
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json)
Hash identifier: WVTV//RnGrRupPyxghqdf8PwrUfWXUF6Dp1Wm9GrZ80=
Subject key identifier: 5A:DF:C9:AE:93:A7:CB:15:7A:E4:37:D2:1B:73:EA:B9:97:B4:4F:57
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 3670
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
Manifest number: 35E2
Signing time: Tue 28 Jul 2026 14:26:32 +0000
Manifest this update: Tue 28 Jul 2026 14:26:31 +0000
Manifest next update: Tue 04 Aug 2026 14:26:31 +0000
Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: C6G01wP/Y/0YLBBDjlKV4g+a5WdeoEVsVCSE++gnBj4=)
2: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (hash: SDyY9CxWbpTxTv2y+7w0t15rfAMVOucoRmveZEJG2J4=)
3: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: +E2YvC30N7G4XyfUFImEIGM741TQeBV6oc6cEcKy0A4=)
4: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: GDg6tzHTkf4U+SPLrShf4CtKLD6rp4wOgPpuQzEBJ6s=)
5: 02C97520985011F083EA2077C4F9AE02.roa (hash: elpetSZnc/cw/UNBwFiiaE6GRjUvr9tLQSkFah9iq8Y=)
6: 72378020EE2A11F0BE1A1CA2486F56BC.roa (hash: aKgJ5Lr0RjgCGZC/3syl2BTMU1aaDSTAss+LizAPlBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:26:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13936 (0x3670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Jul 28 14:26:31 2026 GMT
Not After : Aug 4 14:26:31 2026 GMT
Subject: CN=6a68bc17-8764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:ff:58:1c:42:03:ac:cc:f2:57:f3:a0:ca:
4b:b8:54:07:fe:2e:90:fe:45:7b:9b:68:6f:1b:cb:
38:9e:e0:85:4d:a0:49:26:1e:5f:81:96:8b:86:c2:
10:8a:d7:87:6a:60:68:49:89:d2:36:29:4a:7c:82:
1b:ea:a7:e6:0e:6a:a6:d4:df:4f:08:53:a0:cb:ee:
be:29:91:82:24:85:33:4b:d7:c0:35:90:73:47:71:
85:bc:a9:c8:0a:b4:7a:97:23:fc:1d:7c:9b:2d:e1:
d0:89:d9:e8:1b:c7:1b:59:38:91:bc:a4:17:c6:18:
4a:dc:43:fa:70:c1:e6:01:e7:83:94:35:29:ff:29:
d1:44:8d:72:01:6c:09:59:eb:16:0d:29:b9:c9:88:
75:17:d1:f5:c3:74:71:77:c0:aa:db:99:2b:f9:ea:
bf:e0:ae:61:fd:03:88:78:90:a6:70:84:8e:01:57:
26:5e:f4:1b:e7:aa:2b:d9:36:48:2b:64:b3:dd:fb:
a8:85:73:88:c1:41:61:d7:5d:79:7b:79:86:00:3b:
6d:cd:a8:84:10:87:68:1a:87:85:9b:59:b2:82:92:
1a:c7:ea:1a:a4:04:e0:f2:ae:71:16:2e:22:ec:4b:
b9:ab:d7:94:31:50:77:0a:f3:35:e6:61:ab:47:04:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:C9:AE:93:A7:CB:15:7A:E4:37:D2:1B:73:EA:B9:97:B4:4F:57
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:c6:5d:2e:39:63:9c:79:60:d4:a0:d6:a2:30:1d:e0:7f:c3:
64:a1:6e:a6:3f:3e:9c:11:ba:7c:44:e7:fd:6b:ae:d7:3a:6c:
14:24:83:8f:25:da:bd:62:ee:67:90:f2:a1:01:dd:1d:22:64:
c0:7b:a4:2e:37:36:d5:70:2e:29:0d:90:c3:3e:af:76:13:cd:
60:2e:fb:40:05:37:36:4b:66:38:72:26:43:d2:bf:e3:49:e0:
e7:b5:2c:4b:36:85:55:da:f3:77:a4:7f:4d:f3:a0:5e:72:1b:
43:8b:70:99:d3:ee:4e:3d:f1:0e:c9:2a:3f:8f:4d:b6:16:01:
ef:00:e9:b5:d7:b2:25:22:03:ee:cb:ee:a9:02:07:47:93:05:
51:ab:eb:bd:38:38:fe:97:26:34:64:34:71:16:31:2d:8c:0f:
1d:99:11:11:9a:3d:73:1a:ef:79:73:87:a7:ec:f0:62:cb:2e:
07:56:71:de:07:5b:36:19:8b:5c:46:e5:48:02:4c:58:76:c5:
3e:cd:f8:4c:24:e9:b1:ca:11:be:5a:74:54:49:43:1a:bf:04:
72:d4:30:79:dc:04:d6:1c:76:f4:3b:99:01:67:05:00:d9:65:
24:9f:52:46:32:98:d7:1a:bb:88:85:df:9f:90:8b:f3:31:89:
a1:23:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:35 2026 by rpki-client