
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier: URurT1XKwD5aaaOFxpsNqJMP6GXSSsSFiIeHl5zb0aA=
Subject key identifier: 4B:F5:91:6F:E4:64:75:B9:B4:90:46:79:A2:D2:B8:BE:B6:5E:ED:E7
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number: 0162
Signing time: Mon 02 Mar 2026 01:09:03 +0000
Manifest this update: Mon 02 Mar 2026 01:09:00 +0000
Manifest next update: Mon 09 Mar 2026 01:09:00 +0000
Files and hashes: 1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: CMmTugop0wE/ebf95Vrp/hPAJCtoUH0DBvv3XcOwt4g=)
2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: W7D/CE6bwRnzbpMvwdGdNhRCXEBo9prgW8s4Z6/gD9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Validity
Not Before: Mar 2 01:09:00 2026 GMT
Not After : Mar 9 01:09:00 2026 GMT
Subject: CN=69a4e32f-9140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:af:5d:3e:36:30:a1:21:3e:85:97:7d:c2:
58:7d:26:fb:73:5f:b2:b5:eb:bd:92:d0:dd:03:85:
93:c7:44:17:fe:1c:c8:2f:76:51:70:d1:1a:99:48:
f1:22:5b:5f:3e:cb:da:87:e2:ac:7a:69:d7:73:19:
f1:dc:fb:54:53:bf:27:86:a8:cc:c0:22:04:85:1d:
e5:71:c4:23:8c:1d:2e:fe:5c:7f:b4:f4:13:c3:75:
97:6e:c9:8a:39:a8:0a:7a:13:7f:ac:3c:e2:6b:b0:
a4:70:2c:18:3e:68:92:ab:6b:d4:f2:a9:34:29:31:
b1:53:df:88:ec:cb:ce:a1:2b:eb:67:8b:48:b3:76:
2a:94:41:92:bc:53:09:0c:29:e0:31:e9:9e:84:ac:
40:bd:7a:30:b7:07:83:5f:dc:a4:f4:ba:3a:11:6a:
9a:53:b2:51:ed:ea:4a:6b:01:6b:7c:89:2d:96:e6:
81:5e:7e:77:3b:06:00:9a:8f:49:b1:e5:48:1e:00:
08:5f:76:4d:6c:1f:d9:a5:91:0d:6b:c2:ec:f5:87:
d0:9c:7d:3b:80:66:35:f0:dd:ec:40:f5:9c:38:c3:
a2:58:46:c1:2e:75:45:b0:7e:3f:6e:e3:a6:93:dd:
b8:de:ba:28:00:61:bb:11:82:1d:70:62:4f:a6:2a:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F5:91:6F:E4:64:75:B9:B4:90:46:79:A2:D2:B8:BE:B6:5E:ED:E7
X509v3 Authority Key Identifier:
keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:e9:88:18:13:db:dd:32:77:23:9e:e7:94:77:b1:2c:14:5d:
aa:1a:93:42:44:3f:d3:22:5c:25:97:55:88:b1:1c:55:df:fb:
39:a5:68:28:5d:3d:2f:a3:85:5d:78:6b:31:0b:59:1c:69:66:
9b:d5:dc:bf:a4:a2:96:fa:87:e6:46:5d:49:56:eb:fd:ce:58:
0a:86:ce:e3:c9:97:fd:92:00:4b:37:84:18:b9:89:b5:c8:34:
7b:ba:c0:7d:05:b7:ab:0d:5d:e6:a1:ca:21:77:64:60:c1:58:
2b:e6:3b:df:59:d0:eb:4c:b4:67:13:8a:f0:10:f4:be:f5:30:
e2:ea:e5:8c:17:8b:e6:c5:6b:5f:c1:03:e2:63:58:5f:4a:81:
c4:40:d5:fd:8a:71:ae:17:75:a0:40:19:a8:ab:88:18:8a:0f:
3b:6e:04:7f:dc:89:89:46:73:bf:14:10:d6:7d:86:56:8e:00:
e6:42:81:b0:4e:d8:8b:f6:31:71:5a:ba:d0:39:1e:e3:d4:3c:
74:40:e6:2f:7e:fe:b8:df:bf:29:01:02:ec:05:9c:39:05:00:
ed:c0:50:6d:6f:9d:b2:35:cc:8e:99:28:e4:71:42:33:0b:9d:
93:3e:37:19:c6:fe:9a:c4:be:4c:eb:ed:6f:1e:4a:a0:43:34:
45:32:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:13 2026 by rpki-client