
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier: 8h4m7P5OhVbQiJV8n3qztcRpuD7+9dtTVpZD6CxFbAE=
Subject key identifier: F3:5C:F9:BE:6D:B7:E2:52:78:22:11:F7:EE:EE:81:27:E6:5C:D8:55
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number: 0213
Signing time: Mon 02 Mar 2026 11:38:22 +0000
Manifest this update: Mon 02 Mar 2026 11:38:22 +0000
Manifest next update: Mon 09 Mar 2026 11:38:22 +0000
Files and hashes: 1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: SwspZgjxCRpGwQyxViFTfmceCD0U8ECeJvdePvNNWHE=)
2: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: k+dog8xYCDbvQISDCzANlp1URQHH5+0FGUiTGUQ/+MA=)
3: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: BYrT3gSpcFGf66F7OgOWFpwB6S9uu2bRl3KZJFEG7yU=)
4: 49FC44B0162A11F18FE9298B373D8C67.roa (hash: R7i2wINlOt7SeQns86jhCdT1p2Hh0s8++plJe6v+zKs=)
5: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: wUmrURd/1BjfBH6f7MyGfeZya3xCTYfDafUNIl+rKO0=)
6: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: h7BGEXdT8/fJrbtPEuzFrIHw8A3Ou1Gq593O22LjGdE=)
7: BA917E94D65F11F090E652930BB43E13.roa (hash: 4wRkQ2HciJJaW6c/wbWf1lLtY3RIHkE/fK+1Eii/r6E=)
8: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: Q8t2w5Bm1s2xc9u7zUHx3tOoqfxW1aDc4bjuc++C4OA=)
9: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: +F6+Kdo4UMUeEVd3rJTRenZVLka+775uqmL3KcaRYis=)
10: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: DTPQtprWS1asx+9dy98489mAliPdZ8NJ5NrMYvQZjdY=)
11: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: bTEfr6e3UYTJtEKaPYWG9RTqbYRlEbEpek9SXbZLbzk=)
12: FAC35354610611EFB6324A30C4F9AE02.roa (hash: MGWYl6jAGMEWuZAwwqj4daUxlHs2nlJcqeKspxAgpmM=)
13: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: RTqg2OCl0LqycU7qMptZ5Map6Fo5tJ4chjvgrZEsq9k=)
14: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: qsvf0Wviztrgpdzbp+Cc9P5Q6xcagz546uIcx9HEnws=)
15: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: dnF+y2zzWkZBb9zE5OkhyJUIlUqOH1249DrB3ACuXqc=)
16: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: HPRG3Br1Z7/8i0RZTaXdt0D3jVwVisBRSTFO73V9j6o=)
17: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: 2Q8RbjE4mHztepKARc4PS5hTmcTmIbeZgaFHVD5zDkI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Mar 2 11:38:22 2026 GMT
Not After : Mar 9 11:38:22 2026 GMT
Subject: CN=69a576ae-53e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:4f:69:8b:74:e6:99:f8:a5:12:0c:fe:f8:
b3:79:c3:42:3c:f9:a6:ae:ff:ce:d1:fc:f4:ec:ab:
87:77:8f:54:6f:8f:94:45:97:2b:85:a4:25:23:43:
ef:e3:74:8f:2d:fa:c2:96:65:c3:c1:db:9e:3a:6f:
d5:b2:4b:fc:8a:53:d0:ec:e3:8c:26:50:f4:f3:5b:
8b:ba:89:4f:26:b8:bd:0c:cd:de:b5:80:ae:2b:f4:
cd:7f:e1:e6:09:b3:3b:a2:0f:23:25:3e:72:ef:72:
2d:5b:b7:8e:42:7d:eb:c9:ad:36:cd:16:03:47:13:
60:d7:7f:1e:2d:d7:c6:e6:0a:c7:8e:ba:3c:12:a8:
f0:ff:a5:e3:3f:c5:f2:07:c5:46:7c:c0:93:ab:0d:
42:d1:39:dd:c5:41:b6:d7:e6:39:e3:9b:85:4b:a4:
48:98:c3:9f:0b:bf:6f:7b:2a:6a:a2:b6:ae:f7:65:
21:67:b6:bf:18:37:2b:16:91:ec:98:57:da:66:f0:
3f:22:20:47:56:e7:d4:ca:09:90:1a:55:46:6c:f5:
42:1d:6f:4f:d5:b0:fa:68:52:49:e2:39:b1:9d:c4:
65:c2:74:77:94:6f:db:61:35:cb:72:be:2c:77:79:
80:85:54:d9:0b:08:6c:89:e4:6e:d1:b7:3f:75:5c:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:F9:BE:6D:B7:E2:52:78:22:11:F7:EE:EE:81:27:E6:5C:D8:55
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:10:d2:f8:5e:5a:4b:9e:c5:64:b7:67:dc:cb:a2:12:55:bb:
a4:00:8d:d8:4e:cf:9c:a6:21:f0:e9:57:47:47:a0:3f:68:5f:
0b:33:df:e8:a1:54:ac:8d:7d:2e:48:6e:5a:ce:e8:11:a8:b5:
de:d1:f2:85:04:1e:6a:66:69:5b:dc:18:13:8b:8f:b1:a1:c7:
7f:ca:16:18:53:b8:c3:0b:24:57:28:63:0f:03:e2:e9:0e:6b:
64:8a:48:3e:a4:01:fa:30:36:ff:fa:0e:43:29:66:49:f2:4b:
63:77:f7:26:f0:29:de:62:62:22:9f:65:7e:45:fb:02:31:8a:
64:e7:ad:a1:06:2f:96:7f:81:06:42:83:98:8c:a4:bc:e9:92:
6b:59:f1:21:f5:32:3e:fb:13:19:80:de:dc:85:2b:33:30:7f:
4c:59:f0:f0:86:ae:fc:86:3b:8b:10:5a:f1:d9:1c:fb:86:92:
53:7a:1a:1d:1f:c6:14:d6:2d:12:aa:50:3d:d3:c0:a0:a1:e2:
1d:c7:ce:36:99:9c:b0:41:a9:e5:24:2e:3e:6d:c1:f1:95:30:
7d:e9:ba:ea:9c:5a:7d:e1:2b:cd:65:86:59:91:cc:f1:b1:3d:
7c:cd:96:77:8e:cc:d2:e9:f1:74:59:46:96:63:f2:fe:c0:1f:
c7:b9:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:32 2026 by rpki-client