
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
File: OYN8tL7K9qYmyRaulgJBtgnmsgo.mft (raw, json)
Hash identifier: ix4MdASIhT78h/9mDTeJH1JNoR8mtZQc0q7Qg52inkg=
Subject key identifier: 93:52:D6:C5:3E:A1:16:33:2F:1B:C9:5E:DC:DE:23:E0:7A:8C:1B:1E
Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
Certificate issuer: /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
Manifest number: 01F3
Signing time: Wed 29 Jul 2026 04:29:15 +0000
Manifest this update: Wed 29 Jul 2026 04:29:14 +0000
Manifest next update: Wed 05 Aug 2026 04:29:14 +0000
Files and hashes: 1: OYN8tL7K9qYmyRaulgJBtgnmsgo.crl (hash: RmSjYVcuzEkTofuLJnXZi4adGopN0sbFSbQQJkUaGis=)
2: C635D41E611411EF9B00D029C4F9AE02.roa (hash: 8EuCC6GeDURLjyKUH1rweshuZkTUvieZrlzCd35Hwu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C3B7, serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Validity
Not Before: Jul 29 04:29:14 2026 GMT
Not After : Aug 5 04:29:14 2026 GMT
Subject: CN=6a69819b-538a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:a9:0f:19:58:8e:79:8a:61:07:cf:19:98:
84:c9:29:28:a2:71:a7:ad:a5:2c:ae:7c:d7:14:72:
85:24:4b:b6:0b:c8:27:65:1b:76:49:69:2d:c8:cd:
33:ad:88:c7:d8:a6:dd:5e:f3:54:5c:65:e1:da:70:
54:0f:fa:d1:06:c1:cd:d7:3d:54:d3:8d:40:ff:02:
81:91:90:65:2b:47:e5:4a:51:85:01:0c:fe:cf:fa:
5e:8a:ad:23:54:77:56:00:41:02:d1:86:72:8a:df:
85:62:ce:0f:13:1d:57:e3:b1:bb:46:0b:d6:5f:4d:
85:8f:38:e7:57:94:54:b8:4f:cb:7c:ab:ac:d8:52:
46:be:59:e6:7c:00:b2:3e:9a:8a:53:ab:a5:84:cd:
0e:73:33:d9:20:6f:22:fe:a9:b4:11:b6:bf:12:27:
f3:6e:c9:bb:65:1a:9b:ab:05:fa:a1:c1:62:e4:a2:
ba:da:7e:43:43:d2:f0:98:f1:4a:91:df:94:1a:c7:
bd:7b:ae:d5:4b:30:16:91:aa:e9:ed:12:99:6e:af:
91:81:10:92:ff:bb:e8:6c:ca:f9:b4:8d:30:26:a6:
4c:b8:f1:b5:1f:be:c7:e0:39:06:f9:fe:07:25:8b:
17:b2:c5:55:9b:f0:68:61:04:c2:68:f8:97:1c:1a:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:52:D6:C5:3E:A1:16:33:2F:1B:C9:5E:DC:DE:23:E0:7A:8C:1B:1E
X509v3 Authority Key Identifier:
keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:e0:fb:6f:56:99:f2:61:2b:58:b1:b0:80:0c:f2:33:b8:25:
2e:93:6e:de:db:f1:3c:4d:da:55:08:69:0f:28:ab:ae:51:05:
82:17:5e:40:f2:6b:a7:ca:6a:89:1c:4c:44:e3:c7:bb:4a:6d:
8b:58:53:e4:b0:e4:08:6f:83:46:bf:46:52:6c:cd:9d:0c:62:
99:f2:b3:dd:95:5b:6e:d3:79:18:60:79:ba:0b:ef:c2:a5:cc:
f0:df:0f:63:a9:35:94:6d:56:5e:c9:56:5c:50:32:e2:4e:4d:
46:6c:b9:b4:87:94:95:38:e9:29:92:87:75:54:c5:66:f9:1f:
e0:7a:fb:cc:fe:bb:0d:43:07:ca:ad:9b:34:4d:4c:3c:e5:8a:
1c:41:67:67:94:fc:f8:f8:92:0b:e2:d3:78:ae:7f:28:01:ac:
b7:96:5f:7a:b2:d4:e5:24:8a:69:97:b5:88:ab:98:a3:34:72:
48:dd:a6:bf:19:f8:35:58:4f:49:4a:d0:86:14:1a:59:c7:4b:
87:b8:db:f4:25:e1:40:37:9a:8c:ad:81:d0:27:fc:c6:44:5e:
da:0f:78:48:a2:6c:90:29:88:de:0d:26:62:36:c1:fd:7a:e2:
cf:d0:3b:43:e8:54:1f:26:0a:0b:55:2b:61:45:6d:7b:a9:4f:
89:68:2e:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMzQjcxMTAvBgNVBAUTKDM5ODM3Q0I0QkVDQUY2QTYyNkM5MTZBRTk2MDI0MUI2
MDlFNkIyMEEwHhcNMjYwNzI5MDQyOTE0WhcNMjYwODA1MDQyOTE0WjAYMRYwFAYD
VQQDEw02YTY5ODE5Yi01MzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt2ypDxlYjnmKYQfPGZiEySkoonGnraUsrnzXFHKFJEu2C8gnZRt2SWktyM0z
rYjH2KbdXvNUXGXh2nBUD/rRBsHN1z1U041A/wKBkZBlK0flSlGFAQz+z/peiq0j
VHdWAEEC0YZyit+FYs4PEx1X47G7RgvWX02FjzjnV5RUuE/LfKus2FJGvlnmfACy
PpqKU6ulhM0OczPZIG8i/qm0Eba/Eifzbsm7ZRqbqwX6ocFi5KK62n5DQ9LwmPFK
kd+UGse9e67VSzAWkarp7RKZbq+RgRCS/7vobMr5tI0wJqZMuPG1H77H4DkG+f4H
JYsXssVVm/BoYQTCaPiXHBoZOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNS1sU+
oRYzLxvJXtzeI+B6jBseMB8GA1UdIwQYMBaAFDmDfLS+yvamJskWrpYCQbYJ5rIK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xNTlBNEFEMDkz
MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3SzlxWW15UmF1bGdKQnRnbm1z
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09ZTjh0TDdLOXFZbXlSYXVsZ0pCdGdubXNnby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzNCNy8xNTlBNEFEMDkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3Szlx
WW15UmF1bGdKQnRnbm1zZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWeD7b1aZ8mErWLGwgAzyM7glLpNu3tvxPE3aVQhpDyirrlEFghdeQPJrp8pq
iRxMROPHu0pti1hT5LDkCG+DRr9GUmzNnQximfKz3ZVbbtN5GGB5ugvvwqXM8N8P
Y6k1lG1WXslWXFAy4k5NRmy5tIeUlTjpKZKHdVTFZvkf4Hr7zP67DUMHyq2bNE1M
POWKHEFnZ5T8+PiSC+LTeK5/KAGst5ZferLU5SSKaZe1iKuYozRySN2mvxn4NVhP
SUrQhhQaWcdLh7jb9CXhQDeajK2B0Cf8xkRe2g94SKJskCmI3g0mYjbB/Xriz9A7
Q+hUHyYKC1UrYUVte6lPiWguVQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:59:11 2026 by rpki-client