
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json)
Hash identifier: mRQjjR+/akf+hF6TBcwFMQTqPlvHMcUrLZ076QRfvk0=
Subject key identifier: FD:B7:50:D6:DA:F3:29:E2:38:4C:67:7D:DB:39:E9:CC:E8:C6:80:C5
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 3610
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
Manifest number: 358D
Signing time: Mon 02 Mar 2026 01:00:22 +0000
Manifest this update: Mon 02 Mar 2026 01:00:20 +0000
Manifest next update: Mon 09 Mar 2026 01:00:20 +0000
Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: Da4PJ9Rijz3PHDSNmYllQLGQ3vTrAw6RtVprbou5L0Y=)
2: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: Wb0omWMGDcuIWJtZzO5aYUeXeBS3PzZ1jDUa5EAiIV0=)
3: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: Uy1brxvBZUOgYCz25E+l8hAge6tUCO1Wj1Oolb03hHo=)
4: 72378020EE2A11F0BE1A1CA2486F56BC.roa (hash: 1BgAAovkYb1AJSpU1SPJu/hRuo7VBc+isEUKAmqAK38=)
5: 02C97520985011F083EA2077C4F9AE02.roa (hash: iDndSBoFAc9uhUgvXQuDJ/5b7tXkUPKhNkfuD+XgWIQ=)
6: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (hash: 2cUDNv3hrrgYqWPFe+1g+j6W4a5daevt2vyg7mc5Jv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13840 (0x3610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Mar 2 01:00:20 2026 GMT
Not After : Mar 9 01:00:20 2026 GMT
Subject: CN=69a4e125-42ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:d0:8b:e9:e7:cb:93:cb:b3:d1:81:0f:de:
29:ec:d1:d9:27:c4:8a:de:d7:e0:38:0a:70:9a:3a:
33:6f:14:c3:b2:02:9b:86:2a:4a:41:de:d1:88:42:
1a:c6:aa:8b:65:69:52:e6:08:c8:87:38:ad:1d:fd:
80:1b:ab:8e:1d:a9:55:73:ed:b9:74:55:8e:32:dc:
39:c0:0e:c3:57:4d:a7:54:ed:2a:c1:a8:5d:53:44:
e2:1b:32:4b:d6:f4:d0:74:b9:88:c4:b6:e3:2d:41:
c0:5f:09:d0:19:a3:4d:3e:8a:69:2b:d9:6e:1f:10:
30:a9:09:a0:d6:12:9b:ac:51:67:50:43:b6:55:23:
73:4c:88:80:1c:13:84:09:71:29:87:de:4a:f7:d6:
c7:14:9f:e1:6a:1f:80:4e:be:d6:aa:4d:17:63:58:
62:3a:bb:97:44:c5:e1:60:fd:f9:a8:63:72:93:c6:
83:a2:7c:69:07:dd:69:74:19:c6:d0:6e:64:be:bd:
ac:71:e5:28:27:24:f7:d1:4d:96:59:1d:0d:85:ec:
65:ad:3f:f1:29:02:db:57:e2:48:24:f0:71:81:c4:
a0:c0:13:05:3c:e2:37:e7:bd:20:b7:af:8e:ba:dc:
29:67:34:65:61:58:bf:d2:32:d3:e4:ee:de:e6:1c:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B7:50:D6:DA:F3:29:E2:38:4C:67:7D:DB:39:E9:CC:E8:C6:80:C5
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:a0:8f:28:5b:76:2f:d2:c4:08:bc:c5:83:1d:42:c1:f1:63:
9b:f7:4a:4f:25:1c:8f:53:7b:3c:d7:67:22:ad:ba:0e:11:2d:
5c:27:27:ad:ee:a4:f2:66:5a:a1:4e:ab:10:dc:12:13:94:22:
7e:32:05:f8:b7:15:3f:6d:c9:fa:e2:a5:17:ae:68:9c:6a:ec:
35:6a:08:12:99:30:ce:e1:b7:d6:69:f0:cb:a0:2a:f2:ed:83:
22:92:38:c5:71:b1:cb:69:24:81:47:62:48:da:c9:e7:13:ed:
55:b0:1e:c1:cf:85:54:14:79:c7:f1:3a:fe:67:c9:29:b1:f5:
c7:a2:45:75:29:92:d2:00:32:5b:9e:7e:99:84:b1:bf:fe:53:
c1:3b:b3:59:75:10:2f:b4:81:58:af:33:8d:26:4c:d0:29:a2:
b0:09:b7:e3:c4:41:96:dd:7f:55:44:ae:d9:06:47:04:c8:91:
ea:9c:85:40:18:77:ca:96:26:c1:4d:f9:57:91:6a:05:3c:30:
f3:82:78:85:00:c2:60:f6:31:b6:b2:14:94:21:0e:63:18:20:
19:4f:c1:bb:d8:a1:46:40:89:b2:43:9c:77:48:ec:77:cc:e5:
ca:b8:a8:56:3a:3b:b5:26:72:08:0e:00:4a:bc:ed:92:a9:3b:
68:39:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:54 2026 by rpki-client