
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json)
Hash identifier: NZ9rkYHT/rmrcapNWzUZBXLeLEvDB5scW6dPw6ZOIqU=
Subject key identifier: 0E:48:86:DB:1C:98:B1:0C:94:7A:A8:46:BB:0E:E3:45:AB:EE:03:E1
Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Certificate serial: 015F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
Manifest number: 0156
Signing time: Wed 15 Apr 2026 04:38:26 +0000
Manifest this update: Wed 15 Apr 2026 04:38:26 +0000
Manifest next update: Wed 22 Apr 2026 04:38:26 +0000
Files and hashes: 1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: iH/j6NAfklABX8v4jL+qhk9S0HWUPYNupbWjTG7mBKQ=)
2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: 2Z5IzjJNdD4kG65ZpOb5f1Ky7VDv275TeVLHGASGOqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 04:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Validity
Not Before: Apr 15 04:38:26 2026 GMT
Not After : Apr 22 04:38:26 2026 GMT
Subject: CN=69df1642-4f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:d4:22:94:5e:d9:24:ad:64:89:db:18:cc:
07:14:54:a7:1a:47:09:f8:0f:d2:1e:cb:75:ac:a4:
b8:f7:ae:11:f7:56:b5:ca:6d:df:fa:ed:86:65:27:
db:8d:f1:53:3f:bc:13:26:1c:51:00:fa:5e:ba:b9:
29:dc:d8:7c:b6:e1:94:8c:85:99:46:7b:65:aa:2f:
50:0e:17:91:3e:c7:a3:3d:c0:ec:be:1c:87:cc:21:
65:06:d8:a2:74:0f:77:dc:bc:d5:4e:96:bb:d6:c6:
48:fd:59:eb:02:06:fe:e4:5b:c4:4c:99:5c:dc:7e:
9d:2d:ac:fe:b5:88:cb:69:ea:ac:f9:c5:0e:08:d8:
f4:fc:21:44:3c:fa:4d:85:7e:e5:2b:6f:90:cb:56:
62:16:d7:48:8f:b9:41:e9:bc:75:db:9b:58:ff:a8:
4e:10:51:b0:39:74:3e:78:ad:8d:70:22:b7:f5:1c:
55:42:9c:45:9d:af:23:bb:eb:9e:2b:06:de:21:e7:
49:79:fb:ff:fc:4d:c5:0d:30:61:7b:05:71:82:b8:
2f:86:e5:49:3d:b4:6f:bc:53:b2:25:e9:d3:6b:2a:
6c:ac:08:4a:6a:5c:b9:90:e6:38:d9:77:40:e2:32:
91:6a:3a:22:1d:29:a4:81:07:3e:2e:25:eb:8d:23:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:48:86:DB:1C:98:B1:0C:94:7A:A8:46:BB:0E:E3:45:AB:EE:03:E1
X509v3 Authority Key Identifier:
keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:ec:e3:ee:40:37:9a:ca:d1:5d:02:4a:8e:12:33:a6:62:f3:
6a:71:65:5e:7b:16:64:b7:26:e7:aa:85:40:29:c0:e8:3d:2f:
d0:25:29:48:34:67:01:18:26:68:e8:2f:c8:20:41:99:e5:4c:
32:5c:ad:93:c7:51:8e:ee:3d:32:45:b8:73:14:e2:8b:03:2a:
68:72:55:fb:4c:f5:f2:3f:2c:d7:50:39:7d:ca:70:4e:8e:eb:
36:58:c9:01:7e:01:65:75:e7:ad:10:f4:4c:11:91:77:a8:b7:
b7:a8:85:d0:e6:9f:ce:c9:8c:85:91:d1:7d:9c:91:17:60:a8:
4d:aa:6c:89:d1:2f:87:fa:ef:85:63:20:6a:ef:e6:88:ce:04:
9a:71:d2:d0:57:7a:81:da:9f:af:be:d0:ee:e2:e3:7f:dd:06:
b1:2c:46:22:27:eb:4a:11:1a:1c:88:dc:c5:84:d2:7b:db:3b:
18:cc:1a:23:51:9f:c6:0b:21:46:db:fa:5e:c2:23:4b:33:81:
72:36:dd:5a:1f:c5:cc:ab:51:1d:bc:dd:e4:62:41:31:93:cc:
9f:90:36:cb:78:29:a1:bc:4b:d0:e0:3a:7e:67:c6:ad:f0:b7:
8c:b1:75:f5:ab:5a:32:b7:a8:6f:65:f5:b6:88:08:1e:8d:d0:
8f:51:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:56 2026 by rpki-client