
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier: 1JZAAp3w4+oz8UPvq/Ls3k7e+l1cd9Ee05WykceQxB8=
Subject key identifier: 84:36:4C:52:98:F8:31:70:34:8D:7A:6F:5D:68:B8:2D:A3:B7:92:1E
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer: /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number: 07F3
Signing time: Sat 04 Apr 2026 21:03:35 +0000
Manifest this update: Sat 04 Apr 2026 21:03:35 +0000
Manifest next update: Sat 11 Apr 2026 21:03:35 +0000
Files and hashes: 1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: hajAwzXrah7qMYW02Dv4DoAK/snAgsSjEKMVFiv8V6E=)
2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: a8Wy1m3Rmhsdw7JgMn9q7U8Wx5LEB2V1AB0BFbhhHE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Validity
Not Before: Apr 4 21:03:35 2026 GMT
Not After : Apr 11 21:03:35 2026 GMT
Subject: CN=69d17ca7-4b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:6e:42:d5:19:56:66:33:fa:0c:ad:47:89:
09:64:1b:5b:c7:cd:cc:0b:ba:e9:48:a7:c4:4e:8a:
ff:8c:f1:b2:29:2b:b9:67:a4:3f:7f:c9:34:46:99:
d2:e1:c8:ab:ed:80:8e:4f:02:34:64:dd:d7:7f:cb:
03:10:6a:f6:b3:64:df:b7:d9:42:32:5d:7a:a2:cc:
d9:f8:35:1c:d2:8d:ef:f7:9e:33:46:74:eb:b8:fc:
36:db:3e:b4:a0:54:c6:16:ba:86:f4:37:5c:04:fe:
12:39:5d:94:32:3e:82:93:cd:22:9a:53:94:5e:6f:
1d:69:2e:ef:7d:66:0c:36:fa:ef:21:e0:81:4e:46:
ef:d1:98:57:40:fa:ad:f0:c5:7c:9a:e0:45:66:55:
35:cc:ba:64:5f:91:6e:8d:df:af:46:00:47:fe:8b:
4d:cd:be:77:33:aa:d4:0a:00:1f:84:b6:7b:79:f7:
ce:99:0c:51:7b:c6:6f:d5:84:2a:73:c0:23:16:5b:
32:7f:09:f7:96:2a:8d:c3:86:c5:e7:34:c8:cc:78:
00:98:e2:48:63:10:ad:f1:64:f7:3f:86:af:62:18:
a3:5e:11:99:89:f0:bc:24:27:b8:0a:4f:57:96:f2:
a2:ea:a9:0d:7c:94:2c:06:3e:fa:df:22:01:6f:96:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:36:4C:52:98:F8:31:70:34:8D:7A:6F:5D:68:B8:2D:A3:B7:92:1E
X509v3 Authority Key Identifier:
keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:9e:a3:2b:a9:0a:38:dd:99:cc:58:1e:12:aa:d0:96:29:03:
38:6b:7c:7f:66:fb:42:3e:b0:b3:cd:de:74:37:19:76:70:72:
ac:08:77:19:96:ae:39:e1:b9:06:6d:32:c8:6d:7b:7c:d7:fe:
56:af:5d:a6:d5:c4:fd:eb:90:30:83:11:20:92:44:62:75:04:
f9:e1:2a:7e:98:b5:d4:44:58:93:e4:f6:35:a0:b6:cf:31:3d:
76:92:5f:c2:2f:b8:44:c2:3f:28:fb:7c:63:b9:ca:bc:b9:b3:
16:c9:21:2a:a3:fe:0a:fd:9b:71:79:b0:aa:a8:ad:7c:74:a9:
29:ce:ab:64:33:fa:35:27:d4:d1:b6:fc:9d:38:46:da:c6:24:
04:88:9d:c2:b8:d6:25:1d:65:d4:5d:f7:9d:a0:35:b6:dc:62:
e9:ec:de:bc:5c:1c:5a:b6:8b:af:a5:85:35:8b:02:81:ae:31:
01:0e:41:75:a5:43:1c:a6:cf:3f:c2:29:06:41:e6:c7:fd:31:
4b:a0:8b:bc:a9:cb:38:5e:0c:49:a1:8c:8d:cb:3f:28:c5:43:
60:4e:5e:d6:cc:e1:23:96:67:b7:cf:84:0a:33:93:52:88:85:
09:4d:e0:4a:24:d3:f8:81:01:93:64:76:0e:07:d9:72:2f:fb:
4c:03:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:48 2026 by rpki-client