
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
File: OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json)
Hash identifier: ORjKPJejWqwdwN4ytvVdTxsMx/fXwRegIZMMCMCCL2E=
Subject key identifier: D1:DA:4B:EE:DA:6E:68:AC:0F:81:FF:9F:EE:92:C0:08:EA:5F:1C:B6
Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
Certificate issuer: /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
Certificate serial: 0AE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
Manifest number: 0BDD
Signing time: Tue 28 Jul 2026 19:47:55 +0000
Manifest this update: Tue 28 Jul 2026 19:47:55 +0000
Manifest next update: Tue 04 Aug 2026 19:47:55 +0000
Files and hashes: 1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: jzsO3UGhUSLVk2idm6ba2mSgzajrmvQRbPDEPpp9ENQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl
rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2784 (0xae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
Validity
Not Before: Jul 28 19:47:55 2026 GMT
Not After : Aug 4 19:47:55 2026 GMT
Subject: CN=6a69076b-0728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:77:83:3c:18:a2:c7:92:a1:23:f6:cd:52:
89:b3:0f:7c:14:f3:aa:24:44:ac:03:63:aa:0f:5b:
6a:cc:82:a0:d3:fa:d7:aa:4e:90:42:59:51:33:8d:
8e:49:c2:f7:5f:07:71:9b:5e:80:8e:98:a5:07:4d:
ab:ef:9b:14:eb:32:05:e6:9b:e3:dc:b0:5b:0c:d6:
64:15:86:7f:71:e4:67:f0:3b:a8:72:0c:3c:27:43:
05:86:20:0c:94:e0:a0:75:02:23:a6:d6:61:88:dd:
26:9e:f4:d4:42:56:88:90:24:6e:ba:39:d5:21:8d:
c6:4b:35:92:67:6e:45:25:3f:28:fe:ec:7d:d9:5e:
eb:94:b2:2d:16:74:29:ec:1f:67:75:0c:15:bb:d2:
81:e7:bc:01:ea:1b:20:ad:e3:4e:cd:85:53:08:80:
e2:84:59:fc:57:04:61:b4:5e:84:3b:a1:6c:8a:cb:
68:2e:8d:f1:c3:cb:63:77:cd:70:90:0f:a5:f2:29:
77:ab:3c:5b:88:16:93:c7:5f:58:de:26:b5:58:5b:
97:34:4e:cd:72:b0:68:db:67:0e:af:7b:d4:31:7f:
8d:fc:10:43:31:64:3c:04:0e:c0:e3:fd:dc:6f:dd:
a1:aa:a2:d2:f5:70:a3:26:3a:99:74:26:dd:88:b9:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:4B:EE:DA:6E:68:AC:0F:81:FF:9F:EE:92:C0:08:EA:5F:1C:B6
X509v3 Authority Key Identifier:
keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:00:3f:40:06:bf:01:f8:13:5e:88:e0:c6:6a:3c:04:28:e8:
19:01:f3:eb:47:36:fc:b1:95:42:ab:ce:6e:b4:9c:df:15:d7:
29:19:86:8e:03:32:db:22:3d:db:45:89:10:30:08:3f:cd:ca:
97:18:71:d9:da:10:d7:b2:4a:45:a7:6c:f3:ae:7c:e1:cf:dc:
ce:6d:a4:c5:ce:d6:43:d0:02:c8:5e:01:b2:96:c6:09:f9:6e:
98:96:0a:3e:5a:18:29:f7:a0:aa:27:c3:e0:c4:bd:b6:dd:6a:
88:a9:6f:12:dc:78:5d:53:35:ae:44:79:05:48:00:d6:b7:a2:
35:a2:a6:6e:be:51:de:23:bf:90:33:d5:c6:3b:32:43:4e:f2:
cf:2f:0e:9a:0e:c2:67:fc:dc:ea:73:6d:8c:87:61:f2:db:bf:
29:14:30:be:ae:d1:ee:bc:89:da:63:ab:41:50:f1:99:6d:66:
48:18:e1:48:ea:d9:af:22:e0:f6:3f:04:94:2f:73:6d:c1:ab:
aa:88:60:97:a7:42:0c:61:9c:3c:8a:87:8f:cd:0c:c8:b0:18:
5f:26:ea:64:e9:71:21:d3:90:aa:6b:2e:c5:7d:39:cd:7d:7c:
49:94:a7:7d:1f:3c:74:f3:6c:61:b2:4c:a6:2e:06:3f:65:3d:
df:5e:d0:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEYxQzkxMTAvBgNVBAUTKDM5ODkxMTMwMDEwNEQ3QzU4QjMyNkU1NjY0QjNENzlB
MkQ0NjQ2RTAwHhcNMjYwNzI4MTk0NzU1WhcNMjYwODA0MTk0NzU1WjAYMRYwFAYD
VQQDEw02YTY5MDc2Yi0wNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5gV3gzwYoseSoSP2zVKJsw98FPOqJESsA2OqD1tqzIKg0/rXqk6QQllRM42O
ScL3Xwdxm16AjpilB02r75sU6zIF5pvj3LBbDNZkFYZ/ceRn8Duocgw8J0MFhiAM
lOCgdQIjptZhiN0mnvTUQlaIkCRuujnVIY3GSzWSZ25FJT8o/ux92V7rlLItFnQp
7B9ndQwVu9KB57wB6hsgreNOzYVTCIDihFn8VwRhtF6EO6FsistoLo3xw8tjd81w
kA+l8il3qzxbiBaTx19Y3ia1WFuXNE7NcrBo22cOr3vUMX+N/BBDMWQ8BA7A4/3c
b92hqqLS9XCjJjqZdCbdiLl+NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHaS+7a
bmisD4H/n+6SwAjqXxy2MB8GA1UdIwQYMBaAFDmJETABBNfFizJuVmSz15otRkbg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG
OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4V0xNbTVXWkxQWG1pMUdS
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09Za1JNQUVFMThXTE1tNVdaTFBYbWkxR1J1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4
V0xNbTVXWkxQWG1pMUdSdUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkQA/QAa/AfgTXojgxmo8BCjoGQHz60c2/LGVQqvObrSc3xXXKRmGjgMy2yI9
20WJEDAIP83Klxhx2doQ17JKRads86584c/czm2kxc7WQ9ACyF4BspbGCflumJYK
PloYKfegqifD4MS9tt1qiKlvEtx4XVM1rkR5BUgA1reiNaKmbr5R3iO/kDPVxjsy
Q07yzy8Omg7CZ/zc6nNtjIdh8tu/KRQwvq7R7ryJ2mOrQVDxmW1mSBjhSOrZryLg
9j8ElC9zbcGrqohgl6dCDGGcPIqHj80MyLAYXybqZOlxIdOQqmsuxX05zX18SZSn
fR88dPNsYbJMpi4GP2U9317QLQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:23:20 2026 by rpki-client