
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
File: ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json)
Hash identifier: G5BpdGXoPclE05FQwiq2m0X07dUq7C+acbtfsrHUxrY=
Subject key identifier: 62:2C:35:1B:FF:7F:01:D0:3B:87:34:8E:25:AE:5C:74:2D:41:01:D2
Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Certificate serial: 02CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
Manifest number: 02C4
Signing time: Mon 27 Jul 2026 02:37:21 +0000
Manifest this update: Mon 27 Jul 2026 02:37:21 +0000
Manifest next update: Mon 03 Aug 2026 02:37:21 +0000
Files and hashes: 1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: IQ+yfkZFVIIZKTWk5rKW4VloaONKpt0nk+Z5AshEl2U=)
2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: cXCRp9D8nLh2OADm8x+9jvTxFsaNkGvRt8yDC/0Utus=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36
Validity
Not Before: Jul 27 02:37:21 2026 GMT
Not After : Aug 3 02:37:21 2026 GMT
Subject: CN=6a66c461-da47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:5b:31:e8:0a:df:8d:55:16:ea:15:54:c3:
a6:55:73:43:14:c5:a9:82:2c:fe:99:5f:9e:68:27:
1e:09:b0:d9:5a:a8:11:3f:4e:f4:07:fb:5b:52:8a:
2f:95:d6:be:39:92:0c:c9:18:39:fb:03:cd:87:0c:
78:aa:0b:67:4d:9f:85:33:de:99:e4:85:94:e9:9b:
79:77:f7:59:a9:2f:fa:90:af:11:68:0a:43:5a:8f:
9f:51:a2:6d:c6:5c:69:b0:8b:c2:ed:5f:01:50:58:
9a:ff:40:39:be:17:ad:e1:02:dc:b8:f3:a1:8d:90:
96:1d:2b:94:9d:62:f3:79:d5:96:3b:ef:ee:59:d6:
4d:4f:b5:d8:48:40:29:03:52:8d:cf:0d:a1:58:1d:
9b:cd:7f:4e:18:24:31:30:df:ef:c5:8d:ba:03:ce:
3d:24:af:3b:52:3f:a6:f9:56:3b:1f:b4:fd:28:a5:
d0:71:b3:8d:47:62:8c:0c:0b:9a:9a:33:c0:fa:42:
da:64:28:55:f6:12:55:08:ef:68:85:d6:54:07:43:
30:22:79:bc:df:9b:d6:f2:55:c8:ca:fd:3b:8b:0f:
fe:a1:32:1b:08:e0:c5:e1:b8:06:61:32:b9:02:7c:
60:cf:c3:74:75:87:bf:14:18:c2:2e:ad:20:b9:84:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2C:35:1B:FF:7F:01:D0:3B:87:34:8E:25:AE:5C:74:2D:41:01:D2
X509v3 Authority Key Identifier:
keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:95:b1:f5:cb:46:30:70:7e:ed:d6:32:4b:40:7e:e3:72:2b:
0e:ee:ce:a9:16:8f:33:b8:33:39:fc:10:89:38:15:ea:0d:19:
e5:75:74:d4:b8:6c:aa:4a:dd:7c:8b:2a:0a:4d:6d:4f:0b:0c:
12:03:85:e5:e6:19:11:9f:99:c5:bd:eb:51:46:00:b3:0d:94:
63:c5:80:b8:90:b9:e8:9b:0f:4f:30:11:3b:42:33:9e:e7:94:
87:98:3e:dd:ab:21:d0:60:56:9e:39:ed:27:c4:64:58:0a:fb:
3a:ee:f5:99:aa:c9:11:02:b4:53:02:36:d2:36:a0:10:66:11:
63:a3:48:8f:4c:1d:0f:0f:67:4f:2e:2b:e0:25:8e:65:03:07:
8a:67:c0:fc:e4:1e:62:c1:ca:3f:a4:c9:4f:e4:f6:f3:07:2e:
95:da:8c:26:d1:69:53:50:a3:92:d0:c6:90:66:50:9c:a2:9a:
9f:80:1b:a0:5e:18:e6:be:3c:70:37:b4:1c:31:c6:87:f9:8c:
3b:75:37:61:2c:ae:04:89:30:44:69:0b:21:ae:a0:80:1e:07:
96:ba:a1:66:a7:40:09:1b:bf:ef:66:2a:84:bc:73:19:c1:f8:
d4:75:ee:44:b2:1b:9e:bc:c5:05:d4:36:39:39:02:08:17:d9:
19:f8:b9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:55:58 2026 by rpki-client