
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
File: OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json)
Hash identifier: QxubKYab7qFX3XERH2uCt8Y7qyHXvw0sfJXCXtj3OJ8=
Subject key identifier: 93:58:BA:54:0D:7B:4E:3C:75:37:1C:07:D3:27:6E:0E:45:C2:57:C4
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial: 093F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
Manifest number: 15A4
Signing time: Sat 04 Apr 2026 18:25:43 +0000
Manifest this update: Sat 04 Apr 2026 18:25:43 +0000
Manifest next update: Sat 11 Apr 2026 18:25:43 +0000
Files and hashes: 1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: LTWrKDU3XNq6HtRVJlYleaBmk8VUlknQtegMHVQJ8FQ=)
2: 1245956E2DB611F1B8EF9758A8833773.roa (hash: mMM2Ni5pcLVmUU40zu9mR7XX9fNyNXL41cXI4bsQQ2I=)
3: 4EF2EC842DAA11F181B163FBA3833773.roa (hash: f+EcCuzdqO4iMndLIpmYMeE8cc5kWF9Vq+ftn88/tz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367 (0x93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Validity
Not Before: Apr 4 18:25:43 2026 GMT
Not After : Apr 11 18:25:43 2026 GMT
Subject: CN=69d157a7-519c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:a9:80:36:39:7b:20:7c:16:d2:9d:4d:c4:
9c:5d:5d:a2:eb:1c:ac:bf:86:6e:39:d0:74:2c:c0:
0f:36:20:25:d4:b3:f3:6c:17:a6:e6:e2:65:9d:0d:
fd:19:14:ef:4f:06:ba:75:6f:fd:c0:2e:11:8f:c0:
73:7b:86:63:49:3d:68:55:1f:3c:ee:0e:c5:25:0d:
cd:f8:6f:eb:0c:01:9b:8a:45:e4:d5:36:69:16:93:
a3:5f:54:0e:1e:c9:4d:d0:4d:b6:5c:15:04:e8:e5:
69:bb:c2:e3:cd:cc:06:ae:b9:d6:db:e3:75:ca:47:
ea:61:53:42:4a:62:86:28:c2:4e:d1:8c:7f:30:f9:
17:ee:6a:69:e4:40:33:ed:7f:2f:c5:fc:22:c0:fb:
c2:15:a5:68:62:17:7c:c6:42:53:01:43:a4:ce:e9:
44:97:a9:5f:2b:b4:8a:f9:0f:24:af:30:56:7f:8b:
05:09:50:6c:ef:02:b0:0c:ee:91:f6:ba:b5:17:2f:
63:0a:22:aa:7e:81:ac:b9:ff:b2:c6:d0:87:cf:ab:
0c:df:0d:b5:fd:bb:03:12:b5:d7:e4:8c:99:33:08:
fa:70:b8:0b:d6:98:29:96:10:46:d5:72:ee:a1:33:
7b:db:58:21:bf:98:40:09:fa:26:58:ce:33:b8:62:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:58:BA:54:0D:7B:4E:3C:75:37:1C:07:D3:27:6E:0E:45:C2:57:C4
X509v3 Authority Key Identifier:
keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:28:37:fd:77:82:b0:ac:46:df:c6:fe:97:74:9c:8c:59:73:
fa:48:55:f2:c8:1f:f6:85:64:82:0b:cd:1e:35:80:21:60:a4:
36:54:3b:b4:09:52:fc:28:a9:e2:18:03:30:09:b3:3d:b2:f5:
8e:ed:67:bb:47:1a:b7:af:0f:80:1b:a6:92:c9:31:45:e4:ce:
17:ac:e2:eb:ff:29:d3:c4:c8:81:07:2d:6a:d5:4f:e2:02:d6:
ec:7a:bd:3b:52:1e:7a:4b:04:ce:e8:4b:b5:bc:e4:95:6f:ad:
c3:bc:6c:cf:8d:b6:52:55:f3:d3:53:6a:6f:36:2f:5f:a2:af:
5f:ad:e6:1a:8f:2a:39:b5:96:44:22:6d:31:33:19:e1:28:b4:
5e:83:51:5b:66:06:bf:4e:f7:c7:b7:d2:71:19:4b:db:5d:5a:
7d:aa:e7:0c:e2:f1:6a:04:c2:73:79:71:00:fc:66:9c:8e:15:
7c:01:99:1d:e8:58:8d:a5:ff:64:2c:da:85:42:bb:76:ba:76:
34:0c:24:55:68:5f:0b:c7:1a:07:40:ce:d7:92:81:a8:88:a3:
11:05:8b:a3:da:54:cc:1b:bb:c9:cd:b1:73:01:83:47:e7:63:
f8:46:a8:b4:eb:47:f8:96:e5:93:60:fa:7e:1a:c5:a8:11:bb:
0f:36:4f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:22 2026 by rpki-client