
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json)
Hash identifier: dOXkE4kXEW4wg8AzwRLH0nKKda6esjjkLT9y0iPAb1M=
Subject key identifier: 12:08:9D:3B:DB:BF:70:A7:BC:7D:43:95:6F:19:B1:5F:73:A3:B2:B1
Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Certificate serial: 0716
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
Manifest number: 070C
Signing time: Tue 28 Jul 2026 22:40:19 +0000
Manifest this update: Tue 28 Jul 2026 22:40:18 +0000
Manifest next update: Tue 04 Aug 2026 22:40:18 +0000
Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: Mx8t28sGrh2S317OroJusxC4I0u9HozNPJvIap1s0ow=)
2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: q9bgMvnK3qUP2zl56LJjuP84FOdbbmO6f4ywuRFK3m0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl
rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814 (0x716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Validity
Not Before: Jul 28 22:40:18 2026 GMT
Not After : Aug 4 22:40:18 2026 GMT
Subject: CN=6a692fd3-c015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:3a:e3:aa:ce:38:16:cb:c3:69:16:18:10:
1d:54:1b:8d:b9:54:71:f1:56:91:d7:94:aa:ad:14:
9f:d9:d6:3b:66:10:8c:71:77:36:bc:89:43:18:99:
c6:7d:40:31:62:bc:a4:5b:bf:2e:19:f4:01:e7:e1:
1b:28:c9:24:a6:4c:f1:4e:89:ff:ed:69:99:4d:40:
2c:82:fa:6d:7c:ef:74:31:f3:98:f7:32:c1:ae:26:
a7:7a:76:64:58:b7:ea:9e:3b:69:a3:14:f3:71:d0:
dc:d0:42:05:7b:6b:af:8c:cf:3c:bf:97:d2:e7:80:
17:4e:09:c4:2a:b2:c1:a8:74:23:3b:7b:2f:db:d8:
02:c7:20:d4:53:e1:64:5b:70:03:a1:1e:62:8c:36:
3f:99:cb:2a:42:68:f6:9b:46:4c:9c:f2:d8:25:40:
28:13:44:8f:96:97:a1:98:08:a5:5d:ee:0b:bb:d4:
9b:bd:dd:66:6f:c7:25:b3:97:07:53:4b:bb:0d:18:
78:88:15:7e:da:21:aa:71:3f:9f:6a:0f:22:2a:23:
d9:78:f6:92:89:34:0e:5f:30:2f:e2:a1:8c:82:b9:
55:8d:98:b6:97:7f:c5:c6:27:98:e7:74:ef:ae:82:
28:2d:6b:68:8d:5c:a4:e7:dd:c2:97:84:e5:4e:68:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:08:9D:3B:DB:BF:70:A7:BC:7D:43:95:6F:19:B1:5F:73:A3:B2:B1
X509v3 Authority Key Identifier:
keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ac:20:df:52:fd:56:96:47:05:ae:f7:51:ad:08:34:fe:94:
54:82:0c:54:6d:66:58:28:5b:3d:67:51:8d:43:50:cc:e0:f9:
06:da:7a:85:5f:2b:74:7d:2d:d9:57:5c:ef:24:fd:df:0e:a0:
29:5c:45:69:ef:ca:99:12:25:7c:2c:df:7b:77:2f:db:57:ae:
1a:08:dc:42:b8:d0:64:0e:a4:d0:4e:b5:74:4f:f2:db:8b:73:
18:b2:b9:01:2b:6b:eb:c5:79:e8:51:32:7c:99:4b:cc:64:0b:
89:7d:6a:10:fa:f1:bd:bd:42:fb:68:e0:3f:cd:94:64:95:78:
95:ab:a5:16:16:70:14:86:49:16:be:58:9c:1e:9f:8b:64:2e:
97:f5:a5:b1:52:5b:12:e1:68:91:1d:75:c0:dd:75:b3:00:fd:
69:b9:8e:58:46:84:2b:32:fb:56:ed:0b:45:43:7f:b6:3c:c6:
b1:02:d2:88:a8:9e:c8:40:52:ce:23:83:49:ce:cf:ee:4a:ed:
da:c9:a2:f6:ef:90:ac:2b:2b:09:c5:39:a9:fa:4d:be:aa:3a:
2b:01:28:09:fc:22:9d:8c:c8:3c:d5:0d:41:0f:e5:49:ab:f7:
a9:4e:43:21:5f:0d:6f:cd:81:f7:7b:89:51:20:42:77:d6:16:
15:f1:a4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:04 2026 by rpki-client