
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
File: ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft (raw, json)
Hash identifier: ZTcapfvIiB87d2odOWpwT1mqJ16KA/0wWlSvrdod55s=
Subject key identifier: B7:EA:5E:08:B4:4D:EA:BA:C4:8D:21:9C:E7:07:6D:3F:E7:4C:E0:9D
Authority key identifier: A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2
Certificate issuer: /CN=A9196AF7/serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
Manifest number: 2B
Signing time: Thu 11 Jun 2026 11:04:23 +0000
Manifest this update: Thu 11 Jun 2026 11:04:23 +0000
Manifest next update: Thu 18 Jun 2026 11:04:23 +0000
Files and hashes: 1: ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl (hash: s6N7e2zfcxMojcnunWAXOnFRj0G9/6HQ8PehkBqpzJ4=)
2: 7EF6CB6E24CF11F1AAA533A9A9833773.roa (hash: 8y7L9hPSTuk1LDFXpb7ShDJmE7OnOp5HbjTXee/kCzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl
rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196AF7, serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2
Validity
Not Before: Jun 11 11:04:23 2026 GMT
Not After : Jun 18 11:04:23 2026 GMT
Subject: CN=6a2a9637-c1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:de:a4:f6:7a:10:f1:4a:58:2b:78:97:33:98:
32:6d:9b:01:15:e9:95:30:1a:3e:77:5a:91:e2:d0:
8b:08:01:32:32:cb:01:0b:b8:c3:e7:b3:32:4d:2b:
e5:2a:54:ab:1f:8a:04:cc:20:9a:e2:2f:93:5e:c1:
29:7d:4a:9e:ac:ab:0c:39:ad:25:a6:9f:8b:6d:8c:
61:df:57:1c:80:51:10:c3:04:07:0a:5b:51:36:9b:
b5:76:ec:c0:51:de:06:9b:d9:0a:cc:db:04:f3:b5:
68:5e:e8:c6:e4:99:e4:5d:8f:4a:a5:7c:df:2c:47:
66:9c:32:b4:ee:fd:91:44:58:60:7f:99:c1:c2:43:
62:19:fe:db:a5:05:e7:0a:4b:3f:58:c8:95:28:2d:
c3:50:ba:1d:80:ae:7a:d7:7e:77:02:69:23:d7:fb:
6d:9a:02:cb:ce:10:e6:2c:d2:01:7c:d8:22:c8:d2:
e1:fb:86:63:70:c8:10:89:74:71:0c:93:b0:55:2d:
e6:1c:cf:8b:fa:88:e8:fe:89:3d:09:0c:5e:be:9e:
23:7e:09:17:6a:18:a4:dc:60:7c:95:80:d7:a6:0c:
9f:5c:86:3a:87:67:8a:31:46:bb:b3:84:ef:9d:13:
64:21:4f:da:86:5f:27:ff:74:ba:e1:57:36:87:85:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EA:5E:08:B4:4D:EA:BA:C4:8D:21:9C:E7:07:6D:3F:E7:4C:E0:9D
X509v3 Authority Key Identifier:
keyid:A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:d1:e1:60:24:34:01:ea:c0:7e:6b:e0:1b:b6:c8:50:58:
20:cd:ba:c6:b8:37:fe:1c:b9:21:cf:3a:af:87:0a:da:91:2c:
47:4a:e3:9b:4f:d5:09:f6:6e:ef:26:11:77:46:a3:e9:67:ce:
49:1a:49:ca:8d:28:fb:1c:90:07:da:3e:5b:55:2b:3e:bb:14:
e3:fa:e5:ba:f0:01:20:40:e8:dd:0d:e4:35:bc:0b:bc:cb:07:
17:95:06:c0:c8:d2:ba:a4:a7:9d:71:3e:82:0a:51:a5:45:e3:
a2:9c:a1:7a:11:3d:b1:a2:be:91:b6:a4:30:cf:3e:c8:12:c7:
10:76:ba:19:2a:0b:8d:ad:43:ed:21:69:24:f1:29:3d:1d:27:
2b:a9:ee:40:85:dd:b1:65:74:68:42:33:46:48:33:1f:d4:8b:
a2:cd:17:25:42:aa:b6:98:ac:fc:5b:9a:bf:d6:86:39:1c:07:
a3:58:b8:ff:66:f6:6a:19:ae:88:01:4a:9a:e6:37:8c:1f:3b:
88:9b:e9:0d:c7:76:d0:4b:9b:3b:51:16:7d:ce:9d:26:e6:c5:
11:9f:2c:a6:62:e6:5f:d5:84:ae:96:43:49:45:72:8e:ef:78:
c8:36:d1:6b:8f:cc:21:3c:da:c6:7c:31:f9:01:bf:33:c6:6d:
39:c2:fe:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:14 2026 by rpki-client