
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json)
Hash identifier: Df9g3V2KTcsdtL8+vMYWLUNb/72S3LPOGUJ56lbQFY4=
Subject key identifier: B8:F3:28:EE:0D:24:90:F4:66:19:98:D7:FA:5C:44:D7:D4:86:0F:47
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial: 0A81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
Manifest number: 0A6D
Signing time: Thu 16 Apr 2026 19:33:53 +0000
Manifest this update: Thu 16 Apr 2026 19:33:53 +0000
Manifest next update: Thu 23 Apr 2026 19:33:53 +0000
Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: g2vDo2C9FVGcHwTeLzSyLi+HcSmKQWqvIJqKtUPVV7M=)
2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: +xcD+XJAzMs34Apsat7Enhn+9h/kEqw5O2ozBTodW3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2689 (0xa81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Validity
Not Before: Apr 16 19:33:53 2026 GMT
Not After : Apr 23 19:33:53 2026 GMT
Subject: CN=69e139a1-085d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:b8:a2:43:3a:e6:7a:f6:03:a9:32:72:41:
07:c3:df:91:7e:f5:b7:5b:78:47:b8:7c:4f:c2:1d:
c2:a1:84:24:18:66:1e:22:ed:8f:62:3e:15:41:42:
a7:22:ac:d5:d0:b1:9f:6e:1d:9b:25:3b:a6:a3:4a:
3e:df:a1:67:79:1a:3a:60:b5:2e:6e:2f:e6:0c:ed:
09:db:04:d5:ff:74:35:97:66:6a:77:91:ce:5d:28:
73:c5:11:90:e6:93:4a:58:01:5e:37:2a:2a:43:65:
52:2e:83:17:05:7b:e7:4d:05:9f:3c:10:86:cd:dc:
72:84:c3:b5:23:f4:84:9b:a6:f8:fb:d6:a3:18:32:
68:15:b3:a8:8f:74:61:41:51:bf:aa:3a:85:42:2a:
6a:7b:ff:de:68:38:fc:aa:31:9e:41:89:e4:52:0e:
b9:69:eb:a2:d8:8a:78:60:f1:47:da:26:ee:16:45:
65:13:47:be:75:ea:09:01:08:f5:75:7c:78:49:02:
79:bd:7f:fe:04:7d:1a:cf:49:37:56:2e:c4:36:2d:
7f:60:fc:17:17:7e:ea:83:01:86:88:c1:0e:82:37:
01:9a:9b:53:cd:a8:2f:2b:cf:16:a3:e6:fb:8d:f7:
3c:6f:c8:32:21:f9:09:30:ee:df:a8:62:5d:39:c5:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:28:EE:0D:24:90:F4:66:19:98:D7:FA:5C:44:D7:D4:86:0F:47
X509v3 Authority Key Identifier:
keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c4:3c:7a:5f:6e:3d:ac:0e:99:5e:0e:07:7a:81:b3:98:af:
ad:b1:e1:f4:0c:e0:0d:4a:bf:a4:70:ac:05:d4:61:31:04:f7:
4d:f9:9e:3e:44:3c:a9:55:c2:9a:6d:c5:5a:b3:f8:52:fd:9a:
71:45:61:34:91:c6:73:21:3d:c1:7c:8c:80:f4:41:94:97:4f:
43:fe:fd:64:2c:38:dc:56:c0:cd:38:a2:9f:7b:6d:07:96:46:
42:27:87:24:09:be:0a:78:60:aa:77:91:a0:3d:0e:52:68:b7:
c9:8c:2a:8c:31:ec:5b:2a:72:6a:6a:0c:fe:b3:20:bd:fd:16:
7a:29:b8:0b:f4:5a:0e:84:d5:e3:01:aa:e3:d2:3a:6b:b5:35:
9b:ec:86:6a:90:fa:de:3c:73:55:c7:9f:02:f7:07:ad:c1:ee:
30:fa:26:50:e1:ec:e9:cc:de:d4:e2:da:7c:a2:4e:30:6d:11:
df:76:b9:fa:13:6e:14:5a:3f:2c:f6:7d:e0:ef:4d:23:17:05:
e9:0c:cf:5f:84:6d:a6:7b:ad:9c:99:c2:5a:27:19:98:b0:a5:
83:79:e3:1d:e1:a8:f2:c7:a1:9e:ad:87:85:ab:b3:3c:0f:03:
f2:6a:36:29:57:b3:c0:ab:5b:22:b2:cd:18:c3:48:44:1a:b1:
f2:5b:c7:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEzQkUxMTAvBgNVBAUTKEExMDYwMzMwMkJGRUM4MkEwN0Y4QzVENDJFNDU4Qjc2
QzVGRjkxQTQwHhcNMjYwNDE2MTkzMzUzWhcNMjYwNDIzMTkzMzUzWjAYMRYwFAYD
VQQDEw02OWUxMzlhMS0wODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuxy4okM65nr2A6kyckEHw9+RfvW3W3hHuHxPwh3CoYQkGGYeIu2PYj4VQUKn
IqzV0LGfbh2bJTumo0o+36FneRo6YLUubi/mDO0J2wTV/3Q1l2Zqd5HOXShzxRGQ
5pNKWAFeNyoqQ2VSLoMXBXvnTQWfPBCGzdxyhMO1I/SEm6b4+9ajGDJoFbOoj3Rh
QVG/qjqFQipqe//eaDj8qjGeQYnkUg65aeui2Ip4YPFH2ibuFkVlE0e+deoJAQj1
dXx4SQJ5vX/+BH0az0k3Vi7ENi1/YPwXF37qgwGGiMEOgjcBmptTzagvK88Wo+b7
jfc8b8gyIfkJMO7fqGJdOcV/3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjzKO4N
JJD0ZhmY1/pcRNfUhg9HMB8GA1UdIwQYMBaAFKEGAzAr/sgqB/jF1C5Fi3bF/5Gk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNCRS84OUI0RjY3ODg0
MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlDb0gtTVhVTGtXTGRzWF9r
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29RWURNQ3YteUNvSC1NWFVMa1dMZHNYX2thUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTNCRS84OUI0RjY3ODg0MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlD
b0gtTVhVTGtXTGRzWF9rYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATsQ8el9uPawOmV4OB3qBs5ivrbHh9AzgDUq/pHCsBdRhMQT3TfmePkQ8qVXC
mm3FWrP4Uv2acUVhNJHGcyE9wXyMgPRBlJdPQ/79ZCw43FbAzTiin3ttB5ZGQieH
JAm+CnhgqneRoD0OUmi3yYwqjDHsWypyamoM/rMgvf0Weim4C/RaDoTV4wGq49I6
a7U1m+yGapD63jxzVcefAvcHrcHuMPomUOHs6cze1OLafKJOMG0R33a5+hNuFFo/
LPZ94O9NIxcF6QzPX4RtpnutnJnCWicZmLClg3njHeGo8sehnq2HhauzPA8D8mo2
KVezwKtbIrLNGMNIRBqx8lvHqg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:11 2026 by rpki-client