
$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
File: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json)
Hash identifier: sIqdW3NjtB81MjBftkI1qshSOR1fHYZS94ZajxJ6hCM=
Subject key identifier: 73:15:DD:CB:2A:E6:26:F5:05:F7:A8:FB:F1:7A:74:1D:D4:89:2D:DF
Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
Manifest number: 0151
Signing time: Sun 01 Mar 2026 06:10:15 +0000
Manifest this update: Sun 01 Mar 2026 06:10:14 +0000
Manifest next update: Sun 08 Mar 2026 06:10:14 +0000
Files and hashes: 1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: CKIjJlL5trpt2V9Jyi+39N7ilF08jnBm8h73neZWaLc=)
2: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: plwquzGEufYRwcQHYEN82Q8mZBEqW77cccbW7b/Z0qA=)
3: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: bZZXWh+x6zyd1WkvfmUOQBDbu8rzUDtizJ6UDEgwLU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Validity
Not Before: Mar 1 06:10:14 2026 GMT
Not After : Mar 8 06:10:14 2026 GMT
Subject: CN=69a3d846-7f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:50:a2:86:f4:27:11:fe:79:e0:1b:f9:40:
fe:50:f1:3a:af:ae:9e:85:73:6e:f2:cf:3a:b7:67:
14:67:e5:b0:71:bc:45:0e:a2:ac:46:17:30:81:d7:
6d:63:13:a6:9e:df:16:88:b5:d3:7a:ae:41:7e:c0:
b8:9c:43:62:01:38:1c:06:73:4d:f2:7c:6e:f8:b1:
2a:1e:a7:40:3d:a5:de:56:b9:f8:fc:38:1a:98:ef:
53:6b:1b:3a:59:ad:c3:b9:79:ff:ea:cc:3c:0f:7f:
95:5d:7e:59:75:9a:da:c3:4b:d5:e2:6b:8f:6e:5e:
47:8b:cf:86:83:e9:a6:81:51:c5:95:b4:ca:ea:21:
20:69:b5:f0:ce:3a:46:4d:89:7e:a7:93:46:0d:2f:
96:70:0a:85:9e:c1:a3:e9:5e:56:92:20:ec:25:3a:
83:9c:3a:1c:8a:b2:4e:c8:48:a9:51:53:4b:71:6a:
55:60:2e:d5:9d:28:6b:96:43:ad:a8:00:a6:a0:4a:
70:ee:35:fe:83:41:28:6b:42:8c:e4:31:1b:6a:0d:
8a:86:de:7f:c9:b4:fa:8d:cc:3a:74:6c:ac:be:5f:
f1:f0:5e:d3:09:e8:71:4b:5f:0d:72:24:bc:02:01:
2c:f9:ac:96:f3:58:b4:98:0d:ad:46:28:45:a8:5f:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:15:DD:CB:2A:E6:26:F5:05:F7:A8:FB:F1:7A:74:1D:D4:89:2D:DF
X509v3 Authority Key Identifier:
keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b2:a7:b3:c0:28:ff:47:b5:29:a3:3e:fa:e9:cf:e4:ab:36:
fe:a5:be:b6:d2:18:9f:66:b7:32:f6:9c:62:c5:cc:bb:05:75:
19:50:41:bd:87:42:a7:d1:e8:69:34:22:dc:2d:0f:2b:03:87:
9f:f7:4c:3e:ee:b3:b9:cd:ba:f1:cf:7c:a4:4b:5a:4e:d3:9e:
28:c5:0b:03:31:89:4a:02:1d:de:2a:b4:20:09:6b:da:4f:d1:
ba:cc:27:71:b8:ab:a4:2c:69:62:6a:70:ea:bc:5c:2f:b0:ff:
c3:5e:90:bd:2c:f9:f2:29:b4:dd:1c:3e:5d:48:30:9e:18:e8:
1d:8c:64:b2:28:92:5d:f0:93:fc:39:f8:3c:8e:eb:8f:71:54:
a9:bc:b5:9c:a0:8e:66:36:d0:af:46:4c:af:a7:c1:0e:04:b9:
5a:cc:aa:f2:06:b0:ae:18:52:3e:6c:dc:af:13:63:cd:d5:9c:
31:df:4c:67:4f:26:b4:af:ce:81:65:71:50:ef:9d:75:85:dd:
41:4d:3c:1a:8f:e3:a5:9d:de:f2:bf:22:d6:ad:68:4a:4f:32:
b9:12:18:32:e0:13:23:11:0c:85:cc:67:41:a9:6c:48:a7:0f:
46:ca:78:bf:16:cb:71:6c:6f:66:2c:ed:b8:f0:1a:16:71:5d:
e8:ba:ec:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:39:35 2026 by rpki-client