
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json)
Hash identifier: i/YIe7uYWGDkZtL+4QOlo9jhgwLDuepbBiy51D0IsLU=
Subject key identifier: B5:21:73:37:11:03:E1:36:E4:A1:15:3B:A5:AE:F4:73:C2:19:C9:81
Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1
Certificate serial: 0D59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
Manifest number: 0D4D
Signing time: Tue 18 Aug 2026 18:17:35 +0000
Manifest this update: Tue 18 Aug 2026 18:17:35 +0000
Manifest next update: Tue 25 Aug 2026 18:17:35 +0000
Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: xFLDiNYqzO0ZNIgyTryXG05xllLlrnzrnBIfnazm/qg=)
2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: p/HN4+cYHb4pXYatqROBo401SMy00O/P6+sd+OS9rlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3417 (0xd59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1
Validity
Not Before: Aug 18 18:17:35 2026 GMT
Not After : Aug 25 18:17:35 2026 GMT
Subject: CN=6a84a1bf-ecb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:6a:e0:16:d3:46:3a:38:fa:96:81:3d:9f:
d3:0b:cb:ae:e6:aa:ec:62:d2:89:71:cc:3c:14:71:
5b:e7:17:5b:bf:8d:41:8f:83:c7:0f:7e:1f:20:9f:
dd:eb:fe:12:fd:49:5c:b2:74:fb:2b:d9:0a:a2:3a:
09:0e:87:ef:20:a9:d7:21:03:1b:c6:eb:c3:e5:f7:
14:ea:b3:ff:f0:05:ad:08:b3:a4:27:3b:57:b3:ad:
71:e8:cb:ac:d6:ba:2c:69:fd:cc:28:f6:0b:f1:aa:
4c:7b:ad:43:d6:34:4a:9b:37:11:6b:a3:b3:62:25:
08:37:de:66:6c:8d:82:f3:da:a8:ce:ba:43:4f:9e:
e2:c7:b1:04:62:42:f8:69:cc:49:e6:41:08:e0:0b:
73:36:1a:88:15:5d:09:2b:5c:f2:c4:26:95:b3:ec:
e0:23:a2:fe:f5:5e:94:09:99:99:19:c0:8f:5a:52:
86:04:02:69:9c:6a:90:ef:ea:70:0c:73:6f:fc:b6:
5d:6a:f8:b5:c6:a7:37:7e:59:d1:06:0d:4e:0f:d0:
2b:6d:b6:6c:00:9b:52:a8:c4:9c:c0:f4:3c:c9:b9:
5d:5f:44:f3:cf:6c:ff:a8:4b:a7:c2:7d:52:7c:f5:
3f:d6:09:c4:ef:41:f8:97:e7:ed:3d:02:ac:82:32:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:73:37:11:03:E1:36:E4:A1:15:3B:A5:AE:F4:73:C2:19:C9:81
X509v3 Authority Key Identifier:
keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:ee:2d:21:3c:e0:0c:f7:e5:de:8d:5f:ba:86:11:e6:c3:93:
37:6c:c3:b0:64:ea:77:88:79:35:2b:99:fd:fb:94:8f:bf:9a:
af:2a:7f:dc:fd:c9:d6:07:92:d4:60:e5:93:25:ef:39:5c:e5:
a5:d9:ad:44:13:6d:99:26:c6:b9:cb:fa:60:2f:b1:28:88:88:
83:7a:3b:c2:6c:bb:2c:df:63:fc:9e:56:ff:06:2a:9d:9a:71:
92:51:5c:ed:79:c1:15:27:ad:da:96:fd:62:d8:c7:47:59:44:
8b:d8:4b:d3:1d:03:c6:26:12:70:3c:24:5f:4e:5d:8d:91:b4:
2a:92:6d:82:de:f1:d8:df:8e:6e:37:cc:5b:a7:15:cb:d3:ee:
f6:01:20:0d:04:4a:3f:93:9b:6e:19:79:23:30:a6:be:d6:17:
05:aa:34:51:6f:cd:51:f0:9a:d2:18:65:17:6a:43:47:96:b6:
0a:3d:b5:2e:92:f9:6a:3b:58:41:53:67:e1:06:cf:c6:e9:34:
90:a1:b7:e5:47:eb:42:51:66:15:03:c0:43:08:e6:ce:a9:37:
4b:21:55:27:c7:d9:80:33:de:4f:48:d8:f0:a7:b9:91:5c:14:
5f:ee:d3:ec:6b:c8:55:55:9a:5b:57:28:f2:10:f6:f7:f8:e9:
3e:29:06:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:23 2026 by rpki-client