
$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
File: oo2gvpAdmDpDPYM1idFnv0hvZPw.mft (raw, json)
Hash identifier: R5NPP4GLt/yPhMnMpww8vfTN/Muo33kOZNLUCZJYhqk=
Subject key identifier: 51:BB:4F:3B:6E:DC:2B:69:CD:84:8D:30:8E:E0:E8:0B:4E:BC:1F:65
Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC
Certificate issuer: /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
Manifest number: 0227
Signing time: Thu 21 May 2026 02:45:17 +0000
Manifest this update: Thu 21 May 2026 02:45:16 +0000
Manifest next update: Thu 28 May 2026 02:45:16 +0000
Files and hashes: 1: oo2gvpAdmDpDPYM1idFnv0hvZPw.crl (hash: CyFdGZ9qpmJ7oWecEOE1JQaQF1D2xK56UuPY/l0aqKU=)
2: DB27568209DA11EEBA18A082C4F9AE02.roa (hash: bQjm4G+Xbuc3BrxcneYGH9ivdneUdSDZ8ioYNeVkHc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl
rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912720E, serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
Validity
Not Before: May 21 02:45:16 2026 GMT
Not After : May 28 02:45:16 2026 GMT
Subject: CN=6a0e71bd-7725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:b9:8c:66:3f:39:cc:1a:a5:00:37:38:ee:
bd:33:fc:3c:4c:56:d1:e6:9a:22:32:43:bf:84:59:
df:41:cc:41:45:73:bc:65:a4:82:f5:2a:96:ec:82:
4a:b3:a1:97:c9:7e:bf:5d:60:50:08:2f:e4:50:b1:
34:76:63:99:c6:5e:b9:3b:3a:84:c2:55:eb:96:a2:
fb:83:42:cb:4a:12:99:b4:d1:0b:a9:aa:e3:18:d0:
27:99:c1:89:61:6a:0f:9b:94:f4:58:08:d1:b1:31:
a9:66:7e:8f:63:25:45:6b:e6:62:40:02:c2:e1:21:
9f:9a:63:4f:8e:99:d6:7d:de:e4:7f:78:a4:c7:11:
88:f8:2a:cc:43:38:14:8f:42:b7:bd:b6:6d:80:48:
fb:01:14:97:fe:0a:f2:ca:d4:74:a2:6a:7e:88:cf:
19:61:57:5c:7f:4f:5e:b7:f9:27:d0:8a:4f:e6:f7:
79:10:21:b4:5a:0b:08:c2:17:76:2c:bf:88:bc:37:
7c:34:4c:59:c0:34:b1:c4:3a:53:b7:c0:0c:1e:fb:
49:31:12:80:de:a8:6a:36:97:44:cb:43:af:a8:b0:
2e:91:21:fd:bf:17:65:60:02:a7:90:86:c2:f2:50:
8b:21:d3:5e:fc:1e:e8:45:f0:cc:6a:61:1d:fe:e0:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BB:4F:3B:6E:DC:2B:69:CD:84:8D:30:8E:E0:E8:0B:4E:BC:1F:65
X509v3 Authority Key Identifier:
keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:81:08:df:01:10:04:6b:1e:8b:ec:aa:53:c7:6e:04:97:13:
e9:42:04:4c:38:d4:b5:6d:e5:4c:67:b9:33:61:b5:2a:2c:81:
2a:34:86:23:2d:1b:2c:94:8d:1c:b7:5c:30:0d:b8:a9:a3:d2:
a9:1d:91:51:f9:3f:22:9b:f5:ed:e2:09:0d:3d:de:2f:b9:90:
02:d6:34:12:bb:32:46:cd:76:79:78:7a:61:a4:4b:76:d3:12:
40:6e:19:a1:54:03:37:60:63:e2:0b:82:d6:9c:f8:fc:de:dd:
c9:78:6f:66:2e:a2:af:e9:cc:cc:bc:ed:39:55:f1:f6:a0:a4:
e2:58:83:d3:f9:b7:80:16:60:42:a3:e4:71:ea:9d:ec:17:dc:
be:4c:02:ea:3b:8b:89:aa:20:ff:47:08:14:40:11:c6:5f:be:
2a:19:a3:b7:89:7b:6f:1a:7a:6a:ca:32:2d:15:55:ac:b9:e1:
42:9a:0b:b0:0e:76:1c:58:9a:66:e5:46:ca:e0:e5:de:d9:ab:
36:07:ad:df:1d:5a:64:fe:95:b3:10:ee:b0:bf:6c:a0:16:9b:
7f:fe:6a:75:1f:28:e0:f1:ff:ea:df:c2:e8:33:88:78:ed:2a:
02:e6:6c:e2:ed:b3:14:73:44:42:7f:ec:fd:05:b0:e0:02:a1:
c0:5e:94:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:53 2026 by rpki-client