
$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json)
Hash identifier: KYgQkzPjt86/w3wtCoUfLJ/P1A4bF/hmTvy8hn1ezrQ=
Subject key identifier: 9F:E0:87:99:F0:DF:A4:B6:D4:08:F0:B1:7C:56:FE:40:03:CC:FB:2B
Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
Manifest number: CE
Signing time: Fri 17 Jul 2026 07:58:03 +0000
Manifest this update: Fri 17 Jul 2026 07:58:02 +0000
Manifest next update: Fri 24 Jul 2026 07:58:02 +0000
Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: Q4fgtl+LC5tSEAvMFWdXykJNtRQTBTmgRlNsH44k02M=)
2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: 5L0n0AuaZsG9RN1VkF1qu4foHDeiS87d8mBxLuyWIUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Validity
Not Before: Jul 17 07:58:02 2026 GMT
Not After : Jul 24 07:58:02 2026 GMT
Subject: CN=6a59e08a-edcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:5b:1c:3d:a8:17:d3:14:f9:c8:0b:c4:f1:
d6:91:ff:19:25:9f:b6:90:7b:e1:80:c7:c9:f1:bf:
65:9a:3b:9d:af:4e:a1:ad:ad:04:98:49:3d:92:7d:
35:a5:91:3e:64:8a:88:53:12:3d:61:1b:a6:81:7a:
3b:ac:d2:05:31:9e:80:aa:20:5e:6d:9c:2e:96:7a:
b1:61:54:18:c0:fb:c1:f2:12:ad:87:98:ad:e8:78:
72:38:ec:ea:ca:f4:f4:9a:e5:8d:ed:c6:aa:0b:3f:
51:b4:7a:85:ba:6e:e1:1f:93:39:57:07:29:21:63:
be:65:42:55:ca:08:3a:39:e6:d3:5c:5a:ee:8d:cf:
56:7f:f5:ff:63:27:fe:11:42:4f:f8:96:c3:9b:cf:
25:42:60:eb:22:4d:5b:f7:62:f9:29:c7:cc:1b:b6:
ed:37:0a:93:4d:bf:59:4b:7d:4f:80:9f:a8:0a:3b:
ba:b8:ab:82:f5:37:74:e4:34:d6:36:10:96:7b:9f:
d2:1e:5d:fa:62:12:d8:43:ed:65:bd:50:97:a4:51:
ac:d7:b5:eb:b9:3a:1a:0f:18:89:b9:7d:fc:8e:7f:
0d:bd:54:bf:c6:bf:90:b6:a5:ce:62:1e:f4:ba:43:
4a:09:d3:a0:51:83:78:11:cc:7e:c8:47:e1:f2:bf:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E0:87:99:F0:DF:A4:B6:D4:08:F0:B1:7C:56:FE:40:03:CC:FB:2B
X509v3 Authority Key Identifier:
keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ac:34:f8:f7:49:7f:dc:ef:87:6c:7a:c4:67:45:31:00:1b:
e7:9e:36:82:56:06:a5:08:d5:a2:e3:8a:02:0f:fc:36:57:63:
64:19:74:a6:09:8e:43:0a:a4:9a:07:37:15:aa:d5:c3:d9:b3:
46:43:f8:53:20:1e:b3:e7:d0:26:5f:89:f7:28:45:72:a8:17:
20:1f:af:e9:0c:44:2b:e9:4b:9a:75:68:e4:b7:0a:04:eb:e2:
0a:dc:e5:38:fe:80:a1:a7:bc:5c:b9:a2:ee:2c:cb:ff:f0:52:
14:40:20:1e:be:9e:4e:87:73:ed:cf:a5:a2:0a:92:8d:21:5e:
7b:c8:45:4c:e4:33:67:59:30:00:bd:8b:b8:bc:24:ab:71:81:
f2:69:a0:2b:57:ec:dc:40:65:4b:72:d4:83:0f:45:d8:6b:e6:
52:6d:82:af:8c:fc:ea:43:a6:01:73:f3:58:7c:47:12:39:93:
48:8e:ff:48:62:93:ef:92:60:87:96:5b:bb:5a:58:97:3f:02:
b5:4d:e5:0c:d8:9f:04:0b:d4:d3:90:5f:32:92:88:21:0c:c3:
8f:0d:2b:68:c7:12:2a:9a:13:ca:51:6a:b3:a1:8e:df:3a:85:
27:bf:00:fd:5e:b1:84:03:ee:cc:c7:d3:8f:f5:1a:8d:da:41:
df:95:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:22 2026 by rpki-client