
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft
File: OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft (raw, json)
Hash identifier: zw+Bgr4pEd7GKxqS0OGiesBhlDIJppGl/r2ko+oxM5M=
Subject key identifier: 2B:61:3E:B8:6E:2B:61:82:B9:B6:A1:C4:03:9A:33:77:BC:E7:95:AD
Authority key identifier: 39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD
Certificate issuer: /CN=A919A43E/serialNumber=399C87253E54ED6DE3770E55746466661ACED5CD
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft
Manifest number: 03
Signing time: Tue 28 Jul 2026 08:19:44 +0000
Manifest this update: Tue 28 Jul 2026 08:19:43 +0000
Manifest next update: Tue 04 Aug 2026 08:19:43 +0000
Files and hashes: 1: OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl (hash: 1mrf5ggER3xUpWuB5kJ/+VtMa+piDlJD1eBC+rcJaPo=)
2: 13470B1A8A5D11F1831FA6813B11F970.roa (hash: KTWKvrQIcAJhvdnwPkuYb68Uex7MkjqQ3SocdV59zYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl
rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 08:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A43E, serialNumber=399C87253E54ED6DE3770E55746466661ACED5CD
Validity
Not Before: Jul 28 08:19:43 2026 GMT
Not After : Aug 4 08:19:43 2026 GMT
Subject: CN=6a68661f-6b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:b0:39:4a:06:1a:fa:af:be:60:14:cc:6b:
33:9a:09:3e:2d:b8:3a:e6:3f:59:7c:a6:53:81:e2:
6b:91:97:4f:6c:08:c6:cc:c0:70:ed:36:10:e3:4c:
cf:56:5d:2e:9c:02:7a:0b:cd:b0:e6:7f:20:62:ac:
43:b2:20:cd:51:31:e9:d9:65:88:92:e9:44:f9:f2:
f5:98:4d:3a:3e:15:5c:60:57:c6:c8:43:ef:25:38:
d2:86:f4:85:85:96:bd:52:cb:87:8f:aa:9d:10:5f:
ff:b7:86:e7:e6:d7:bb:1c:b0:ac:2e:e2:22:17:95:
e9:98:58:01:b5:73:4b:c0:ab:65:6b:6f:88:6d:2d:
ad:25:ac:99:4d:78:bf:12:76:0d:a7:50:ab:5c:f7:
47:72:8b:e0:d2:2e:52:ea:55:ec:9e:e6:66:ab:a1:
12:a9:9b:33:bb:13:7a:02:20:c6:fb:2f:63:b9:ac:
f6:fa:0a:6e:63:e6:1a:89:9c:54:a3:dc:49:a1:c3:
fa:b6:f0:1e:f6:46:0a:2f:07:42:2b:7d:d2:da:42:
b7:2d:6b:d9:52:19:38:30:01:80:41:2a:bf:6e:8b:
b0:e4:af:26:0a:7e:f8:85:cd:8e:2d:11:a5:2c:09:
61:5a:14:26:38:2f:cf:42:20:0b:b6:55:68:46:68:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:61:3E:B8:6E:2B:61:82:B9:B6:A1:C4:03:9A:33:77:BC:E7:95:AD
X509v3 Authority Key Identifier:
keyid:39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:3e:2f:c8:54:1c:9a:fc:4e:12:d8:6f:6b:2e:b4:4d:37:ba:
04:be:62:fb:25:f1:6e:4c:25:0f:87:92:52:28:f1:c0:08:df:
db:59:f9:94:78:be:59:26:04:7d:cf:d8:59:32:ba:ea:3d:50:
f5:23:4f:4f:b4:e8:b3:d2:ed:42:c9:92:77:98:f1:5d:ed:35:
ff:d0:bb:d8:11:15:ad:fb:4a:e6:b6:bb:88:bf:76:b8:7d:82:
d6:6b:58:d9:72:b7:87:74:60:03:d0:a5:b8:bb:9c:21:85:63:
28:d7:12:48:a1:49:e9:58:f9:83:6e:f9:7e:ad:85:7c:03:cb:
24:6a:2d:a7:25:f5:b4:9c:84:c9:64:54:33:16:e3:80:2e:da:
65:8d:3c:af:16:4e:6f:0b:09:09:18:b6:47:55:d6:71:d3:0e:
6d:7b:da:f6:b6:de:97:fc:0a:db:39:b7:25:a5:7d:bf:28:eb:
58:4e:7b:53:aa:3e:d9:ec:d7:c9:83:55:fd:3c:1b:7d:df:19:
96:d7:56:4d:c2:7c:87:72:dc:62:de:4d:05:cc:93:92:54:fa:
62:0f:b1:33:08:e6:36:7a:54:09:78:80:fc:d7:b3:58:80:d3:
11:3f:31:38:ac:f8:a2:d7:ae:ae:b5:ba:b7:fc:d5:da:3a:9a:
8b:20:bd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:43:46 2026 by rpki-client