
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
File: OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json)
Hash identifier: 4LGlXwq4Kql4sq2k4iGHlaNRmLUxuj3jiR+J42lcEb4=
Subject key identifier: 4A:F1:58:35:C3:F0:2A:D5:8B:EA:CD:6D:98:94:DA:DE:7F:1E:C0:08
Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
Certificate issuer: /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
Certificate serial: 0AAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
Manifest number: 0B77
Signing time: Sat 18 Apr 2026 19:28:02 +0000
Manifest this update: Sat 18 Apr 2026 19:28:01 +0000
Manifest next update: Sat 25 Apr 2026 19:28:01 +0000
Files and hashes: 1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: VV8LzlK0ZLBHW9fshdnD2XvgQt/rViPp/o7LiUtM/8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl
rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 19:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2733 (0xaad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
Validity
Not Before: Apr 18 19:28:01 2026 GMT
Not After : Apr 25 19:28:01 2026 GMT
Subject: CN=69e3db41-1628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:3b:2c:42:71:a0:54:d4:4a:49:8f:48:0f:
f9:5b:91:3d:a9:85:a9:35:3b:95:52:aa:2a:df:ee:
12:bf:29:ac:c1:ce:34:09:6b:72:b1:4c:10:24:21:
e3:70:3f:60:4b:61:1e:8f:76:43:b8:fb:23:6d:95:
4c:04:90:eb:fb:8d:65:04:06:e6:f6:83:da:85:ae:
c7:02:71:8c:84:8f:04:76:f9:86:0e:2c:9a:06:61:
95:a3:60:e1:7d:cd:e7:22:4c:ed:bb:ff:1a:c0:4c:
42:6c:30:c6:37:a0:3c:46:e1:97:5b:9d:c6:9f:6e:
8d:98:0e:c9:bf:ba:8f:1c:21:6e:fe:ad:6d:e8:02:
35:99:30:59:bc:5e:50:ad:87:e8:c6:a5:28:af:1b:
8f:c5:41:4e:3a:62:83:64:68:c0:94:82:f5:9c:2f:
01:cd:0a:18:ef:dc:df:35:81:b8:68:d8:d2:40:8c:
28:f0:05:1f:30:9c:56:f0:01:99:f4:32:32:92:7b:
f0:9c:aa:1f:12:b6:a1:b0:67:bb:47:9d:27:70:d0:
5a:f5:6f:4c:e4:9b:41:85:62:ef:12:10:b7:89:da:
46:35:bb:c1:e3:ad:f7:92:1f:1a:26:34:67:1c:25:
4a:5b:29:f0:53:2d:f4:f8:f0:72:b2:a1:13:b8:0a:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F1:58:35:C3:F0:2A:D5:8B:EA:CD:6D:98:94:DA:DE:7F:1E:C0:08
X509v3 Authority Key Identifier:
keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:45:be:60:aa:ff:8c:54:65:41:2b:41:16:b2:dd:3b:9c:19:
5c:06:0f:55:94:35:9c:e4:83:86:db:24:4d:9f:3b:f6:fd:31:
f0:3b:15:9e:8c:eb:40:43:a0:0d:ca:4e:17:c1:03:a1:65:7d:
9a:a3:0c:5d:e4:65:d8:ff:9e:37:8c:79:59:0c:96:7f:0e:64:
fb:f5:d7:f1:aa:2f:84:e4:f9:c1:5e:94:d0:5b:7f:e2:9f:19:
a1:7a:28:a5:e5:57:69:6b:03:1b:67:a8:6d:27:03:73:05:65:
a2:b5:72:2f:5e:20:14:14:45:5d:ee:fa:9e:b7:bd:0a:0d:77:
9a:d0:ca:ae:0f:01:6d:25:14:c3:2f:bc:9b:fc:ef:1a:54:1e:
c8:f7:fb:8e:97:ba:f3:c7:8a:a7:e6:38:8e:5c:19:30:04:1c:
05:8a:35:92:50:75:0c:20:c3:09:6a:1c:eb:ac:50:5a:ba:f2:
d3:0c:67:f3:29:e0:40:7a:ac:32:32:0b:26:25:e3:28:5f:bd:
ba:4a:7a:70:66:0b:7b:c9:c4:a3:72:bc:3a:72:6f:b9:b6:85:
50:35:f0:24:3a:d0:0c:43:d1:e1:4a:bd:37:a3:17:94:ee:d6:
5e:60:ff:c1:db:8d:f7:fe:d4:a5:e5:4c:3f:9e:81:0b:74:24:
64:83:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:36 2026 by rpki-client