
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json)
Hash identifier: C+KfLsLKbZVdJEzf7omB0fZJ/LYliPoEstqj9TWDZ2k=
Subject key identifier: BC:66:2F:72:EB:24:E0:7E:6D:E1:6E:50:FE:1B:9F:E3:07:4D:04:0D
Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Certificate serial: 0272
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
Manifest number: 024F
Signing time: Mon 27 Jul 2026 04:14:31 +0000
Manifest this update: Mon 27 Jul 2026 04:14:31 +0000
Manifest next update: Mon 03 Aug 2026 04:14:31 +0000
Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: +drHFhKOu6H6zLupIwEMkYsNWuU5AJYNrGJmvIrI/20=)
2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: UJfcT25TpxMsPXblHXFvDdc06o4EalWiUveKOaWphfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Validity
Not Before: Jul 27 04:14:31 2026 GMT
Not After : Aug 3 04:14:31 2026 GMT
Subject: CN=6a66db27-0016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:9b:d1:96:9b:23:8d:e9:b2:7c:db:ae:c7:
8a:05:56:70:20:ad:ec:fe:f8:67:91:47:1b:b2:9b:
94:5f:4c:d1:86:b4:23:b7:7c:aa:b6:c5:f6:b8:2e:
53:19:71:be:9d:4c:0a:46:a3:5f:18:ee:ea:d0:6a:
d9:85:3c:6a:53:01:d0:a4:fe:19:39:69:3d:16:76:
04:aa:a4:ff:b7:81:1a:0c:8f:43:e5:c1:d8:07:3d:
40:01:b0:44:7b:16:2b:8f:0c:22:23:73:f8:ad:70:
c2:07:52:a3:80:f4:29:8f:d2:20:7a:d8:9b:05:e6:
fe:80:a3:46:52:e5:77:6c:6b:f8:48:a6:66:f3:29:
6f:89:68:8f:96:9e:d7:9b:70:ad:b5:ed:c0:73:d8:
6d:3a:97:24:78:5a:14:e9:79:f2:77:32:b0:34:96:
2d:cb:68:9f:d6:50:73:b4:0b:3c:be:63:1b:dc:d1:
94:5c:5f:2b:c0:26:7c:0f:b9:a1:26:34:d4:a1:49:
bf:1f:c2:4d:4f:af:ec:52:b0:85:e3:3e:9b:0b:50:
84:6f:21:a8:16:8d:2f:d2:09:62:b9:32:f6:66:c6:
5e:ee:ef:58:b3:63:5d:db:ff:18:57:5f:31:56:fb:
8d:87:9c:0a:f3:59:c6:70:10:b8:52:b4:54:7d:21:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:66:2F:72:EB:24:E0:7E:6D:E1:6E:50:FE:1B:9F:E3:07:4D:04:0D
X509v3 Authority Key Identifier:
keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:97:41:ee:fb:91:97:f7:b6:9e:01:d2:47:c1:b9:ad:6a:21:
75:16:7b:28:db:f8:00:64:e3:01:f4:e8:ec:99:38:cd:a9:c3:
88:61:0b:ef:fc:c2:45:67:c6:fb:da:35:a6:b5:e1:5b:8f:8e:
01:6b:67:38:ec:cc:01:da:23:79:cc:76:2c:f0:ea:8f:24:2f:
04:74:9c:4b:0d:67:08:c1:d6:40:34:74:90:c9:ff:66:40:40:
40:23:93:3b:e7:5e:80:ef:68:37:49:44:31:14:a9:c9:c3:34:
9e:9a:b5:e0:ae:30:63:09:28:af:6a:ce:a2:3c:fe:88:9f:dc:
62:65:56:b4:72:dd:98:6d:48:58:86:21:42:ce:49:82:86:94:
d5:2d:98:3a:26:57:ad:c6:c6:be:55:8c:69:db:34:c0:c5:3b:
c5:01:b9:46:1d:56:6e:ce:28:a4:9f:bb:7c:a2:d0:c0:bd:41:
bf:a2:dc:a0:eb:d8:e8:36:ac:94:17:a1:2d:f9:67:e9:0e:b5:
f3:6a:2e:b7:e1:75:57:56:81:1d:62:e7:cc:3e:f9:ad:92:dd:
a9:b1:7e:b0:d8:97:b6:b6:e3:fb:bd:24:15:29:f7:8d:6f:d9:
bb:ae:01:d4:f8:cc:a8:bc:34:89:94:c9:d0:99:5c:a0:99:97:
01:fc:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:45 2026 by rpki-client