
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier: c+fL26Loe/F1bMhUiOfEpmskLAqZMlmO4rm24f5c04E=
Subject key identifier: B7:5C:0B:DF:5F:B2:B1:54:EF:B2:EC:9D:7F:82:A1:58:94:BA:CB:30
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 028F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number: 0210
Signing time: Mon 02 Mar 2026 06:38:48 +0000
Manifest this update: Mon 02 Mar 2026 06:38:48 +0000
Manifest next update: Mon 09 Mar 2026 06:38:48 +0000
Files and hashes: 1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: T+fAi3e83YMmzm0wtri5AKKH7F9Bh6iGVDbfcZDrDag=)
2: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: RTqg2OCl0LqycU7qMptZ5Map6Fo5tJ4chjvgrZEsq9k=)
3: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: dnF+y2zzWkZBb9zE5OkhyJUIlUqOH1249DrB3ACuXqc=)
4: BA917E94D65F11F090E652930BB43E13.roa (hash: 4wRkQ2HciJJaW6c/wbWf1lLtY3RIHkE/fK+1Eii/r6E=)
5: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: k+dog8xYCDbvQISDCzANlp1URQHH5+0FGUiTGUQ/+MA=)
6: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: p2YGe4DY5AW01a34SZ0vPG/zP1+IIWlPwFIhIUIQ6RI=)
7: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: DTPQtprWS1asx+9dy98489mAliPdZ8NJ5NrMYvQZjdY=)
8: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: wUmrURd/1BjfBH6f7MyGfeZya3xCTYfDafUNIl+rKO0=)
9: FAC35354610611EFB6324A30C4F9AE02.roa (hash: MGWYl6jAGMEWuZAwwqj4daUxlHs2nlJcqeKspxAgpmM=)
10: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (hash: E6mwK6fKqTUEUkTD13ZIpl18GlxnvDCjbMfOKUzvatc=)
11: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: HPRG3Br1Z7/8i0RZTaXdt0D3jVwVisBRSTFO73V9j6o=)
12: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: BYrT3gSpcFGf66F7OgOWFpwB6S9uu2bRl3KZJFEG7yU=)
13: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: h7BGEXdT8/fJrbtPEuzFrIHw8A3Ou1Gq593O22LjGdE=)
14: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: Q8t2w5Bm1s2xc9u7zUHx3tOoqfxW1aDc4bjuc++C4OA=)
15: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: bTEfr6e3UYTJtEKaPYWG9RTqbYRlEbEpek9SXbZLbzk=)
16: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: 2Q8RbjE4mHztepKARc4PS5hTmcTmIbeZgaFHVD5zDkI=)
17: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: qsvf0Wviztrgpdzbp+Cc9P5Q6xcagz546uIcx9HEnws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Mar 2 06:38:48 2026 GMT
Not After : Mar 9 06:38:48 2026 GMT
Subject: CN=69a53078-1e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:e7:0d:be:75:e7:a8:29:0a:e3:e6:06:b3:
16:5c:0d:19:8a:6d:c0:56:a6:a9:d0:54:8b:48:29:
a3:cf:0c:9b:5c:91:c5:8a:b9:64:83:5f:4d:b8:fd:
76:fb:66:21:2f:38:8d:46:d2:61:e7:66:6e:ec:9f:
09:01:c5:07:67:fc:54:e9:04:fa:db:4d:5a:67:8c:
5e:f0:7c:9a:36:26:3e:f6:b3:ed:12:dc:74:11:f3:
02:58:c3:b1:87:f3:7c:c1:d2:ba:ee:02:03:f1:c6:
a2:8e:d6:2d:03:a6:d1:05:97:79:a3:d9:7c:25:cb:
53:52:14:b1:c1:0d:58:6d:e3:40:18:40:59:18:c3:
c7:b5:98:9a:b1:cd:38:13:d6:d7:9e:60:3d:d5:6b:
11:98:6e:81:3e:3b:47:ad:0a:b6:8b:43:a6:4c:ab:
94:f7:bf:11:e7:78:73:05:6e:62:c2:97:3d:72:67:
a7:55:2a:2c:d5:6d:a2:f7:ce:9c:91:37:72:56:00:
a2:95:93:e9:58:f9:1d:8d:9e:58:66:17:cc:e6:99:
f5:18:a8:85:ce:3a:06:b4:74:b5:bc:66:0e:40:3d:
4f:70:75:1c:54:ab:9b:87:ab:ee:e7:14:bb:12:97:
87:91:ae:1e:ac:d3:81:61:67:2d:7c:ab:08:e3:91:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5C:0B:DF:5F:B2:B1:54:EF:B2:EC:9D:7F:82:A1:58:94:BA:CB:30
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:87:ca:44:bc:31:87:cf:c3:cc:4f:1a:b1:90:d5:ad:1c:51:
76:b0:2a:03:27:0c:39:c6:1d:4e:81:89:c1:68:08:d5:f6:26:
59:4f:5a:4b:99:27:65:1f:1f:c0:e0:d0:f5:d3:76:6f:c8:29:
11:c5:6c:88:8f:a0:93:e3:23:a2:9f:94:f9:e5:06:f5:29:69:
3f:75:73:33:f4:c1:4b:fd:2a:6e:69:38:61:25:aa:2b:e5:95:
70:38:ce:f9:78:c5:cd:1b:20:c0:cf:de:c7:36:60:f8:3e:6c:
3e:ba:ef:f7:9b:05:10:7c:ff:10:91:fa:09:1f:1b:b0:30:ff:
f0:39:06:9c:79:e1:4d:26:5b:23:61:74:ae:61:32:b8:3e:cf:
82:d8:89:80:17:4e:84:82:e5:94:b4:a6:b8:0e:e9:51:e1:a0:
6b:c7:be:24:5e:d6:6e:44:33:4d:49:f0:db:3e:0c:66:6e:3c:
24:1b:ef:5f:9c:09:7c:23:94:f8:47:73:fc:16:5b:20:b6:86:
12:f0:50:47:18:9a:89:8d:76:4b:68:34:c0:74:50:b3:bd:b4:
a2:86:1f:08:4b:4d:1e:c0:c8:77:a4:cf:54:67:7a:4c:48:97:
60:d2:6b:ec:8a:61:7b:43:a3:50:5f:db:85:51:4b:00:bd:7c:
32:d9:3b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:16 2026 by rpki-client