
$ rpki-client -vvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
File: oQCGP_euS0zjitmLfMw3suVvSQk.mft (raw, json)
Hash identifier: GiQJ4ucZd5FyTZVb3FhqDXBMkUcRFZWHrZ23FQJLshw=
Subject key identifier: EE:CA:0E:19:FC:02:56:22:E5:BC:2E:D4:E3:DB:AF:64:33:82:FD:75
Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Certificate issuer: /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
Manifest number: 0F
Signing time: Sun 05 Apr 2026 08:24:30 +0000
Manifest this update: Sun 05 Apr 2026 08:24:30 +0000
Manifest next update: Sun 12 Apr 2026 08:24:30 +0000
Files and hashes: 1: oQCGP_euS0zjitmLfMw3suVvSQk.crl (hash: QW2l58i5m8QUP5jUFYbI3B5vQqw4xTCjN2JhkX4flLQ=)
2: E437E9AA1D2B11F1A78643DA153D8C67.roa (hash: RhXXKNC+YYqsWGihres6AD8woRBHOi1Rql/obsHUIrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Validity
Not Before: Apr 5 08:24:30 2026 GMT
Not After : Apr 12 08:24:30 2026 GMT
Subject: CN=69d21c3e-4b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:7b:b7:c1:b3:2e:22:9e:34:14:ab:e5:ad:
08:67:89:9c:7d:ea:05:c2:f5:d5:ec:ed:17:4a:8f:
06:5f:3f:06:13:3a:f4:f8:94:ba:05:19:46:61:45:
7c:25:bc:52:1c:57:b6:2c:5a:80:93:ea:ca:a6:95:
ab:0f:a3:d0:30:ea:b3:38:b7:ec:f7:60:0f:85:b3:
8e:ee:0a:d7:17:ea:f5:f9:a8:eb:15:ba:cc:83:6c:
28:c8:5a:f1:f4:cb:b0:24:26:66:43:a4:0b:ea:53:
00:3d:d5:b2:68:8d:ef:3c:ee:02:ce:7a:e0:d0:c4:
92:35:ae:77:22:fc:21:bb:50:96:e6:7a:7d:bc:dd:
ad:5a:a0:a2:a8:af:d1:b8:40:5f:44:f6:0d:75:f6:
fc:8f:29:eb:65:25:42:72:83:b2:51:39:1a:6e:d7:
a3:6e:d9:25:3a:3d:aa:35:cf:c5:ec:66:95:bc:ed:
ae:aa:55:bf:65:28:9d:0a:a5:3a:ce:b0:59:9d:17:
4f:ce:28:8c:3a:3d:da:05:1e:43:82:b1:3d:4e:5b:
b3:f5:ca:a8:b9:0b:fe:23:0f:be:10:6f:42:c4:1c:
1e:ab:a5:0b:b5:05:c4:40:2d:c5:19:73:ac:1f:dd:
9e:09:21:3a:bf:1f:6d:91:f2:cd:10:fb:91:74:20:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CA:0E:19:FC:02:56:22:E5:BC:2E:D4:E3:DB:AF:64:33:82:FD:75
X509v3 Authority Key Identifier:
keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:73:a3:b0:cc:e3:fa:09:68:64:f7:48:1a:dd:a8:b3:a2:0a:
46:d4:9f:20:db:52:24:81:f3:63:6b:1c:23:2f:51:d1:9e:6e:
d5:c6:bd:8a:bd:79:21:5f:a4:62:66:fb:55:ac:cb:f8:10:d1:
f6:01:81:96:58:07:fe:d9:7a:f5:e4:5a:44:92:6e:cf:31:ab:
32:86:a4:7f:6c:8c:ed:aa:09:ea:40:c1:77:f0:1f:02:45:a4:
50:c6:fb:82:20:19:0f:99:03:07:48:4d:53:06:db:77:c3:95:
ad:4a:ed:27:05:76:62:76:d7:eb:30:df:85:d6:ef:19:e7:6d:
c2:bd:e4:82:2e:41:71:61:81:70:e1:69:e9:f4:72:d3:c8:31:
d3:8d:2a:1e:d7:b7:f9:5c:4c:33:c3:5f:51:87:95:dc:95:a5:
42:3a:6e:37:31:d5:83:bc:0f:33:04:ab:6a:51:fd:f6:25:29:
ee:a7:65:7e:39:b8:3c:5f:fc:e1:8d:63:05:25:b4:7c:05:55:
d2:2a:3d:81:e5:d5:3e:dc:1a:3f:31:9a:dc:79:d1:5a:31:25:
45:ea:92:c8:fb:47:46:31:12:18:9c:21:88:e2:3f:8c:7c:29:
e0:04:c0:bc:3d:f5:1b:b8:35:ed:73:13:64:58:d8:84:74:58:
8d:7b:13:87
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Mjg0QTExMC8GA1UEBRMoQTEwMDg2M0ZGN0FFNEI0Q0UzOEFEOThCN0NDQzM3QjJF
NTZGNDkwOTAeFw0yNjA0MDUwODI0MzBaFw0yNjA0MTIwODI0MzBaMBgxFjAUBgNV
BAMTDTY5ZDIxYzNlLTRiN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHjXu3wbMuIp40FKvlrQhniZx96gXC9dXs7RdKjwZfPwYTOvT4lLoFGUZhRXwl
vFIcV7YsWoCT6sqmlasPo9Aw6rM4t+z3YA+Fs47uCtcX6vX5qOsVusyDbCjIWvH0
y7AkJmZDpAvqUwA91bJoje887gLOeuDQxJI1rnci/CG7UJbmen283a1aoKKor9G4
QF9E9g119vyPKetlJUJyg7JRORpu16Nu2SU6Pao1z8XsZpW87a6qVb9lKJ0KpTrO
sFmdF0/OKIw6PdoFHkOCsT1OW7P1yqi5C/4jD74Qb0LEHB6rpQu1BcRALcUZc6wf
3Z4JITq/H22R8s0Q+5F0IA/rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7soOGfwC
ViLlvC7U49uvZDOC/XUwHwYDVR0jBBgwFoAUoQCGP/euS0zjitmLfMw3suVvSQkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyODRBLzg1NEMwRjVDMUQy
QjExRjFCOTEyNjZCNTE1M0Q4QzY3L29RQ0dQX2V1UzB6aml0bUxmTXczc3VWdlNR
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb1FDR1BfZXVTMHpqaXRtTGZNdzNzdVZ2U1FrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy
ODRBLzg1NEMwRjVDMUQyQjExRjFCOTEyNjZCNTE1M0Q4QzY3L29RQ0dQX2V1UzB6
aml0bUxmTXczc3VWdlNRay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBrc6OwzOP6CWhk90ga3aizogpG1J8g21IkgfNjaxwjL1HRnm7Vxr2KvXkhX6Ri
ZvtVrMv4ENH2AYGWWAf+2Xr15FpEkm7PMasyhqR/bIztqgnqQMF38B8CRaRQxvuC
IBkPmQMHSE1TBtt3w5WtSu0nBXZidtfrMN+F1u8Z523CveSCLkFxYYFw4Wnp9HLT
yDHTjSoe17f5XEwzw19Rh5XclaVCOm43MdWDvA8zBKtqUf32JSnup2V+Obg8X/zh
jWMFJbR8BVXSKj2B5dU+3Bo/MZrcedFaMSVF6pLI+0dGMRIYnCGI4j+MfCngBMC8
PfUbuDXtcxNkWNiEdFiNexOH
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:44 2026 by rpki-client