
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
File: OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json)
Hash identifier: TCXCljFk3b6zGl7QRyqzf0NYoO8Lf0sBfpMmfLS71to=
Subject key identifier: 91:E1:C2:A3:83:EE:44:9C:CA:DD:01:15:44:37:C3:AE:AD:B3:D9:07
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Certificate issuer: /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
Manifest number: C2
Signing time: Thu 05 Nov 2026 08:11:52 +0000
Manifest this update: Thu 05 Nov 2026 08:11:52 +0000
Manifest next update: Thu 12 Nov 2026 08:11:52 +0000
Files and hashes: 1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: 6uhnNRl8j9InrOr4aihLNO3wlwE3E9xgBNeyoOIj5gY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 08:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Validity
Not Before: Nov 5 08:11:52 2026 GMT
Not After : Nov 12 08:11:52 2026 GMT
Subject: CN=6aec3a48-4fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:a8:82:4c:22:7c:9c:81:6d:51:9d:a5:f3:
d1:ae:2b:47:82:02:19:4a:6b:15:b8:c1:42:d9:6c:
ad:30:0d:9e:80:6b:0e:90:07:3e:9d:c9:e4:ff:fc:
c3:f6:bf:aa:0d:20:a6:bd:69:c4:d3:26:dd:c3:05:
44:bd:51:23:55:fc:60:d4:67:8f:f1:92:3d:de:7f:
fa:c9:97:94:ed:2f:c8:30:e4:c0:06:c5:dd:1c:cb:
24:48:3a:c9:9a:77:26:e2:42:9d:15:db:2e:0a:2c:
fb:a2:b6:21:33:3c:ba:45:40:44:cd:80:96:4a:2f:
05:53:9d:62:91:36:81:c8:d7:7d:98:8d:ef:4f:53:
d7:bc:e8:ee:07:d2:cd:d7:41:14:2a:12:c9:d6:bb:
01:93:7b:a8:eb:99:60:43:85:51:34:bc:c1:3f:2c:
df:79:af:d5:b1:c4:28:92:fc:46:ff:be:e1:55:77:
52:43:f9:aa:0c:3f:c0:93:bc:92:6e:fb:34:09:51:
32:d2:b7:7c:ac:96:e9:20:f1:ca:ee:b4:48:35:da:
3f:2b:28:ec:26:9d:4d:92:00:fb:8d:2d:1c:e7:b2:
94:ee:4c:f6:db:0e:25:ec:8f:21:45:71:5a:c7:c4:
93:cb:4c:ab:f5:bc:d6:98:c5:8b:d8:a2:d4:a9:92:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E1:C2:A3:83:EE:44:9C:CA:DD:01:15:44:37:C3:AE:AD:B3:D9:07
X509v3 Authority Key Identifier:
keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:43:96:98:8d:26:cc:37:e4:a5:2a:bb:cb:89:91:1f:60:94:
c6:56:20:3b:3c:52:88:51:99:83:3c:c1:e7:d5:ec:ba:cd:79:
d7:a3:bd:31:b3:96:7e:dd:54:de:e8:56:48:fd:a1:ed:eb:63:
c1:45:e2:64:e7:68:a4:17:b7:19:4e:ea:c3:6e:35:47:d2:70:
4d:da:db:81:2f:2c:98:6c:65:f3:d8:6c:85:78:cf:51:85:c2:
0c:f4:4a:cd:c5:d9:c1:1a:d7:ad:49:b1:ad:90:4d:a8:4c:40:
f1:0e:6b:87:a8:63:19:1d:24:ed:a6:ee:a1:61:2a:51:c9:82:
ee:74:f7:16:19:98:1f:77:2b:80:4c:b9:d8:85:35:dc:82:08:
2d:34:1c:7f:18:7b:e9:75:ce:9d:2e:4d:27:c3:10:35:3a:0d:
29:bb:3b:e6:5c:4f:82:41:13:86:68:14:62:40:ba:38:29:1f:
7c:b4:2b:8f:30:24:bc:14:85:ba:76:4a:f2:61:af:d9:8c:c9:
49:a3:94:90:84:24:39:e9:f6:bb:e2:39:58:4d:fb:0c:34:ee:
ec:dc:04:23:76:cd:cc:93:25:2b:bc:87:d8:1a:86:07:44:65:
76:48:18:a8:24:0f:ea:b5:b9:af:6d:e9:d2:a6:88:db:b5:76:
e1:51:c2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:54:15 2026 by rpki-client