
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json)
Hash identifier: hCZlvy6tNc4IF5efLiTNRFFUdQ8nGHvDVgV2NCi5y3Y=
Subject key identifier: 8D:F5:FB:2C:6D:9B:82:A4:FE:BF:0C:A5:03:3C:77:0C:BF:19:C9:83
Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Certificate serial: 08DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
Manifest number: 08D3
Signing time: Sat 20 Jun 2026 20:22:10 +0000
Manifest this update: Sat 20 Jun 2026 20:22:10 +0000
Manifest next update: Sat 27 Jun 2026 20:22:10 +0000
Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: Z4Hr8eysqXpdu2samm91ol8jI5jBSvFABUSDrw4aoeQ=)
2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: 4i5AOZWsffBcYvR2KypBRmQ6TWACokAcBSGDEbGPTU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 20:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268 (0x8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Validity
Not Before: Jun 20 20:22:10 2026 GMT
Not After : Jun 27 20:22:10 2026 GMT
Subject: CN=6a36f672-8739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:f2:53:2c:ac:23:05:ba:c9:d5:72:ee:2e:
85:51:87:c2:24:33:83:01:3b:8d:1b:88:3a:88:fc:
d9:e1:85:0f:31:23:30:e6:45:7b:db:38:28:39:bc:
6a:8a:c0:02:40:8f:9f:24:4d:f4:5c:01:81:31:01:
31:90:0a:96:08:4d:df:86:ea:52:a5:44:46:86:89:
9c:da:09:c2:ea:c8:c7:06:93:6e:b8:8d:3a:cd:79:
74:bc:c7:81:35:08:83:4f:8e:7c:3d:ba:c5:25:73:
b6:d1:b0:df:fb:0f:96:32:f4:8e:7c:76:57:72:e8:
75:72:09:63:ef:65:f0:c0:d3:26:5f:ac:c9:8a:1e:
75:41:54:6d:d0:a6:f5:fb:31:fc:1d:4c:25:84:b0:
d1:0d:a4:5b:f5:b5:62:04:1b:9d:fc:3b:b2:5a:44:
59:4d:85:4d:9f:2f:f6:99:b5:cd:ec:fc:bd:54:18:
49:f2:80:27:8e:09:f5:05:13:ec:98:63:ec:4a:93:
27:a0:84:19:67:76:b5:b7:d9:0d:22:61:bb:80:b2:
72:13:c6:ca:7d:c3:9a:ac:70:68:83:2b:68:74:1c:
8b:9c:fc:d7:aa:5e:6e:96:d8:52:99:50:0f:66:88:
e7:5e:61:21:86:56:ec:2d:c3:bd:9f:a7:23:1c:9f:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F5:FB:2C:6D:9B:82:A4:FE:BF:0C:A5:03:3C:77:0C:BF:19:C9:83
X509v3 Authority Key Identifier:
keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:07:ce:69:b3:24:0e:c5:b6:56:c3:ca:6c:36:71:0d:12:22:
0d:dd:76:84:12:07:7c:f8:3b:8e:c6:df:da:7a:16:1e:d9:37:
53:08:dd:3a:02:bc:71:b4:1a:26:48:ef:51:ac:d2:14:9a:3d:
b2:cd:3e:57:b1:d4:08:68:97:7b:05:57:2c:ce:6e:04:03:51:
7b:d6:b9:8e:38:31:4f:cb:d5:82:36:6f:df:71:60:af:f0:36:
8f:8a:c3:b8:60:7e:7b:c8:ae:a7:12:37:62:e8:12:3e:e2:10:
15:26:e5:a5:54:3e:7b:58:92:67:c9:39:7c:dc:27:54:b8:3e:
3d:6a:3b:22:ea:45:bb:fe:f5:09:df:cb:73:16:94:4e:35:91:
84:65:fe:3d:c2:f7:b7:41:ea:de:c7:1f:2c:ac:14:d9:02:f0:
a7:bf:25:ec:99:fa:3d:90:f2:26:e9:9c:ba:29:6d:1f:c6:36:
27:49:da:ff:16:a8:86:0a:91:20:c3:2e:ad:27:e1:d9:3a:1a:
7b:ab:56:10:bb:eb:1e:6a:d5:1c:12:07:b1:b3:6a:15:a5:67:
25:53:a8:a7:01:14:a2:f2:ef:f3:2d:ce:b9:a0:b0:35:10:98:
5c:23:d5:8c:11:97:6d:61:36:25:f9:b9:2f:be:d1:fb:a1:e6:
bf:fc:74:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 17:57:18 2026 by rpki-client