
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
File: OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json)
Hash identifier: wuTtSFuurDEesCAvUn2lMMUJsscQR+YnjRntBH5KpwQ=
Subject key identifier: 02:75:42:E0:4D:F4:86:0B:AA:34:B5:EA:E2:E0:BA:97:34:91:AE:2C
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Certificate issuer: /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
Manifest number: 77
Signing time: Thu 11 Jun 2026 10:27:28 +0000
Manifest this update: Thu 11 Jun 2026 10:27:28 +0000
Manifest next update: Thu 18 Jun 2026 10:27:28 +0000
Files and hashes: 1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: 4KnlDzORrz8KDVlbY0rigivTS0lo/OuluVVR/bdyifo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Validity
Not Before: Jun 11 10:27:28 2026 GMT
Not After : Jun 18 10:27:28 2026 GMT
Subject: CN=6a2a8d90-6f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:ae:e7:56:1f:40:2c:42:41:b4:14:7e:63:
26:e8:b9:0c:c8:29:1d:15:ca:ce:e4:3c:0a:ba:2a:
84:9d:ee:fb:35:dd:d4:23:fb:2a:da:e8:2d:f3:e7:
d4:af:20:fe:73:4a:8b:0f:8b:df:ea:65:7d:8d:70:
5d:45:54:31:96:ab:42:07:1c:65:e1:57:34:60:39:
b7:3f:71:b3:fe:8c:6d:7b:27:c5:1e:2f:b1:a0:ac:
da:16:a1:22:4f:4e:f4:17:d1:dc:ee:61:1c:7b:fd:
62:a9:5c:98:6d:23:67:f5:0a:30:66:7a:d8:70:91:
20:cb:0a:26:7b:20:6b:db:4c:95:11:a8:12:cf:b1:
85:d8:88:58:72:e5:db:1a:d5:82:74:00:4f:77:b8:
df:33:3f:d4:f8:d3:80:3f:e6:22:25:78:67:9e:c9:
5f:b0:8a:f6:ac:2f:29:11:b2:20:44:0b:4f:02:8e:
7a:db:5c:32:e0:69:10:7c:42:03:cd:ec:71:7d:28:
45:1b:3e:11:a5:8a:f2:f9:35:69:cd:cf:87:3a:ee:
cc:94:b3:5f:f2:1c:c5:1f:e5:93:a0:28:c5:a4:75:
1d:f0:6a:1e:46:a5:c6:c7:1d:94:23:da:0d:46:4d:
85:27:ec:ff:57:f6:94:b6:0f:10:ad:79:31:88:c4:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:75:42:E0:4D:F4:86:0B:AA:34:B5:EA:E2:E0:BA:97:34:91:AE:2C
X509v3 Authority Key Identifier:
keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:3d:8e:cf:9b:35:8f:3e:e2:3e:91:13:63:94:57:a3:df:a6:
b9:63:71:93:be:42:01:31:9e:b7:98:82:e8:f0:78:8e:9b:09:
9d:9b:80:63:b5:7b:36:71:71:3d:a4:28:b8:f9:ab:15:24:9d:
3c:c0:d4:b0:9e:24:42:11:c7:1a:52:82:e5:c9:37:e6:57:45:
10:e3:72:51:eb:79:9d:3c:f1:d4:ea:22:34:bb:d7:99:0b:47:
6b:8e:12:23:32:0f:5a:74:a7:da:47:cc:bb:e4:97:39:8a:23:
7a:e3:e7:dd:08:e1:93:e7:f3:7f:aa:fd:a5:36:86:26:f5:11:
c1:5e:b9:85:a2:08:4c:97:14:4c:0a:15:7d:69:b1:4e:14:f7:
fc:1d:c1:e8:bd:1b:d0:24:6e:91:98:a4:cc:53:58:f4:a2:19:
cc:e0:1e:2d:4f:66:78:0d:fb:fd:05:46:46:63:f4:ab:36:c0:
51:07:2a:a1:57:5a:c9:4b:f3:3f:c1:74:f4:d5:f6:ad:df:6e:
73:d5:52:49:8a:d7:b9:11:ee:a4:8d:59:94:65:9f:af:da:a2:
19:ba:bd:09:96:3e:47:df:b0:86:e4:f4:0a:66:95:f0:91:89:
76:18:a9:d3:f3:4f:b0:4f:86:6d:4e:dd:9c:02:27:07:80:bc:
84:47:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:08 2026 by rpki-client