
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json)
Hash identifier: 71qoNnHw+CUmti+KVwFXbq6VEGb5E+IaWVEyJsalssw=
Subject key identifier: 0D:C7:53:39:09:00:19:4C:B5:B9:89:A9:7F:F7:E6:E4:5E:97:3D:D4
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
Manifest number: EE
Signing time: Thu 21 May 2026 06:37:03 +0000
Manifest this update: Thu 21 May 2026 06:37:02 +0000
Manifest next update: Thu 28 May 2026 06:37:02 +0000
Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: ZI6q+ZC+sokfQmMsixYVx0ijEYIgS6+CW0XGNfTkyWY=)
2: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: aNrWLrutR5ArzXGRsTtMLurkk5UM/Q77zEZqj2DNM6w=)
3: 41C8C708244111F1AF80D04DBB833773.roa (hash: P0OVA8RnrCkxwGNC5Oj/FAk/vhkA7eOmVQFaY4OMLYg=)
4: D759EECE244011F1B0BBBC37BB833773.roa (hash: 4ZLnEVH62B/fFZNl3E3aTQ7rJ1PwOzf217E+4KcGPOw=)
5: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: lVJ/wAuLoxmXnwU3EkGNm9UUsAUB6qqvPi8MZYUo1FY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Validity
Not Before: May 21 06:37:02 2026 GMT
Not After : May 28 06:37:02 2026 GMT
Subject: CN=6a0ea80e-ff47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:f3:90:06:c8:7f:cb:ae:70:e3:33:00:18:
6d:4a:78:fb:e4:c1:56:91:08:6c:a8:76:dc:1d:91:
cd:76:a6:bc:2f:85:84:cf:60:bb:9b:2f:8c:de:51:
8a:84:74:0d:20:9e:d7:e9:8b:a6:87:e3:a1:f1:84:
c1:b5:76:d8:65:0c:f4:73:b7:21:0e:e6:d0:37:44:
68:be:b0:67:a4:9f:6f:f0:bf:8a:59:c5:4c:e5:5c:
05:87:e3:f4:4c:9c:51:11:06:a5:20:2a:44:33:42:
63:07:41:65:1e:0f:e9:2b:de:2a:c6:c0:fd:9c:bd:
b7:56:85:4f:63:ee:fe:3b:cb:51:32:1a:92:4d:0c:
c2:bb:5e:f9:1b:3e:db:44:81:2f:26:1f:fd:fa:c2:
5c:b4:90:79:aa:68:71:7e:23:99:21:6e:b8:9c:82:
43:65:54:5b:bb:8d:c7:ed:ad:c0:b7:ba:19:fc:da:
49:28:ab:4c:37:35:40:46:b1:c9:10:7c:5e:03:67:
0d:f3:91:46:c7:fe:67:3b:28:da:5b:67:87:f5:c1:
b8:c7:6a:10:c6:87:37:ae:55:76:49:0a:61:b2:e6:
f7:a9:b6:8d:39:f3:e9:17:86:87:95:94:9c:2b:97:
97:c3:c8:30:f3:86:7c:72:fa:68:d7:a6:ad:a2:ce:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C7:53:39:09:00:19:4C:B5:B9:89:A9:7F:F7:E6:E4:5E:97:3D:D4
X509v3 Authority Key Identifier:
keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5c:78:38:5b:a6:a0:2d:6e:45:a1:6b:3d:f7:61:c1:4a:45:
44:9f:d4:9d:34:b6:3e:33:df:0d:79:6a:8c:17:93:d4:3e:ca:
8d:dc:a5:17:32:df:39:e2:4f:2b:d9:ba:e8:33:43:74:c3:08:
65:44:66:9c:23:ee:2b:5a:84:7a:90:63:99:5c:d8:35:5e:f4:
09:e1:f0:cb:82:94:9b:64:99:9e:26:4a:99:25:b0:05:71:0d:
0c:bc:5b:7d:65:f8:08:31:60:e4:bb:8c:ae:62:16:10:70:a6:
6d:bf:05:d6:04:51:65:3e:eb:bd:6b:a1:b5:ae:21:a6:78:a7:
c0:1c:17:e8:ba:1a:bf:1e:80:07:8a:9f:54:27:2a:68:60:4a:
61:3a:61:07:01:95:7b:5d:18:f3:08:e2:4a:5e:10:6d:3d:8d:
57:4a:98:ce:b4:ec:bf:7d:31:12:bf:8d:86:6b:36:3f:6f:ac:
99:ef:02:c7:f5:70:2d:96:20:fc:85:ce:69:03:9b:2b:73:37:
22:5a:31:f4:56:41:90:82:de:98:c8:d4:f1:b0:b4:60:f0:b9:
18:c6:f2:93:84:b6:d5:19:bc:3b:68:0f:af:9a:3b:71:3f:91:
1a:bd:88:ea:2a:b7:04:21:d0:57:43:12:37:27:9a:8a:19:ef:
6f:1f:a6:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU1MDIxMTAvBgNVBAUTKDM4NkMzMDBFRDcyRjEyQjkwNTQ3OEEzM0NFRjI3Nzk5
MjU0QTY5MUMwHhcNMjYwNTIxMDYzNzAyWhcNMjYwNTI4MDYzNzAyWjAYMRYwFAYD
VQQDEw02YTBlYTgwZS1mZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymnzkAbIf8uucOMzABhtSnj75MFWkQhsqHbcHZHNdqa8L4WEz2C7my+M3lGK
hHQNIJ7X6Yumh+Oh8YTBtXbYZQz0c7chDubQN0RovrBnpJ9v8L+KWcVM5VwFh+P0
TJxREQalICpEM0JjB0FlHg/pK94qxsD9nL23VoVPY+7+O8tRMhqSTQzCu175Gz7b
RIEvJh/9+sJctJB5qmhxfiOZIW64nIJDZVRbu43H7a3At7oZ/NpJKKtMNzVARrHJ
EHxeA2cN85FGx/5nOyjaW2eH9cG4x2oQxoc3rlV2SQphsub3qbaNOfPpF4aHlZSc
K5eXw8gw84Z8cvpo16atos5V4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3HUzkJ
ABlMtbmJqX/35uRelz3UMB8GA1UdIwQYMBaAFDhsMA7XLxK5BUeKM87yd5klSmkc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwMi84N0MzRkQwQUZC
MjkxMUVGQjc2NkRDNzZDNEY5QUUwMi9PR3d3RHRjdkVya0ZSNG96enZKM21TVkth
UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FSdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTUwMi84N0MzRkQwQUZCMjkxMUVGQjc2NkRDNzZDNEY5QUUwMi9PR3d3RHRjdkVy
a0ZSNG96enZKM21TVkthUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArVx4OFumoC1uRaFrPfdhwUpFRJ/UnTS2PjPfDXlqjBeT1D7KjdylFzLfOeJP
K9m66DNDdMMIZURmnCPuK1qEepBjmVzYNV70CeHwy4KUm2SZniZKmSWwBXENDLxb
fWX4CDFg5LuMrmIWEHCmbb8F1gRRZT7rvWuhta4hpninwBwX6Loavx6AB4qfVCcq
aGBKYTphBwGVe10Y8wjiSl4QbT2NV0qYzrTsv30xEr+Nhms2P2+sme8Cx/VwLZYg
/IXOaQObK3M3Ilox9FZBkILemMjU8bC0YPC5GMbyk4S21Rm8O2gPr5o7cT+RGr2I
6iq3BCHQV0MSNyeaihnvbx+m1w==
-----END CERTIFICATE-----
Generated at Thu May 21 11:03:35 2026 by rpki-client