMRYwFAYD
VQQDEw02OWUxOWI0MS1lMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlGW8uT3dqWwe4m+aX5N3dHOXx9aL+TpOufEmY3skDKih6iqHaCsX7pFrjU1h
lvLG4/5SaD0QXognDcB0Nhu96Zj+zgPhJzdUIsT6Wjy3zy4uZZmGZyunTBv1BVYj
Pzdos10RE955QOZM25N+oHX1Cp827vHJorKPqr188qTM1Xy7hrmx05D+L1K5Dzzj
KCbbdScrTRvHayh+4Ck3ahJx3ad3qDHvvYwrWNPWf1KCcoMZEXeVpuPGTkGCA562
g8jL8hawndm2LkxAlVn2mSnNoqpJjA+yn93cZLxf59fxXdiNY2cSuuoWL6BFoqTr
ajSd0ioo61LVcXUi159x6Mk9AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHyvR6Cp
ZQfAaZ3NZw80T9oroIAlMB8GA1UdIwQYMBaAFDqlrKVcezXj+SK7uNqrHX2IcONz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTUzMy80MDI5OTc4QUY4
N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05lUDVJcnU0MnFzZGZZaHc0
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09xV3NwVng3TmVQNUlydTQycXNkZllodzQzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTUzMy80MDI5OTc4QUY4N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05l
UDVJcnU0MnFzZGZZaHc0M00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAugirj2qZdQ7nseZSJSMNetOvQ42RZtPhmQYzOLR+DbVQ0Zf1bGDYi+Xj2GwN
8sEbI9OdVFH1HXuW16L5WpiyT5TcSQx4RFlw4Bjz0xe/ipLWRBR2Ifef425gUxci
PZQLRqQg1HpmVR0sHgNoFRVcZobb7HXzG47kHzVzXyB11Ku8SQQIzF3te67CmNQ7
aKr9aceW2a/Qt3xAnTDph/sy3qYq3+By9rtZK1EbbvfREeM9vfz1C7dB2E/dXuY4
KpUkajhesvhzAatILk/cMDB1LA5KlAtQm/8YUVgARRc5ldt6+okByEnszIIRWTb9
EP63nip0c8JmfkxrLhGvj7OmFA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:56 2026 by rpki-client