
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json)
Hash identifier: VwPeriqFe1zQRp304bx6HibKYx0Q0xRXJqb+KcKKsS8=
Subject key identifier: 00:01:3C:01:E5:B4:B3:08:4D:67:B4:5A:88:01:18:2B:E4:93:A3:CA
Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Certificate serial: 03E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
Manifest number: 03D7
Signing time: Tue 21 Jul 2026 01:08:04 +0000
Manifest this update: Tue 21 Jul 2026 01:08:04 +0000
Manifest next update: Tue 28 Jul 2026 01:08:04 +0000
Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: M/pf6pp6+hx7VHzBdZWN7aG2nmdKWYGjipHMCMLW23c=)
2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: zU41dHVA7lg5HqNGf7meOX/A+lf9KSiIpMkJ1tgmeCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 993 (0x3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Validity
Not Before: Jul 21 01:08:04 2026 GMT
Not After : Jul 28 01:08:04 2026 GMT
Subject: CN=6a5ec674-6f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5c:5d:7a:c8:35:f4:d9:32:5b:eb:e8:6e:14:
3b:dd:b5:fb:17:15:8c:05:34:ab:74:91:8a:f5:22:
8a:7d:42:2f:79:e1:8a:8f:ca:53:85:58:76:7d:92:
54:02:85:2e:3e:d0:2e:a4:45:e9:c2:fd:27:4f:43:
cd:8b:14:bc:74:9d:f8:f0:c3:27:c3:c0:fc:a9:6a:
62:78:82:34:14:6c:81:35:ee:13:b6:ec:a7:f8:a0:
3e:f0:b2:ee:fb:05:23:90:85:e2:6b:77:ba:de:0a:
db:75:88:aa:36:0a:a0:f5:7f:a2:b2:84:79:5b:af:
16:72:ab:32:bf:d2:4f:7b:61:bb:ca:9c:c4:68:f8:
b5:ff:aa:6b:f3:37:2a:c1:1b:9e:97:6e:57:3e:6b:
45:0c:9c:0b:2b:6f:2e:95:e1:0d:7a:fd:52:ec:f2:
eb:71:4f:9b:9c:86:2e:78:13:91:d8:da:f3:d8:b7:
6d:8d:ab:0f:ae:a4:da:d8:39:f3:50:ab:1f:cc:8e:
ea:44:f3:24:42:7e:1a:32:f5:b3:88:7f:c2:86:e3:
ed:7b:53:b1:a1:0c:20:74:0a:97:47:82:53:32:1f:
9f:b1:ac:e7:e0:db:2e:35:ae:e2:61:24:98:7f:bd:
9d:37:43:5d:fb:0b:4e:6e:66:d0:d1:7a:45:18:44:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:01:3C:01:E5:B4:B3:08:4D:67:B4:5A:88:01:18:2B:E4:93:A3:CA
X509v3 Authority Key Identifier:
keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:9b:db:88:85:72:af:a9:ae:04:ab:e6:a0:9e:df:f3:0f:ca:
61:1c:37:bc:4d:e8:c7:66:7c:12:d1:c9:d8:32:45:6c:9e:79:
ef:ea:ba:bd:0f:c5:8a:d5:48:01:70:56:9b:55:10:ae:f7:bb:
05:88:5e:a3:ec:9b:b8:11:f5:c9:b3:54:88:65:f8:a0:ca:c3:
f8:11:42:ac:ef:f3:b0:89:ef:f1:1f:75:53:e9:39:36:b8:4f:
46:f3:b7:76:e6:9d:3f:95:78:dd:2f:64:50:7d:9e:ee:83:f3:
59:58:d2:e4:30:c9:fa:9f:15:c1:ea:42:a1:88:6e:10:da:ca:
77:06:dd:a4:1b:c6:fd:bc:da:b5:0d:db:4c:a1:d9:d7:e3:d8:
a0:c5:84:32:76:b3:c7:0c:32:43:70:e1:10:b7:91:ba:26:21:
c6:ab:8a:06:b5:97:e4:f6:89:20:58:cf:ec:97:96:72:92:25:
e5:7b:ad:93:ab:b6:97:f9:90:cf:d8:c5:05:f5:c7:bd:94:fe:
ec:2b:37:66:86:bf:c3:c7:09:fc:e4:06:10:db:16:37:bf:c5:
c5:4d:7f:9a:7b:fa:81:7a:84:1a:d6:2b:30:46:2d:7d:11:05:
71:e0:c2:b2:cd:00:85:28:d0:3d:3b:df:5f:ef:26:27:d6:89:
bc:13:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:42 2026 by rpki-client