
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json)
Hash identifier: 1UJG/RcKtovzYuGs2VbZ5+qvT1xc77MrilBKrUTtv30=
Subject key identifier: 0A:E2:88:8C:87:87:7D:C3:78:CB:C3:38:7C:A6:6E:D3:D8:8C:EE:59
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial: 0A69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
Manifest number: 0A55
Signing time: Mon 02 Mar 2026 01:12:05 +0000
Manifest this update: Mon 02 Mar 2026 01:12:03 +0000
Manifest next update: Mon 09 Mar 2026 01:12:03 +0000
Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: 5rDzE/vojgNvLrM89QuWG1cu0f/3+k3Kc0lf8IFPawI=)
2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: +xcD+XJAzMs34Apsat7Enhn+9h/kEqw5O2ozBTodW3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2665 (0xa69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Validity
Not Before: Mar 2 01:12:03 2026 GMT
Not After : Mar 9 01:12:03 2026 GMT
Subject: CN=69a4e3e5-af48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:19:1a:5c:d8:75:36:c9:f0:54:37:43:89:
ec:5e:18:97:c1:36:5b:45:2e:20:50:f4:e9:0c:07:
33:32:65:20:82:f1:8b:2c:26:e8:2a:b1:97:0f:a0:
e4:4c:99:8e:62:8b:0c:eb:a1:ce:f2:88:70:2c:9c:
1a:16:cd:08:4f:4c:d2:e4:e2:2d:58:98:ff:ba:09:
fd:b7:79:61:b8:10:82:1b:31:25:c1:61:62:cc:d3:
09:f5:11:a6:a1:72:bb:e1:ba:08:1f:02:d5:84:e8:
a0:ba:37:e5:d0:9a:f6:95:6a:2f:98:90:64:f8:a9:
df:cd:38:bf:cd:a2:a5:d8:59:1d:33:12:20:af:94:
b3:e1:c7:76:2a:9a:e1:07:8c:dd:f5:93:48:3f:6e:
02:2d:d1:38:2f:a9:91:90:69:f1:81:7e:e5:36:29:
61:83:39:6e:cd:82:4d:de:d4:43:ee:8b:53:50:6d:
c7:a3:43:0c:ee:cb:0c:0f:e6:4a:fc:a8:1e:5d:0c:
4a:1f:56:cf:c5:fa:ab:09:7a:b4:f0:2f:ae:ad:6a:
d8:fc:c2:2a:88:8e:fa:6f:64:5f:7f:8b:cc:60:62:
a8:b2:aa:c5:90:53:a5:c9:be:9f:83:dd:85:dc:46:
b3:2c:3d:22:bd:e6:f3:10:84:2b:2d:aa:87:e0:9d:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E2:88:8C:87:87:7D:C3:78:CB:C3:38:7C:A6:6E:D3:D8:8C:EE:59
X509v3 Authority Key Identifier:
keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:40:b0:0f:dc:29:71:77:2e:b8:21:c2:74:7f:9e:95:0b:17:
26:ad:bc:40:af:61:a4:61:0e:9e:c5:c5:8b:77:8f:04:3e:2f:
29:39:4f:29:f0:a7:47:70:99:f1:3a:5f:61:fe:f1:6d:01:06:
4e:c6:8c:05:2a:14:a7:5a:58:44:ab:ef:d4:82:2f:a2:57:aa:
de:73:47:09:7d:07:01:e0:cf:49:6e:7f:c3:f2:fd:fa:29:e7:
b5:e0:00:42:7a:c7:4b:34:e3:1b:ff:d3:af:73:66:9b:c6:28:
c1:ed:d6:27:14:c4:01:31:5d:90:dd:d3:42:34:65:28:1d:d9:
30:52:81:b8:8c:34:99:b5:bd:82:e0:ce:f6:09:8f:85:96:58:
eb:cd:fb:3f:f0:b9:20:5d:b4:27:4b:4a:56:07:16:5e:6b:ca:
26:40:7c:72:e0:26:4b:dd:84:f0:59:38:c0:09:68:fe:84:e0:
2f:a8:6d:8c:41:c4:0c:6f:ec:05:af:e6:90:02:6c:cc:15:e0:
76:18:92:e0:77:98:4f:93:2c:67:f1:59:bb:4b:1a:85:29:71:
53:44:f5:4d:80:ae:2c:af:fb:64:32:c3:73:0a:b6:68:c8:2f:
4f:ac:c0:c7:b4:7b:66:d5:6e:c7:88:3a:74:7e:9d:91:0c:51:
03:4e:61:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:21 2026 by rpki-client