
$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json)
Hash identifier: ZAm1bI7QvtNubgIjBKlt6vNhs5dmWyGKdYKC/XwTXe4=
Subject key identifier: 7E:A7:11:7B:AE:DD:88:6F:E6:4D:32:EB:36:C7:6E:6F:61:A8:0D:75
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial: 02CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
Manifest number: 02BC
Signing time: Wed 29 Jul 2026 02:26:23 +0000
Manifest this update: Wed 29 Jul 2026 02:26:23 +0000
Manifest next update: Wed 05 Aug 2026 02:26:23 +0000
Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: gHtg7nxaE/j+lvEYdtkI7EvUX+JWOx/vsSjhghHgdDg=)
2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: 99MSdD0Bt5MeBMSX17ngnXwJ7ZzUJ4PBVC3nYuIVduQ=)
3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: wHMAYibew+x1AYfuE7BluYMkxk01iW8RsGQGMAVOxuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Validity
Not Before: Jul 29 02:26:23 2026 GMT
Not After : Aug 5 02:26:23 2026 GMT
Subject: CN=6a6964cf-64fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:d9:20:be:85:e9:59:96:70:62:34:ac:6a:
d9:41:a4:05:8f:0d:51:cc:f1:87:93:8e:9d:2b:9c:
e3:80:9e:90:8a:b8:7f:8d:c8:f5:b1:e8:f7:17:31:
49:d3:4a:b7:dc:77:72:9d:56:c2:a8:dc:d6:4f:d8:
07:21:ae:b8:88:c9:db:68:56:4f:52:99:7e:fa:5a:
78:c3:f6:b4:77:cd:93:77:93:13:06:b9:57:bb:b8:
5b:65:f7:d9:e8:f7:73:a9:24:5b:17:1e:0d:f6:55:
43:7a:ed:a6:96:e5:8d:2a:3f:7b:bb:72:7d:5b:b1:
91:c3:9f:94:25:42:78:bf:94:17:ae:6f:03:3d:a8:
5a:fb:eb:70:fa:d0:6a:ca:c3:ef:d0:62:28:ff:1b:
da:0e:10:19:43:65:45:ce:88:af:f0:bd:66:24:03:
3b:bf:b7:fe:ff:cb:19:13:63:9a:d6:fd:99:32:d9:
3e:98:b1:ce:d9:94:76:b3:78:14:e6:51:01:af:60:
53:97:4b:39:4a:d8:fa:7c:bd:48:1c:f5:2b:fe:07:
49:d2:3c:73:f2:ea:7d:fc:fe:83:ee:06:76:d9:06:
5b:7c:03:3e:75:7d:d3:eb:69:5d:33:b5:67:53:22:
8c:9e:6b:42:18:f1:1e:37:37:b5:9b:6f:67:d8:1f:
a1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:11:7B:AE:DD:88:6F:E6:4D:32:EB:36:C7:6E:6F:61:A8:0D:75
X509v3 Authority Key Identifier:
keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:db:31:a7:18:ad:de:40:aa:41:d3:08:22:9d:04:67:16:55:
e0:28:03:b1:55:5c:51:99:fb:97:2d:fa:6a:9c:6f:c7:a6:9a:
bf:98:bc:6b:73:65:ab:54:5d:ee:ba:84:2b:36:db:4f:b9:80:
40:be:5b:34:f9:97:a1:07:b1:5c:41:9b:59:9f:56:d2:b1:95:
ca:33:96:a9:17:71:44:9d:38:cf:e6:38:4f:6e:c1:13:ae:76:
13:ef:2c:08:fa:30:76:b2:ba:f7:f6:da:da:d2:fc:73:02:15:
23:84:56:5c:f7:31:4d:93:ca:37:ad:fc:d3:8b:a5:ea:98:b3:
a6:62:8a:fc:30:6d:e0:2f:75:9c:a6:8c:44:9d:31:d1:b2:9c:
93:d1:5f:ae:12:55:51:fc:e8:60:1f:47:8e:fd:17:4b:cb:f8:
63:ec:ba:07:df:4c:27:32:21:68:3c:23:68:aa:e2:29:25:8c:
f5:8a:61:9c:b7:13:4d:cc:96:ec:2a:11:ff:bf:3c:76:69:71:
77:16:70:10:3f:70:35:30:cd:ef:de:4b:65:68:04:0b:23:2f:
8e:15:3d:44:af:f1:54:1d:75:ce:14:e4:57:c4:c7:86:01:1d:
ef:97:23:e4:4d:41:09:34:e1:5c:4b:26:a5:12:c2:24:4c:24:
38:bc:41:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:38 2026 by rpki-client