
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File: OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier: PpD6edRxiMheYkp42q6GX0wyqVc/TWHuxulRbtjJGVc=
Subject key identifier: 10:EE:4A:C8:96:27:14:8B:EC:46:A8:DD:50:89:BA:55:A0:75:43:B8
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial: 1115
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number: 10E9
Signing time: Tue 28 Jul 2026 17:24:32 +0000
Manifest this update: Tue 28 Jul 2026 17:24:31 +0000
Manifest next update: Tue 04 Aug 2026 17:24:31 +0000
Files and hashes: 1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: scHoOEVX2asqilN2XM3ALwEaY9wJmBvyXlgo0sT/+Rs=)
2: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: Ii/gO0OKf8bIzXuRcAmTcbAZrOkECJjXAFuEdJBjwE8=)
3: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: kQR2rJRw7cibG4+VWuepJmVVMALBPz98kkD/QBlTqb4=)
4: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: L+cBg8DZ8MWiGD4ABrUtf99Xn9LyTrz132AQjeQ8FK8=)
5: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: gYUYL+Jd8BqYDcq6w9aABSq0jEzKxGSrRN4Kct2Vn7c=)
6: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: +oZqqbSfF7y4PvnGsPCA1za/Eu6HGAUVAMjzcBgpEOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4373 (0x1115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Validity
Not Before: Jul 28 17:24:31 2026 GMT
Not After : Aug 4 17:24:31 2026 GMT
Subject: CN=6a68e5d0-0401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:be:53:e6:5d:50:02:af:48:c7:79:54:d3:51:
31:99:b8:85:c1:d5:25:e1:49:2f:1d:4b:bd:ea:47:
80:e2:c7:28:4b:d8:1d:bf:5d:7c:81:d6:5b:b9:27:
9d:4e:30:83:54:3c:23:0e:2d:84:b7:53:72:97:51:
db:8e:54:c2:14:84:f3:79:81:6e:6d:2e:fc:2e:1c:
31:b0:db:c1:82:d9:2c:da:f0:db:8a:92:9b:9c:3a:
d5:2c:6f:60:fa:a3:7a:af:3d:a5:d3:90:19:9b:21:
62:cd:bf:01:ed:35:cf:1e:ce:0b:de:7a:a0:f4:f4:
16:70:89:c5:92:d5:2f:47:cb:4f:a3:71:bb:e3:9f:
f2:5b:86:75:b1:dd:66:76:85:40:61:f7:20:f1:80:
2e:b7:5b:33:8d:41:28:7e:52:1b:22:01:a6:61:79:
7b:7c:43:0a:cc:1c:ab:92:c2:41:8c:90:ef:3a:11:
e3:79:42:cb:21:cd:dd:b8:b4:ad:b0:82:21:07:f8:
cd:9a:e9:59:90:35:fb:3d:74:ef:db:4a:9a:2b:43:
4d:9a:78:04:2e:66:87:9e:82:f1:f3:25:3f:5f:d4:
20:25:8a:b3:82:fb:36:ee:86:be:c9:46:9c:f2:93:
39:e2:df:2d:0d:4d:2d:55:77:13:26:80:e1:f4:0e:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EE:4A:C8:96:27:14:8B:EC:46:A8:DD:50:89:BA:55:A0:75:43:B8
X509v3 Authority Key Identifier:
keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:9e:19:94:e7:2f:ec:8a:cc:3d:43:03:3f:fa:02:9f:a1:
eb:44:5e:6d:d9:29:12:bf:06:03:23:d6:18:be:91:a9:02:0e:
b5:f0:62:7c:e2:5e:6a:89:96:96:b0:43:08:22:f0:2a:a7:6b:
1b:64:05:77:42:78:f9:de:a6:1d:c6:7e:5e:d5:73:ad:dd:8a:
cc:63:dd:3d:57:1f:18:7e:5e:04:fd:23:56:90:e2:44:31:42:
be:2f:27:d4:72:49:f4:3b:da:93:5a:6f:6a:5c:24:2b:a5:d0:
4c:70:3b:0b:bc:b4:83:91:f0:ee:99:b8:cf:f9:f5:a4:31:b6:
99:77:24:27:cd:df:c4:04:96:fd:ad:05:e6:db:9d:23:b7:cf:
c9:ad:97:62:0e:9e:89:9c:fd:6e:2a:d0:e2:c1:10:62:d5:16:
41:3e:e7:c9:e8:61:6a:35:ce:2a:3b:93:ec:ec:f6:0b:54:2e:
35:a5:15:3d:88:b0:9d:6c:cc:cd:5e:fc:b0:ec:88:a9:77:b6:
2d:b2:2b:07:56:a0:97:08:7b:06:f1:9c:f3:80:15:c4:1b:52:
20:1a:48:06:69:6e:46:3a:f0:fa:1a:28:b2:8a:93:93:39:0b:
63:b8:67:c7:5b:1c:84:e7:30:27:8a:36:65:8c:d0:4d:56:bd:
3a:68:14:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICERUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM3OTgxMTAvBgNVBAUTKDNBMDJFRkY3Q0M5QzhCQUExMkQ3Qzg1MkI2RkZDNjlG
QjA2MDk4OUIwHhcNMjYwNzI4MTcyNDMxWhcNMjYwODA0MTcyNDMxWjAYMRYwFAYD
VQQDEw02YTY4ZTVkMC0wNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkL5T5l1QAq9Ix3lU01ExmbiFwdUl4UkvHUu96keA4scoS9gdv118gdZbuSed
TjCDVDwjDi2Et1Nyl1HbjlTCFITzeYFubS78LhwxsNvBgtks2vDbipKbnDrVLG9g
+qN6rz2l05AZmyFizb8B7TXPHs4L3nqg9PQWcInFktUvR8tPo3G745/yW4Z1sd1m
doVAYfcg8YAut1szjUEoflIbIgGmYXl7fEMKzByrksJBjJDvOhHjeULLIc3duLSt
sIIhB/jNmulZkDX7PXTv20qaK0NNmngELmaHnoLx8yU/X9QgJYqzgvs27oa+yUac
8pM54t8tDU0tVXcTJoDh9A4e9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDuSsiW
JxSL7Eao3VCJulWgdUO4MB8GA1UdIwQYMBaAFDoC7/fMnIuqEtfIUrb/xp+wYJib
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5OC85MDE3QjUwQTRB
MjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2b1MxOGhTdHZfR243Qmdt
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09nTHY5OHljaTZvUzE4aFN0dl9HbjdCZ21Kcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzc5OC85MDE3QjUwQTRBMjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2
b1MxOGhTdHZfR243QmdtSnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVjieGZTnL+yKzD1DAz/6Ap+h60RebdkpEr8GAyPWGL6RqQIOtfBifOJeaomW
lrBDCCLwKqdrG2QFd0J4+d6mHcZ+XtVzrd2KzGPdPVcfGH5eBP0jVpDiRDFCvi8n
1HJJ9Dvak1pvalwkK6XQTHA7C7y0g5Hw7pm4z/n1pDG2mXckJ83fxASW/a0F5tud
I7fPya2XYg6eiZz9birQ4sEQYtUWQT7nyehhajXOKjuT7Oz2C1QuNaUVPYiwnWzM
zV78sOyIqXe2LbIrB1aglwh7BvGc84AVxBtSIBpIBmluRjrw+hoosoqTkzkLY7hn
x1schOcwJ4o2ZYzQTVa9OmgUPA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 17:04:13 2026 by rpki-client