
$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json)
Hash identifier: bj/3xwKsPe/m244JjH3i+0jXVg/43JWwsPRiWf9Hn24=
Subject key identifier: 15:6E:97:6A:A8:0F:13:9D:D6:24:B5:D6:C7:9D:39:18:D7:F8:46:50
Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
Manifest number: 01C2
Signing time: Sun 01 Mar 2026 23:39:34 +0000
Manifest this update: Sun 01 Mar 2026 23:39:32 +0000
Manifest next update: Sun 08 Mar 2026 23:39:32 +0000
Files and hashes: 1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: suighjh7kpZijHI0uUJ+A6Nn5H/w3nQZg+Wbsr+SyrQ=)
2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: 0I41scQnlQoDdFvVFzcCFfoeGZFnCbRneF/j1Qm629c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Validity
Not Before: Mar 1 23:39:32 2026 GMT
Not After : Mar 8 23:39:32 2026 GMT
Subject: CN=69a4ce35-f663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:40:b2:8f:22:6e:f3:25:c3:7c:1d:f8:35:
ec:99:69:dd:4f:77:2b:41:ce:36:98:2c:9f:73:85:
45:d7:ee:d4:56:32:17:a9:6e:1d:30:72:87:9d:7b:
b6:b3:65:40:74:58:10:2d:02:04:8b:ba:49:b4:54:
df:0c:a1:ad:4b:a0:89:a0:fd:7f:4a:c1:d4:3a:e0:
6e:35:06:16:61:62:c5:a2:f8:e7:57:33:b6:6f:37:
ca:6e:69:f0:6c:69:47:be:af:18:c1:f7:cd:ce:f1:
13:d9:30:02:e9:47:7d:52:45:e5:a5:0e:03:75:ff:
48:b5:5a:c2:d8:19:e7:31:c1:be:29:c6:eb:1a:24:
29:73:4a:aa:e8:6d:88:56:4b:8b:ad:5c:c5:72:1e:
ba:93:33:62:a3:d3:66:ee:63:b2:80:14:b9:eb:ef:
c4:a8:b6:60:0e:a9:ee:34:7b:38:81:8c:6a:5b:6e:
b3:df:1f:94:4b:50:b9:1f:47:31:fe:2d:f0:cc:41:
54:18:3d:c3:77:89:e3:6b:b8:35:be:70:f3:58:91:
26:f5:22:f8:ec:c4:27:f5:bb:ae:9f:62:89:e1:21:
9b:31:0d:aa:e2:ec:ee:d4:30:bf:aa:3f:0b:91:29:
b9:ca:07:0c:26:83:a7:b3:f4:17:15:67:99:49:eb:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6E:97:6A:A8:0F:13:9D:D6:24:B5:D6:C7:9D:39:18:D7:F8:46:50
X509v3 Authority Key Identifier:
keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:1e:0c:55:8e:39:36:5a:30:1b:db:55:cf:dd:ee:e9:4f:52:
0c:35:e2:02:79:60:3a:e0:4e:96:d9:c0:12:b0:02:cf:2f:71:
92:49:b9:ed:4d:35:41:c9:73:ac:c9:d4:f4:0a:95:23:5f:7b:
59:66:0f:f6:fe:4d:7a:bb:97:cf:32:3b:af:18:2d:9c:0b:3e:
91:97:1f:ee:41:21:10:62:da:2e:92:b9:d9:94:8f:22:77:11:
32:03:a6:2b:c8:94:c1:f1:95:7e:fb:21:e3:61:f6:b3:e0:31:
2e:44:ed:e1:ba:7c:b8:d3:52:c5:58:47:d1:c3:d3:f6:4c:50:
65:fa:ad:0e:88:f2:f2:5d:1b:3e:d9:86:9e:d9:ae:8f:f0:7c:
e7:57:82:e5:5b:df:38:74:5c:97:e6:a0:c2:7d:90:ff:97:ca:
4e:08:de:93:45:57:53:7f:8d:cb:3f:d5:1f:d7:b9:f6:e7:91:
9e:70:76:04:15:6c:3b:36:50:e3:80:3b:23:cd:07:6f:32:e3:
05:5d:a0:b8:50:5e:c5:ee:aa:6f:1c:78:5c:e2:86:61:d1:f5:
67:25:7a:ac:91:86:d6:d5:89:02:ff:17:f1:be:5d:91:4d:10:
74:c9:97:b5:c4:3d:55:3f:b1:14:67:58:fe:7b:82:29:3b:fd:
b4:53:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:26 2026 by rpki-client