
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
File: oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json)
Hash identifier: 7aPnlXhriOHVUBybi5EcJuBdL3HfNlaE2/3MjH2j8uk=
Subject key identifier: 97:D3:D8:22:C1:AF:E7:3B:EC:BD:D2:00:9C:ED:9D:BC:2E:D9:66:18
Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
Certificate issuer: /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
Manifest number: AB
Signing time: Sun 05 Apr 2026 06:33:41 +0000
Manifest this update: Sun 05 Apr 2026 06:33:41 +0000
Manifest next update: Sun 12 Apr 2026 06:33:41 +0000
Files and hashes: 1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: OZqy5+oxT99FnJG5mG6SElcw5oAmy9I7ujKHC5h9dT0=)
2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: JMC4EuohYAuR9ioGha9Vz6YB1g+lt1RMEiDJajpI5UU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Validity
Not Before: Apr 5 06:33:41 2026 GMT
Not After : Apr 12 06:33:41 2026 GMT
Subject: CN=69d20245-60d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:4f:3a:c2:e3:48:11:8c:13:d9:bc:6f:7e:
02:90:03:cb:13:05:ce:d1:f9:e9:7c:6a:58:94:26:
24:69:04:ea:22:e5:4d:94:39:97:ad:4d:4a:2d:e3:
61:5a:19:23:36:ca:60:e7:6a:c6:96:56:fb:05:c1:
1a:15:03:35:09:f5:ae:3b:1c:72:7c:b5:79:c1:31:
d6:f1:41:dc:93:af:62:69:b9:c7:c1:a0:77:82:1f:
9f:ee:bd:45:50:4b:8f:cd:af:34:2e:f7:8c:e0:72:
37:2c:5c:7d:7b:52:37:60:e4:06:bb:76:a9:ca:fb:
11:ce:64:fc:75:34:bc:05:1a:a5:b7:51:6f:e8:1d:
87:fd:8d:76:1e:40:6f:e4:c3:24:0a:23:43:c0:31:
73:df:d1:e3:33:db:27:3c:81:82:d6:49:1f:3b:2f:
f6:84:a3:5c:4f:7b:0a:87:b8:05:ad:19:26:93:46:
8f:5b:52:04:4f:c2:13:e9:b7:fb:b2:14:3f:f6:f1:
fb:17:27:b6:3a:d1:d0:1f:ea:d2:70:e0:3b:bd:63:
84:b0:6b:82:26:cd:97:4c:fd:70:14:a9:1b:8f:e1:
cb:c4:1f:54:5d:e7:7a:24:ad:63:9c:a2:7f:30:7d:
76:f2:36:99:db:c7:95:a3:7e:ee:3b:bf:cc:8d:47:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:D8:22:C1:AF:E7:3B:EC:BD:D2:00:9C:ED:9D:BC:2E:D9:66:18
X509v3 Authority Key Identifier:
keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3e:b2:bb:c5:11:66:42:50:e5:36:70:9b:bf:a4:0b:d1:1a:
c4:7e:0c:f5:bf:fb:08:1d:21:b1:0f:7a:a3:69:2d:c2:97:a4:
6b:6c:dd:87:e9:6f:8e:44:7f:22:b3:36:af:5b:c8:81:08:12:
54:b9:fa:73:b1:7b:ea:17:31:fa:0f:66:67:9c:fc:6e:3c:8d:
2c:ba:31:f5:7c:89:0d:16:3b:50:76:88:c6:51:b3:e4:b0:1d:
d4:9d:b8:75:ec:ed:b9:78:6e:2e:1c:bd:10:f3:12:6f:92:67:
c4:2d:1c:10:27:39:67:d2:4c:9c:97:4e:cb:bb:6f:6c:04:ba:
cc:c4:56:cd:43:d8:f0:9d:60:fa:7e:f3:e4:06:47:6a:0b:2c:
5d:e4:26:af:96:93:64:8c:c5:8a:07:37:a9:88:f9:b7:36:00:
9a:32:e8:53:19:4f:1b:14:d1:bd:2d:80:ef:71:1a:1e:2e:b3:
6b:18:71:0b:c9:19:4d:b0:e6:b6:46:3f:d4:e3:c7:cc:09:99:
54:fd:6d:72:46:5d:f1:57:03:d1:e9:e5:e0:c5:f1:87:b2:83:
dc:ca:3d:66:51:0e:66:d4:69:20:98:4b:a5:d9:5c:10:20:b2:
dd:fd:63:39:7c:92:34:8f:14:cb:1d:5c:ec:66:dc:cc:76:ac:
3d:07:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:52 2026 by rpki-client