
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File: OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier: +agy9c9fhPo75jKijVU3vlSP9dD8xOD78gogk/rH9jg=
Subject key identifier: 3B:B1:C0:BD:83:AC:23:81:57:E5:51:71:2B:51:5C:73:02:76:BB:D2
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial: 10DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number: 10B3
Signing time: Thu 16 Apr 2026 17:16:24 +0000
Manifest this update: Thu 16 Apr 2026 17:16:24 +0000
Manifest next update: Thu 23 Apr 2026 17:16:24 +0000
Files and hashes: 1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: x4sITSt6eP6pBGJtfeGLO6KZYGLkNvZjn43Fcp1lzAg=)
2: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: vsbMMm0tX7oQPTtDdBLrO3G0fbHEKxHcy+EakKZCXvk=)
3: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: BlKhGG0JgDgeMunFnt+JOtTeCrACML/7Bv6i3I2TnD4=)
4: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: 5uzOMDxVQG6o2wJsSwgOydC+9oz2b76Yz5g0H0UYCJg=)
5: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: xtUD4kX8wiwHjf7rbPAI7RcOfukxUOvAvuX9YW6zjQs=)
6: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: ytrXwHDwgf5zRqPoFHCYqQMoZALpJPSEoIv4sspoZXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4314 (0x10da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Validity
Not Before: Apr 16 17:16:24 2026 GMT
Not After : Apr 23 17:16:24 2026 GMT
Subject: CN=69e11968-4f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:49:b2:d2:cd:7a:4a:3b:5c:f1:d5:bf:34:
fa:8d:5b:8c:e6:14:4b:f7:6d:5d:e8:bf:ba:98:2b:
52:b3:ec:b2:e4:a1:f1:08:dc:59:ff:9d:74:af:bf:
c6:49:ea:95:fe:09:50:fd:b9:8b:61:f5:b8:fb:b0:
1f:65:e6:e9:f8:ba:7c:a0:34:06:c6:2e:9e:09:56:
2c:1e:cc:9f:11:1a:16:74:24:06:16:c2:6f:d7:56:
e4:c9:6f:ab:f0:58:3d:dc:48:ca:8c:47:a0:cb:1f:
0e:e6:5c:bc:5d:45:ac:d1:75:d1:e3:aa:64:9d:8f:
b8:a3:cb:a5:f1:fa:a2:2f:19:ee:5e:90:5f:67:41:
47:ae:ed:fa:5b:34:15:11:91:c1:43:84:7a:98:9c:
6a:1e:de:6a:40:fb:9a:a5:8a:99:a5:7a:b3:3c:ed:
d8:d2:a7:a1:0d:d7:be:4f:ec:2a:dc:fa:d3:a0:14:
7e:36:34:15:87:48:8d:dc:54:ce:36:b2:67:58:b6:
e0:4e:33:43:e1:0f:84:45:91:59:5e:ae:5a:7d:f5:
30:24:39:14:c7:7f:5b:69:45:7b:e8:ad:47:97:04:
83:a7:79:da:0e:b5:c5:ba:20:32:4a:ed:9b:29:28:
67:ac:a6:c2:8a:98:b4:c2:d7:45:ed:fa:8a:d1:9d:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:C0:BD:83:AC:23:81:57:E5:51:71:2B:51:5C:73:02:76:BB:D2
X509v3 Authority Key Identifier:
keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:99:5c:c0:be:92:4b:ed:d2:e9:19:32:58:14:ae:15:44:bf:
ff:1b:dc:35:55:94:35:fa:d4:95:d2:8e:c8:93:07:27:5f:73:
6e:07:15:a6:2c:f7:05:c8:46:44:23:4e:75:95:14:e9:54:1b:
37:6e:57:b5:e8:eb:d0:3f:94:d4:8e:ab:b9:7a:10:26:fe:c0:
5c:db:cc:1e:aa:b8:0a:c6:54:ab:26:a4:48:83:66:2c:30:50:
cf:ec:3c:95:25:a6:ac:e3:36:50:c7:4e:d2:25:70:ba:a2:90:
e1:c1:89:44:01:f0:a5:6e:a1:33:66:76:a2:81:08:52:1c:74:
00:14:5f:d6:62:02:0d:c6:d6:5e:81:04:04:54:58:1b:22:bf:
07:ec:7d:cb:cd:47:ca:6f:cc:f5:bd:ed:03:53:63:f8:34:f7:
46:f1:c8:e5:97:84:d5:a4:57:8b:26:f0:ae:84:f6:f6:b0:16:
05:61:cb:b1:b7:28:89:0a:2c:e3:70:59:13:46:73:a0:56:35:
5d:dd:2f:00:69:93:0b:15:59:07:f5:b9:11:98:f0:4b:87:af:
c6:c8:98:51:ae:f2:c9:9a:d3:fd:e5:f8:c7:02:37:2a:8b:31:
1a:14:a5:b1:6e:e9:9d:ba:12:dc:7b:93:27:a0:93:51:b0:44:
72:82:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:07:40 2026 by rpki-client