
$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
File: O8azIf17YMVg8V19JMrFozdED7Q.mft (raw, json)
Hash identifier: xgIelxstIQJMmyudb5/ZWGDEBvtkKV90b0IoalUsFVk=
Subject key identifier: D5:55:ED:01:4C:66:9A:0C:7A:F4:EC:21:5E:84:3E:4F:C9:C2:F0:49
Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
Certificate issuer: /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Certificate serial: 07AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
Manifest number: 07A1
Signing time: Sat 04 Apr 2026 21:18:49 +0000
Manifest this update: Sat 04 Apr 2026 21:18:49 +0000
Manifest next update: Sat 11 Apr 2026 21:18:49 +0000
Files and hashes: 1: O8azIf17YMVg8V19JMrFozdED7Q.crl (hash: bXXDHbFUV88gdfFmi2N1/zpPRRqeC22VOKlWhLr0214=)
2: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (hash: By7/GJ4vrsW+p6nlCrl+Q0fqyxwGg35EjwhrqyWk25M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911980F, serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Validity
Not Before: Apr 4 21:18:49 2026 GMT
Not After : Apr 11 21:18:49 2026 GMT
Subject: CN=69d18039-5748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:4c:a6:55:01:87:eb:ba:0c:fc:6e:69:82:
3e:69:e6:c2:97:71:df:3d:34:89:1d:86:33:f0:37:
c4:96:7f:3f:5a:bd:82:eb:c5:0a:54:75:fb:04:0f:
33:77:b5:c5:57:15:11:c8:cc:5f:fd:fb:1d:bf:bd:
59:2e:45:22:4b:f6:8a:92:e3:0b:07:50:38:c4:7c:
0d:a4:53:e5:35:e4:1d:a9:23:3e:c1:b6:80:ce:0f:
7b:eb:ec:87:99:af:42:a1:fb:92:4d:65:04:ac:55:
6e:37:26:1b:af:ae:25:76:7c:4a:8f:6b:03:22:6d:
ae:a1:f6:61:74:fd:f4:b2:fa:4c:b2:8c:9c:49:04:
12:c7:1a:0f:af:ef:cb:1e:c9:7d:6c:4c:55:a3:a5:
4b:26:53:f8:70:6f:0f:a6:7c:5e:69:3e:ac:6e:f1:
05:4a:94:4a:7c:a4:70:59:43:78:7f:19:7f:c9:e4:
49:16:52:bf:5c:b9:3e:ac:ba:c5:76:25:85:89:cb:
06:cc:65:8f:3f:7b:cf:96:2d:68:e0:52:7c:b8:52:
89:2c:95:ae:7a:6a:51:b2:67:c3:0c:a5:94:73:05:
34:25:47:24:7b:52:88:c0:a1:88:cb:33:06:2b:07:
be:85:80:2f:5c:b0:02:9b:b9:a3:0b:e8:7f:dd:63:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:55:ED:01:4C:66:9A:0C:7A:F4:EC:21:5E:84:3E:4F:C9:C2:F0:49
X509v3 Authority Key Identifier:
keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:00:25:a5:5f:f3:8f:5b:cf:27:fb:db:1d:eb:e3:ff:66:1e:
6e:d3:30:77:6a:1d:08:38:53:0b:29:95:9e:68:fb:57:1b:27:
a6:e1:c9:53:61:2c:4b:40:50:6a:92:c6:51:71:fa:9b:af:7f:
58:e5:a3:b6:c1:8b:3f:bf:75:c0:73:4d:27:55:35:a3:b9:3a:
03:7d:bd:de:13:3b:b9:ba:cf:f7:eb:d6:05:43:e0:1a:59:b1:
e4:33:b7:0b:00:6b:07:fa:3a:9c:d8:42:6e:fd:63:9a:62:11:
d7:0d:7d:66:0a:9e:5a:2f:f3:45:19:43:93:78:63:82:29:12:
b5:5f:24:ab:43:4e:df:ed:88:8a:63:cf:0e:bc:a0:34:7e:22:
8d:b6:3c:43:b7:8c:97:d6:bf:b8:13:28:37:44:0e:a7:4c:19:
5e:82:ca:0f:46:df:7b:64:d8:04:e7:3b:80:cd:cf:00:40:0c:
38:5e:a9:b9:a6:e4:dd:eb:f2:35:df:11:98:3b:3d:96:8c:44:
92:d2:b7:80:4b:2e:b9:dc:dc:9e:94:b4:2c:ed:5b:7c:12:2e:
70:13:f5:2a:60:81:67:3a:5a:59:fa:c5:67:9f:28:d4:6a:07:
cd:51:25:87:6f:98:3d:10:90:e3:5f:2a:67:0b:98:8d:9a:f4:
c7:3d:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:34:45 2026 by rpki-client