
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier: AJ7PDvH1RPbxY3XWHBTEVJfI29EpATRGcsKsUusR6Dw=
Subject key identifier: 1A:AC:EF:52:29:48:F7:D3:29:86:5A:8F:59:E6:38:37:AA:A7:22:DF
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 02AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number: 022D
Signing time: Fri 17 Apr 2026 02:55:19 +0000
Manifest this update: Fri 17 Apr 2026 02:55:19 +0000
Manifest next update: Fri 24 Apr 2026 02:55:19 +0000
Files and hashes: 1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: h2Gz4/8wFEOeammuPzxs8rpP83MEzlA8iYi/WnLJ0GA=)
2: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: +F6+Kdo4UMUeEVd3rJTRenZVLka+775uqmL3KcaRYis=)
3: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: bTEfr6e3UYTJtEKaPYWG9RTqbYRlEbEpek9SXbZLbzk=)
4: 49FC44B0162A11F18FE9298B373D8C67.roa (hash: R7i2wINlOt7SeQns86jhCdT1p2Hh0s8++plJe6v+zKs=)
5: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: h7BGEXdT8/fJrbtPEuzFrIHw8A3Ou1Gq593O22LjGdE=)
6: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: k+dog8xYCDbvQISDCzANlp1URQHH5+0FGUiTGUQ/+MA=)
7: BA917E94D65F11F090E652930BB43E13.roa (hash: 4wRkQ2HciJJaW6c/wbWf1lLtY3RIHkE/fK+1Eii/r6E=)
8: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: DTPQtprWS1asx+9dy98489mAliPdZ8NJ5NrMYvQZjdY=)
9: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: wUmrURd/1BjfBH6f7MyGfeZya3xCTYfDafUNIl+rKO0=)
10: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: HPRG3Br1Z7/8i0RZTaXdt0D3jVwVisBRSTFO73V9j6o=)
11: FAC35354610611EFB6324A30C4F9AE02.roa (hash: MGWYl6jAGMEWuZAwwqj4daUxlHs2nlJcqeKspxAgpmM=)
12: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: BYrT3gSpcFGf66F7OgOWFpwB6S9uu2bRl3KZJFEG7yU=)
13: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: 2Q8RbjE4mHztepKARc4PS5hTmcTmIbeZgaFHVD5zDkI=)
14: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: RTqg2OCl0LqycU7qMptZ5Map6Fo5tJ4chjvgrZEsq9k=)
15: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: qsvf0Wviztrgpdzbp+Cc9P5Q6xcagz546uIcx9HEnws=)
16: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: Q8t2w5Bm1s2xc9u7zUHx3tOoqfxW1aDc4bjuc++C4OA=)
17: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: dnF+y2zzWkZBb9zE5OkhyJUIlUqOH1249DrB3ACuXqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686 (0x2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Apr 17 02:55:19 2026 GMT
Not After : Apr 24 02:55:19 2026 GMT
Subject: CN=69e1a117-2583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:e2:73:e9:bc:55:3d:3f:ed:1d:2e:c7:02:
75:ec:74:83:d9:39:89:9f:82:5d:0c:8d:36:d0:a6:
84:7e:7f:80:57:70:14:86:61:0f:40:17:14:9e:95:
c9:0e:83:6a:ef:d6:10:ad:d7:ce:3d:38:88:02:b2:
89:5c:a6:44:8b:0a:98:57:d4:26:b7:42:af:fb:e7:
da:2e:9c:b4:6f:ed:4f:7f:03:66:5e:85:bd:e5:93:
8c:25:30:00:b4:31:47:96:85:19:7b:84:6b:f2:22:
16:8c:45:65:09:12:cd:1c:ff:80:46:a4:37:71:2f:
ff:d8:c3:6d:13:50:eb:c4:d7:a5:73:02:b4:0d:bf:
47:ed:67:10:de:38:a4:71:78:90:ea:a0:2a:62:30:
45:90:d0:a7:83:fc:8d:33:61:c2:05:65:19:8c:66:
69:0a:3d:73:f6:d9:ff:8b:93:a6:da:99:9e:3a:58:
1d:fe:f1:03:1f:86:af:d4:ff:76:b6:44:78:f3:7f:
b2:2b:d0:3f:63:f1:53:01:8d:fe:37:a0:c6:22:6b:
2c:24:ed:09:90:90:53:ad:81:30:6e:74:02:ba:05:
ca:10:a1:4f:50:44:43:23:13:a9:aa:81:bf:27:5b:
19:f6:2f:2f:4c:2a:00:b9:05:cf:14:bb:ce:ac:b5:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AC:EF:52:29:48:F7:D3:29:86:5A:8F:59:E6:38:37:AA:A7:22:DF
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:ce:75:74:0c:a7:ff:09:4d:6c:4d:69:93:c6:74:d3:59:d3:
f5:ce:5c:d3:28:e2:9c:97:d0:9a:a2:ac:25:74:eb:ad:26:43:
73:50:69:0b:8d:6f:f6:66:b0:b4:be:8d:2d:fc:2c:43:a0:b3:
63:49:d9:2b:44:01:f5:68:2c:8e:2d:a2:73:a9:64:05:15:d5:
1d:62:23:34:b0:3c:c0:5c:cc:70:f1:8d:11:cc:a5:07:f2:b9:
1d:80:77:06:54:0d:c5:6d:6f:76:07:66:5d:f4:c0:19:71:72:
79:54:cb:f4:fa:2b:b8:1a:4a:03:bd:db:3a:7e:0c:61:cc:3f:
67:e2:20:bf:ca:13:6b:28:38:b3:dc:63:2b:f8:b1:c4:c6:9f:
66:e5:4c:6b:9a:e5:49:fc:c8:08:78:0b:3e:65:f6:d4:04:ee:
42:2d:24:ae:8e:b3:50:df:f2:50:09:66:0a:62:2c:32:3a:86:
14:ca:43:e4:de:2d:bc:86:5a:4e:21:e8:2f:79:13:c7:64:fe:
d2:85:01:98:a0:07:a2:ff:55:4e:fa:81:31:70:d7:45:84:80:
4f:c3:b7:8e:a6:89:d4:58:76:ea:7a:b4:eb:e8:5d:66:33:1a:
43:fb:ac:a2:e5:85:24:82:8b:b0:36:52:39:78:51:8f:47:2d:
ff:2a:1d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:39 2026 by rpki-client