
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json)
Hash identifier: ErAHIrxh/sflv+5C0ccfXql+vq2rRnzMPynRaD0ungs=
Subject key identifier: F7:3B:70:E5:81:8E:BB:F7:08:4C:5C:E1:CA:DD:1F:66:EF:28:80:61
Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Certificate serial: 095B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
Manifest number: 0952
Signing time: Mon 20 Jul 2026 20:35:59 +0000
Manifest this update: Mon 20 Jul 2026 20:35:58 +0000
Manifest next update: Mon 27 Jul 2026 20:35:58 +0000
Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: AHiPs7R7CkoTDlcjQVop0o0pj82BrYXYSKzhMAkXcSo=)
2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: PcM9VvZwEtkWziWmDAYLmLOnlkBtxqnyiAkGfpwesWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395 (0x95b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Validity
Not Before: Jul 20 20:35:58 2026 GMT
Not After : Jul 27 20:35:58 2026 GMT
Subject: CN=6a5e86af-91e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:70:ca:94:95:c6:0f:06:40:11:ba:b3:24:
99:8e:1a:cc:4b:05:32:33:8e:67:1c:f9:36:6b:7b:
72:b1:08:13:31:2e:f5:1b:89:7e:e0:df:66:15:cd:
6e:00:63:e9:97:93:b2:a3:b1:6d:60:6f:5c:61:32:
f4:f0:71:c5:4f:40:f6:d3:f9:37:b2:37:7c:be:f1:
30:ac:c1:d6:63:30:16:bb:ae:16:5d:e1:bd:bd:5f:
d6:ed:40:0a:6d:0b:d5:6b:fc:6a:00:c8:ca:9a:48:
07:12:ab:03:ce:29:69:d1:86:14:02:aa:c9:b5:94:
62:e9:ea:7b:f9:38:45:ae:44:1b:38:80:31:8c:55:
7c:3b:2a:7c:02:2e:9d:f7:77:37:5f:dd:a5:36:d3:
58:82:ba:cb:dd:bb:fe:6a:f3:12:bf:df:4d:90:9e:
a8:53:5e:67:18:a9:88:97:17:ae:d0:fc:11:f2:89:
78:4a:02:4b:20:2e:ba:10:f2:d1:0d:35:c1:b4:81:
34:76:6a:57:ae:29:38:45:e8:96:73:ee:2b:22:13:
8b:fa:da:67:16:99:d0:44:9d:15:2f:f9:67:1e:1c:
2c:95:19:fb:f9:8b:c6:66:61:7f:0f:ce:22:ba:9a:
bf:b0:aa:5f:a8:b7:07:8b:65:4e:c6:6c:5e:ce:fb:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3B:70:E5:81:8E:BB:F7:08:4C:5C:E1:CA:DD:1F:66:EF:28:80:61
X509v3 Authority Key Identifier:
keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:d8:fc:f7:f8:72:91:ff:52:b1:ab:c9:9b:19:f2:b8:8e:88:
ac:71:b8:95:e9:2e:bf:a4:e6:95:a6:62:50:f0:4c:f4:d2:8d:
5c:84:c3:fc:f5:8d:b6:03:f7:7e:4e:55:16:9e:e6:ad:bb:fd:
77:60:17:a0:f0:40:74:fe:2a:fb:e9:5f:6c:c1:ca:c5:be:79:
30:6c:46:cb:4c:b7:f3:80:e3:31:31:a3:75:ec:09:5e:f4:6e:
52:76:19:f6:5e:92:fc:9e:30:72:ad:d0:22:e5:c3:e8:db:f2:
a8:59:fa:33:b0:0b:91:0d:14:1e:39:92:0d:d9:05:34:5f:50:
77:db:c4:ea:73:dd:34:c2:d1:e7:d0:29:d2:66:af:03:b6:bb:
31:e6:28:f5:fe:06:20:aa:c6:f7:19:78:ec:e6:7e:c1:a5:90:
99:63:1d:fd:84:97:c8:86:86:ea:49:3f:d5:39:92:4e:c3:d8:
eb:12:85:64:80:90:4b:14:14:49:ba:13:72:d5:3d:db:c3:b4:
c8:42:e1:11:0a:19:14:71:e4:bb:ad:bb:ac:80:e5:38:36:d3:
3e:e0:dd:86:a9:85:e9:ae:c3:6f:44:72:08:62:d6:9b:50:5b:
1d:7e:41:4b:31:bc:21:90:df:3f:e5:5d:7b:f0:e5:6d:42:36:
c3:86:1c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:34:24 2026 by rpki-client