
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json)
Hash identifier: uqm6cbuMv8AvNQrro7vls3uZIrAzFwSjRTtZeChQB10=
Subject key identifier: 64:49:C4:09:F2:B5:78:C6:4B:72:32:10:F4:F2:B8:37:C1:54:8D:84
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 3631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
Manifest number: 35A9
Signing time: Thu 16 Apr 2026 14:25:46 +0000
Manifest this update: Thu 16 Apr 2026 14:25:46 +0000
Manifest next update: Thu 23 Apr 2026 14:25:46 +0000
Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: BhTGcPvv88K4tHmJlcVbXIRSquxz9ZQvbTLVInqlTrY=)
2: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (hash: thg12ZzEBgMuI/QMazCIjvAj3z0Vs1wd8yWbe5birCk=)
3: 02C97520985011F083EA2077C4F9AE02.roa (hash: yaT3E5Jwb6SOPRE/zc1jGw25lKy2464cuUmJv/l28Bs=)
4: 72378020EE2A11F0BE1A1CA2486F56BC.roa (hash: F533zLdXfqsdCW7ceEEa1GEWGavXYNK88VyQBzpq5/E=)
5: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: 0zazze3bx11N53QYC29gvswb8iXwUt0H+vCU2B2AtJw=)
6: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: YESGPScKdeqm6JUMvHI6MDffPNS9ojoSYCUIFN6JUNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13873 (0x3631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Apr 16 14:25:46 2026 GMT
Not After : Apr 23 14:25:46 2026 GMT
Subject: CN=69e0f16a-513e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e4:4b:72:8c:42:7a:c3:4e:c9:5e:9a:ba:22:
ff:ab:f8:e6:a8:b8:6e:f4:26:d8:9f:5d:40:7c:d7:
36:87:f2:63:77:33:bb:3e:86:22:17:fe:9c:44:a2:
43:a6:d1:53:04:9e:d4:89:84:91:5f:5a:9f:ea:5c:
94:fa:d3:1e:20:43:24:31:e1:16:b5:f0:88:26:27:
33:07:8b:b5:3f:f5:64:e3:fe:93:b1:ab:3a:d4:0d:
e5:46:2b:de:41:ed:7f:cb:d5:bb:0c:42:27:4c:c4:
f2:68:bb:9d:61:1d:8e:cf:be:72:b4:a3:a7:a8:7b:
ae:ef:75:5e:81:30:6c:41:2b:53:ff:04:f5:12:07:
a1:46:6d:d5:41:86:fb:fc:f8:ce:cb:64:e4:27:7d:
a9:ab:b4:85:ff:f1:07:9e:63:09:49:fb:85:c8:13:
17:18:27:6d:05:c5:f1:9c:c2:3f:c4:71:84:0b:23:
9b:2a:4d:9f:a0:da:d2:17:50:a7:66:fb:28:26:e8:
2f:c0:8e:f8:55:ec:5f:79:c3:79:c0:29:af:e6:8c:
23:bf:c8:61:ad:24:c6:97:db:a3:06:03:71:8a:2e:
26:dd:6c:44:8c:b9:11:28:2b:cb:1c:59:f6:e7:f8:
e6:df:b7:45:ed:a5:84:60:c3:51:45:6e:2a:02:c6:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:C4:09:F2:B5:78:C6:4B:72:32:10:F4:F2:B8:37:C1:54:8D:84
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:e9:5c:45:0f:5f:b1:5a:75:78:34:a6:cb:61:52:19:a0:71:
34:4e:46:8e:ef:56:6b:c8:83:f4:8c:e6:e5:7a:00:f7:fb:a8:
29:40:b2:0e:ad:b4:d6:38:78:9e:76:54:4a:a9:01:d0:a9:b3:
e2:00:2f:28:13:7b:49:66:2d:d8:0f:27:68:d5:64:52:5c:d0:
ec:2e:b3:55:aa:98:43:54:98:7c:7b:cd:40:46:34:87:ef:7f:
99:9a:fe:5d:d3:af:e2:58:3a:2c:ea:22:02:bd:bb:99:89:3e:
3a:60:b6:4c:f7:a0:05:c7:85:e1:bf:63:85:76:a0:42:0d:b6:
83:53:64:7a:b1:fc:da:aa:ce:87:0d:15:c4:02:cb:64:e8:11:
4d:e6:98:88:3f:a7:cf:91:76:64:c7:9e:d9:97:78:d4:40:fe:
5b:03:ee:40:ac:66:be:46:3c:b7:97:8a:b3:7e:0f:c1:af:cf:
12:8e:c4:41:eb:b0:d6:21:5d:29:c7:07:1e:8a:dd:13:3b:75:
ad:b2:b7:46:c4:21:c2:1f:5a:71:05:d4:cc:ec:31:1c:df:d9:
d7:a0:af:db:8b:77:de:23:86:7c:41:7d:1f:e1:50:90:5c:5f:
3d:78:5b:03:bf:7c:b3:a3:56:a0:e7:eb:45:0a:4b:08:7d:bf:
b6:72:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:27 2026 by rpki-client