
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json)
Hash identifier: UeDcGLonuRxhe0tP4Fuhz2BqMFMmlHckQvgyXiLTJEk=
Subject key identifier: 3F:D1:81:84:25:64:8D:CA:A5:35:3C:6B:3E:F9:9E:62:C2:85:55:27
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial: 0A9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
Manifest number: 0A8A
Signing time: Fri 12 Jun 2026 19:37:21 +0000
Manifest this update: Fri 12 Jun 2026 19:37:21 +0000
Manifest next update: Fri 19 Jun 2026 19:37:21 +0000
Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: xigcYOmIh0MoGYuc3cYj0vcAvfa7PMaleQJo1TsplnQ=)
2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: +xcD+XJAzMs34Apsat7Enhn+9h/kEqw5O2ozBTodW3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2718 (0xa9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Validity
Not Before: Jun 12 19:37:21 2026 GMT
Not After : Jun 19 19:37:21 2026 GMT
Subject: CN=6a2c5ff1-45dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:46:59:bb:8a:d6:0a:98:3c:0c:d3:89:1a:
a0:fd:15:6f:32:7c:14:bc:38:99:87:ed:f3:70:78:
dc:88:a4:5e:f3:5d:c0:1f:ec:a0:78:c1:01:75:eb:
c5:30:9a:de:71:62:a0:df:07:11:4f:ce:7c:ed:61:
48:aa:b0:9f:b7:27:be:f3:e1:2b:0f:18:ea:62:bd:
7a:89:5e:da:13:c9:d2:59:5e:ad:51:12:10:03:71:
17:2f:80:32:1d:65:04:ef:c2:dc:5b:54:c5:21:42:
40:aa:23:8d:52:9c:95:90:d4:30:6c:ca:8d:76:e5:
08:6b:a2:48:6a:1c:a9:c9:ea:f9:92:c5:b9:ae:c7:
8d:61:47:18:72:a5:1c:9b:61:62:2c:25:8b:79:a1:
78:fe:88:d1:51:8f:9f:63:0c:a9:e3:9c:f9:1f:98:
80:a6:33:a3:26:e7:2e:b1:6a:0f:52:18:fe:d6:e6:
3c:b7:52:11:bb:91:f7:17:9e:8a:74:ef:db:5b:17:
97:f5:44:d1:a9:07:4b:de:85:c4:83:90:64:32:e1:
c1:b3:26:bf:d6:d8:05:e5:61:71:fd:78:2c:2d:5c:
b7:d4:82:94:b5:a2:12:34:2f:20:7e:35:61:53:06:
7b:1f:d7:e9:58:32:2b:f4:73:3a:b5:c6:b1:a8:b5:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:81:84:25:64:8D:CA:A5:35:3C:6B:3E:F9:9E:62:C2:85:55:27
X509v3 Authority Key Identifier:
keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:7f:92:1f:8b:3c:db:ae:e5:23:27:dd:a6:5a:48:b0:8e:d6:
0c:72:a5:26:ab:d3:ce:2c:95:d4:b0:e8:56:30:bc:d3:30:7f:
4a:a2:82:27:b1:d7:e5:6c:23:65:50:ed:69:ac:94:a6:e2:6d:
ef:c0:48:04:d9:f8:d4:04:fa:2b:77:1c:42:76:0d:21:ae:b6:
d5:59:ef:ce:c1:c4:4c:d8:f4:38:03:a6:af:8f:7c:e4:36:55:
c2:a8:1c:29:56:d7:33:c4:8f:36:f3:e5:1b:80:3e:bc:b3:14:
03:08:45:db:c3:76:54:ad:03:84:b0:1c:c6:2b:e4:4e:74:41:
d8:9a:bd:eb:e1:18:06:df:e0:26:9f:c7:95:aa:69:75:89:b2:
f6:c6:07:59:91:ea:1b:7f:cb:e2:3c:4e:e3:be:b2:47:e4:e7:
b0:42:f8:23:de:01:e6:51:a3:09:ef:71:26:74:8e:e1:f7:71:
6e:ef:a1:6d:1c:e9:f6:2f:a9:b6:4e:0c:d4:e6:ff:07:32:12:
fc:28:a5:4f:3f:78:6c:58:d0:f6:1e:5e:7b:58:73:1a:0e:fe:
47:cf:12:34:cf:c7:f6:c5:dd:63:76:6e:b5:2f:59:5c:94:0f:
4d:05:fb:4a:8b:d6:61:b6:84:19:21:b5:b1:a2:4c:46:3a:1a:
29:37:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:56:03 2026 by rpki-client