
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
File: OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json)
Hash identifier: B7hPa0driolbk3y98xwL6g+B+3f3LqCp3kPJj6sIAbE=
Subject key identifier: 52:9B:1F:2D:F7:40:1B:2D:4D:A9:DA:90:61:6A:44:DE:D9:5D:40:8F
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial: 095A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
Manifest number: 15D5
Signing time: Wed 20 May 2026 18:34:33 +0000
Manifest this update: Wed 20 May 2026 18:34:33 +0000
Manifest next update: Wed 27 May 2026 18:34:33 +0000
Files and hashes: 1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: tzN9KqS/phlZ5U0vplaiHn+TUR8tyi+PY4cDRSaay00=)
2: 1245956E2DB611F1B8EF9758A8833773.roa (hash: RDdwLCbOHRei4mq+xzV0XVNXkj7eeYuisNBVo4Pbaec=)
3: 4EF2EC842DAA11F181B163FBA3833773.roa (hash: RiW8QYb+ypRvsySpXIpMH3WQO3vwhG1+Rhs2YYcv/J8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394 (0x95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Validity
Not Before: May 20 18:34:33 2026 GMT
Not After : May 27 18:34:33 2026 GMT
Subject: CN=6a0dfeb9-c697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:3a:f8:d5:d7:77:40:9f:ac:8c:96:96:0b:
8f:39:23:17:47:6b:8b:e6:f0:76:d7:80:d9:d1:0a:
9a:77:84:7d:c9:83:3f:49:c2:81:d7:56:e8:9e:87:
5e:5a:f1:5b:f2:1c:2a:b6:88:a3:24:40:05:d3:38:
11:93:5f:43:43:c8:30:fb:a2:08:e9:76:5d:dc:87:
4b:ad:47:7e:89:a5:9f:ee:0c:a7:ac:92:65:21:91:
0b:59:fd:a4:21:e6:45:63:ee:57:49:f5:4c:93:1c:
10:54:25:54:34:d8:0d:46:ed:0e:7b:c3:d2:e2:45:
77:04:15:62:09:d8:2c:ce:76:4a:8c:e5:00:0d:ed:
e7:1c:2c:b2:ff:a7:02:68:80:91:91:8a:5b:06:c8:
03:fa:44:33:45:49:55:21:67:0c:66:a5:a7:f4:2d:
99:f6:66:b8:bc:a3:d8:29:6c:66:80:01:88:06:ed:
41:2e:35:42:92:69:b8:b0:7d:55:4a:dd:c2:14:bc:
24:c6:31:c7:c2:3d:f3:4d:2a:1f:1a:c6:60:3a:38:
41:70:ac:09:b3:85:2f:6d:69:6b:fd:ad:c1:93:9f:
a5:f3:0b:f7:dc:92:37:58:8e:69:8f:b8:86:e0:49:
34:e6:1b:98:65:ee:e5:4c:b3:f5:79:99:8c:5c:68:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9B:1F:2D:F7:40:1B:2D:4D:A9:DA:90:61:6A:44:DE:D9:5D:40:8F
X509v3 Authority Key Identifier:
keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b7:10:1d:b4:d8:95:43:b1:1c:8c:de:83:da:b9:78:a5:70:
ad:90:2f:88:14:9e:c6:88:15:8b:a3:34:2b:6c:d5:ac:d7:66:
7a:43:40:fa:e2:74:cb:e3:7a:34:fc:fd:6b:10:23:6d:50:6d:
e7:62:0d:e7:b4:cd:d3:df:da:12:ac:79:71:c0:74:ce:e3:ab:
60:e6:41:84:24:99:be:dc:f6:5b:e3:87:0d:9c:e2:6e:0f:49:
76:c1:5e:e9:82:eb:13:12:72:ed:a0:9d:89:1b:1b:2c:37:5e:
0f:77:b0:15:e1:28:d7:51:2e:f3:01:93:af:14:37:5c:15:97:
98:f1:17:e0:81:03:03:cc:da:06:10:fe:84:ac:a1:d9:f5:ec:
39:59:64:0b:c2:ee:09:cd:40:8f:31:4e:cb:e7:a2:ac:d9:74:
dd:82:57:83:1a:fa:15:d3:ba:4d:56:b6:d0:0d:95:27:06:69:
a5:29:b1:4c:29:bd:5f:41:38:22:e0:36:a2:5f:86:d3:86:58:
0d:72:32:eb:3c:3b:44:2f:ad:0f:22:4d:f8:4d:df:9f:c1:c4:
44:86:dc:00:f9:ea:ac:16:b0:db:6b:3e:0b:15:d3:9b:8b:e7:
b8:e8:cc:28:15:f7:cf:bc:fd:4e:1c:a5:92:dd:04:db:e0:c6:
a3:22:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:31 2026 by rpki-client