
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier: uvszy9+sUKZgOAcz313v8Q38w3KL6QY64b2ZgizdKGU=
Subject key identifier: A7:A6:CC:A1:E0:64:64:41:1E:0C:A8:33:80:C1:C7:3C:11:37:BE:6A
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer: /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial: 0810
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number: 07F9
Signing time: Thu 16 Apr 2026 21:09:32 +0000
Manifest this update: Thu 16 Apr 2026 21:09:32 +0000
Manifest next update: Thu 23 Apr 2026 21:09:32 +0000
Files and hashes: 1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: AUOJHmhCqLi9bTaCLaqqLZZccOl5x37d87MwiwxuFi0=)
2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: a8Wy1m3Rmhsdw7JgMn9q7U8Wx5LEB2V1AB0BFbhhHE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Validity
Not Before: Apr 16 21:09:32 2026 GMT
Not After : Apr 23 21:09:32 2026 GMT
Subject: CN=69e1500c-d722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:e7:f2:d2:d6:a1:40:00:5f:00:23:4a:fd:
ac:62:d0:6d:c1:d0:76:bc:9c:f0:fe:f7:4b:c0:1b:
4b:39:47:83:3e:20:6e:c1:02:37:f9:14:6f:d9:51:
49:8f:0e:e8:25:f4:98:f0:51:04:f8:e0:d2:81:ae:
88:b5:a4:17:ac:18:58:7d:45:cb:b4:c7:91:1c:c0:
3e:ef:62:2b:d9:79:50:94:f7:8a:46:ea:92:3c:63:
fb:cf:13:a2:0c:65:c0:18:eb:3f:26:1b:b3:ce:5a:
a2:7f:8f:a7:4f:31:1a:6b:cf:74:30:a1:f9:54:2b:
48:4a:6a:01:bc:47:88:17:d0:89:66:1e:f0:8c:db:
33:f7:15:39:ef:b3:9b:b4:db:c5:57:e9:0a:fe:d2:
e0:33:75:9a:73:52:17:29:f9:22:3c:b0:7a:2c:b1:
ab:59:31:e1:29:70:b3:42:b6:45:5d:cc:26:72:1a:
76:e6:2c:e4:df:71:6f:c7:15:38:70:9d:79:c3:e4:
86:90:ae:27:a3:dc:e0:c0:d5:72:13:aa:78:dd:89:
0b:9b:a2:4f:a4:9c:96:c5:ec:97:52:ac:7e:63:cf:
90:5b:9f:dd:1f:17:c7:38:48:c1:ef:ea:a3:81:10:
24:6b:9d:db:cd:46:75:ff:87:c5:c7:94:92:27:6a:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A6:CC:A1:E0:64:64:41:1E:0C:A8:33:80:C1:C7:3C:11:37:BE:6A
X509v3 Authority Key Identifier:
keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3c:93:db:65:ef:fc:90:af:6e:99:21:76:85:8b:0c:26:4d:
34:4f:c2:13:cb:d6:1a:e4:2b:4d:21:90:99:f4:58:9f:ff:15:
8e:77:14:d6:d0:6a:e2:a4:94:61:fa:d9:11:51:36:f5:80:91:
06:53:1e:31:bb:6a:ee:3c:32:06:ef:e4:b5:29:7c:ad:af:d6:
2e:fe:70:0c:00:ad:cb:2b:b5:fa:56:de:cc:a9:a4:3e:73:f2:
a2:b0:a4:2a:64:35:f2:8f:d8:21:10:d7:57:d8:04:de:3a:c0:
68:a4:d1:46:1b:20:ee:af:ec:33:37:6d:35:e7:2a:39:55:0e:
67:cf:f1:26:32:5e:e2:c9:76:cb:10:b1:5e:15:49:1f:9a:31:
91:ce:e5:ba:3e:5c:58:b8:ff:d5:68:4e:04:0c:7b:de:98:59:
91:98:d5:7e:e4:96:dd:dc:a9:50:47:4d:96:69:5f:f3:4c:82:
5a:ce:6f:b9:a3:e6:5f:39:a2:2a:7c:74:e7:82:a0:2d:2f:d6:
12:8a:7c:80:a1:8b:65:3b:b8:76:f8:50:55:38:bb:e3:eb:8c:
ba:af:ff:ac:93:e5:3d:2b:97:c6:af:e0:4c:ff:75:6a:78:9d:
65:4f:6d:93:41:fd:b2:97:b8:ef:8f:74:67:76:23:4a:95:a0:
4b:7a:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:12 2026 by rpki-client