
$ rpki-client -vvf rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
File: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft (raw, json)
Hash identifier: MHPgrKNQ/BJOGMX2hvur9zTFKD3GjkByQQFsSw5au7E=
Subject key identifier: BF:FC:46:0A:17:05:C7:9C:D9:9C:35:D7:03:59:F2:59:84:7D:31:CE
Authority key identifier: A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36
Certificate issuer: /CN=A91965C6/serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
Manifest number: 4C
Signing time: Mon 27 Jul 2026 10:39:40 +0000
Manifest this update: Mon 27 Jul 2026 10:39:39 +0000
Manifest next update: Mon 03 Aug 2026 10:39:39 +0000
Files and hashes: 1: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl (hash: JEbSkrCBSR9T1J/iJFJevtYJzmuCv56WY7sScEPV5eQ=)
2: D4496826179411F19180A41B2E3D8C67.roa (hash: GgDsG3hy1PBcF5IbzyAuO44d4hcQihWGIRpm85tQHW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl
rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91965C6, serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36
Validity
Not Before: Jul 27 10:39:39 2026 GMT
Not After : Aug 3 10:39:39 2026 GMT
Subject: CN=6a67356c-6029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:70:d3:ff:4f:f0:79:c7:23:af:41:8f:ca:
75:9e:8d:bc:64:62:3a:2c:c1:04:19:60:6a:0f:d9:
1e:d4:f0:a4:44:f6:52:3f:8e:1f:58:2c:5c:40:1d:
3a:ea:b5:1d:d3:df:2c:35:ce:08:01:ec:a5:c4:4d:
b8:92:05:4d:82:e1:62:1b:b8:e5:e1:ce:28:ab:c2:
2a:71:bc:59:98:28:6e:b6:73:35:20:d9:24:8c:a7:
79:5f:46:1b:52:6c:bf:90:da:1f:83:c5:46:02:c9:
fa:bf:c6:4d:b5:2b:62:2f:6f:28:49:16:e8:d4:68:
35:4b:f8:93:0c:dd:ba:5b:58:a0:73:dc:2d:c2:e2:
4c:f1:c2:76:97:06:b9:cd:e0:f9:cc:7e:e9:8c:13:
98:8b:d0:5d:14:ba:4f:38:2b:b9:0e:5d:ec:f4:09:
c9:b0:2d:d3:67:2c:e4:97:62:40:68:dd:a8:e4:0b:
74:c0:48:eb:15:45:4c:a9:30:03:ca:dc:0d:3d:88:
5e:ac:21:6b:da:23:01:22:b5:ff:45:20:60:32:ea:
c3:7f:9a:21:62:6d:2d:60:ba:94:78:7f:63:33:e9:
63:e2:1c:fc:66:8d:02:36:63:9d:f0:aa:44:b1:23:
ec:8c:0a:7c:fd:ea:00:95:e4:9a:0a:2d:10:1b:35:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FC:46:0A:17:05:C7:9C:D9:9C:35:D7:03:59:F2:59:84:7D:31:CE
X509v3 Authority Key Identifier:
keyid:A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f7:51:cc:ff:54:a4:cb:96:f6:ec:f9:18:02:f8:14:a8:46:
4d:d3:68:73:92:5f:3c:d0:51:62:26:88:51:c4:36:d7:41:d3:
2d:21:cd:62:93:a9:08:ed:f5:3b:9c:bf:e2:9c:89:6f:78:ad:
12:62:03:e5:56:3d:18:04:91:dc:a0:c3:33:9d:9b:64:95:9e:
63:14:31:00:26:de:54:e3:24:d9:03:eb:a9:61:b2:e0:cd:4f:
50:6e:97:d9:49:5e:03:6b:3c:55:90:c5:a3:51:d6:7e:6d:19:
ea:4c:e9:b4:77:0c:ba:fe:43:75:a3:7d:f9:ad:56:ea:a1:8b:
fd:13:a1:b3:8c:cb:4a:85:24:05:53:88:24:7e:88:39:04:e7:
d8:09:6a:10:1c:c1:cc:a6:71:21:e0:1f:18:2e:5e:e9:f7:d0:
02:5d:54:2e:2f:d7:80:22:43:cf:45:40:d0:9b:6d:8d:c7:b9:
73:0f:4b:08:00:45:9e:83:7a:0f:a9:bd:68:4a:9f:f2:68:c4:
da:f4:4e:df:b4:11:09:dd:63:6e:92:f2:1f:e9:62:2f:4f:4b:
53:5e:91:4c:f2:ca:54:9e:32:53:d5:f2:83:dd:45:2e:b7:d8:
7c:56:f2:59:66:86:5d:0b:62:97:36:3f:fb:56:ee:2d:f0:3d:
9a:08:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:32 2026 by rpki-client