
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
File: OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json)
Hash identifier: A5vwzl+yKETbXak1NAmkwSnI7b2F8jXpoyJGSUC4KpY=
Subject key identifier: 3C:77:21:C7:31:7E:72:BB:EB:87:77:27:E0:BE:BA:9A:7B:82:F5:CA
Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Certificate issuer: /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
Manifest number: 020E
Signing time: Mon 02 Mar 2026 02:09:20 +0000
Manifest this update: Mon 02 Mar 2026 02:09:18 +0000
Manifest next update: Mon 09 Mar 2026 02:09:18 +0000
Files and hashes: 1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: vGyG7OEi9P5ovDPhH7Uh8mzxlP8uHjAJIRRnlH8qN5Q=)
2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: PQd/8cl7exmw5LNAxBVE8+5SKezKc679UfwN3IJFrBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Validity
Not Before: Mar 2 02:09:18 2026 GMT
Not After : Mar 9 02:09:18 2026 GMT
Subject: CN=69a4f150-fc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:69:58:96:93:a4:40:7b:a1:b1:37:9f:39:
a5:7c:b1:83:5d:8f:e4:77:c7:2c:e2:ff:f1:21:b4:
bf:73:da:ee:7e:5b:93:48:c9:58:c1:5c:80:23:5c:
95:a2:f6:b9:70:71:f4:93:7e:54:b6:79:ad:7c:6d:
a8:cb:92:e8:d7:2b:a8:2f:2b:d4:5c:da:e6:da:46:
b3:f0:fb:65:86:dd:68:17:ca:c3:a2:74:14:71:96:
51:cf:3c:cf:fd:4c:55:f7:57:7a:d5:ae:ec:29:01:
46:fd:d5:7a:5a:d2:0d:b7:0f:40:f7:ee:c6:4f:d5:
97:bc:16:1c:c2:27:41:b1:2e:32:72:5b:a4:9c:1a:
8d:9b:3b:e0:88:62:fb:ed:44:a9:65:7e:9b:4c:f4:
93:18:1b:26:81:0c:d0:f6:75:dc:48:60:2b:ad:13:
01:34:dc:7f:15:46:cc:4d:35:41:1d:4b:55:41:d4:
67:dc:ba:10:c1:ca:0c:00:4f:dc:b3:0b:40:ef:f6:
b0:ab:96:86:c1:b1:1a:af:b7:7e:7b:58:c9:29:82:
be:8b:62:6d:a7:19:07:bf:68:70:73:83:f3:f8:0f:
94:d0:70:04:7b:65:57:dc:53:f9:6b:ef:67:cc:b4:
4d:c5:f6:76:26:15:5c:ce:cd:43:4c:45:59:cb:e5:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:77:21:C7:31:7E:72:BB:EB:87:77:27:E0:BE:BA:9A:7B:82:F5:CA
X509v3 Authority Key Identifier:
keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:68:3c:42:b2:e4:5f:4b:13:d8:f6:e9:f6:2a:11:6d:fb:f5:
b4:2e:be:0d:3c:80:a3:cc:60:3e:53:da:4f:1e:d9:0a:e7:ee:
7c:37:ad:93:d1:ef:31:4f:1a:e6:34:1c:b8:59:bf:17:02:60:
ac:a4:9f:a7:54:99:f3:ac:65:b9:72:92:e3:0e:dc:c4:69:0c:
be:db:8b:ff:16:c1:81:16:59:2f:45:7d:71:d5:a3:42:37:f6:
f4:e7:77:2b:17:f3:23:5d:7d:1b:e8:45:0a:25:67:f8:20:44:
33:04:ed:0f:1e:31:94:e4:28:14:41:e3:71:45:71:f3:73:e2:
41:76:e6:04:80:3e:55:fe:24:26:9b:99:e2:7c:d1:0d:94:e8:
38:3e:30:38:79:33:06:db:0d:72:4c:3e:3d:16:07:34:d8:da:
e8:33:07:fa:2a:f0:02:f9:27:56:3b:64:12:f4:ef:65:6d:9b:
71:1b:85:44:12:94:51:ef:98:b1:2a:ba:f6:be:5e:e5:bb:8f:
ab:4d:1f:38:3f:50:1f:07:ca:56:a9:f9:16:d4:26:53:e0:5d:
84:aa:a4:d0:7b:59:c4:c7:79:89:3d:54:23:9e:74:2a:1c:60:
f5:e5:d6:7b:1c:99:02:40:f0:fc:cd:9b:27:0e:9b:41:56:76:
5f:d3:88:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE1MzMxMTAvBgNVBAUTKDNBQTVBQ0E1NUM3QjM1RTNGOTIyQkJCOERBQUIxRDdE
ODg3MEUzNzMwHhcNMjYwMzAyMDIwOTE4WhcNMjYwMzA5MDIwOTE4WjAYMRYwFAYD
VQQDEw02OWE0ZjE1MC1mYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz45pWJaTpEB7obE3nzmlfLGDXY/kd8cs4v/xIbS/c9rufluTSMlYwVyAI1yV
ova5cHH0k35UtnmtfG2oy5Lo1yuoLyvUXNrm2kaz8Ptlht1oF8rDonQUcZZRzzzP
/UxV91d61a7sKQFG/dV6WtINtw9A9+7GT9WXvBYcwidBsS4ycluknBqNmzvgiGL7
7USpZX6bTPSTGBsmgQzQ9nXcSGArrRMBNNx/FUbMTTVBHUtVQdRn3LoQwcoMAE/c
swtA7/awq5aGwbEar7d+e1jJKYK+i2JtpxkHv2hwc4Pz+A+U0HAEe2VX3FP5a+9n
zLRNxfZ2JhVczs1DTEVZy+UiRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDx3Iccx
fnK764d3J+C+upp7gvXKMB8GA1UdIwQYMBaAFDqlrKVcezXj+SK7uNqrHX2IcONz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTUzMy80MDI5OTc4QUY4
N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05lUDVJcnU0MnFzZGZZaHc0
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09xV3NwVng3TmVQNUlydTQycXNkZllodzQzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTUzMy80MDI5OTc4QUY4N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05l
UDVJcnU0MnFzZGZZaHc0M00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeGg8QrLkX0sT2Pbp9ioRbfv1tC6+DTyAo8xgPlPaTx7ZCufufDetk9HvMU8a
5jQcuFm/FwJgrKSfp1SZ86xluXKS4w7cxGkMvtuL/xbBgRZZL0V9cdWjQjf29Od3
KxfzI119G+hFCiVn+CBEMwTtDx4xlOQoFEHjcUVx83PiQXbmBIA+Vf4kJpuZ4nzR
DZToOD4wOHkzBtsNckw+PRYHNNja6DMH+irwAvknVjtkEvTvZW2bcRuFRBKUUe+Y
sSq69r5e5buPq00fOD9QHwfKVqn5FtQmU+BdhKqk0HtZxMd5iT1UI550Khxg9eXW
exyZAkDw/M2bJw6bQVZ2X9OI1A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:41 2026 by rpki-client