
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
File: oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json)
Hash identifier: St1jBZ5Ej9CU3PaXDzxVouj0caQn/DtFUZGvqzQxsTk=
Subject key identifier: C7:B7:8B:B8:23:FB:79:D5:AA:5D:A4:AD:09:55:E0:E5:92:49:26:E6
Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
Certificate issuer: /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
Manifest number: 51
Signing time: Mon 01 Jun 2026 09:04:06 +0000
Manifest this update: Mon 01 Jun 2026 09:04:05 +0000
Manifest next update: Mon 08 Jun 2026 09:04:05 +0000
Files and hashes: 1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: UkO0Ui/F6dCb66cN87/G8mt57AcPfQRghW4FGePiISM=)
2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl
rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Validity
Not Before: Jun 1 09:04:05 2026 GMT
Not After : Jun 8 09:04:05 2026 GMT
Subject: CN=6a1d4b06-55bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:05:4d:ac:61:7b:93:88:60:cb:83:44:b2:
cb:46:0e:cb:99:88:09:2b:e0:0c:a6:65:61:2e:18:
6b:83:b5:17:5c:cc:0d:fc:bb:a3:1b:a4:17:1f:3f:
b3:d3:9c:22:4c:df:9b:93:1a:dc:1e:64:4b:cb:45:
e0:68:47:b8:a4:a8:a6:d1:ab:ff:4c:10:fa:c9:52:
21:35:de:b0:89:c3:81:3d:fb:40:3b:0e:c9:59:60:
fe:8e:4e:aa:e1:93:9c:56:1b:62:05:d3:9c:56:56:
b9:97:f1:18:9b:f9:e9:0b:10:6d:74:9a:ba:6b:4c:
24:e1:ed:f8:8a:2d:b1:42:af:32:72:8c:23:18:85:
5d:0e:48:66:51:61:08:6e:bb:23:1d:a0:cc:26:db:
39:78:74:80:ac:06:c9:c4:1c:79:9b:09:16:07:fe:
03:61:85:83:46:2a:8a:f3:e5:47:d0:23:2d:d6:b7:
3b:73:13:a5:9b:89:68:34:d9:35:80:3e:53:a9:95:
d3:a7:9a:fe:f1:49:bf:27:c1:79:44:c2:1f:f0:91:
05:f5:73:60:9f:09:90:a7:39:11:66:43:48:c7:83:
e7:0d:4c:2a:ac:26:1a:82:67:8f:d0:e6:44:eb:02:
f2:e2:94:a8:ec:1e:56:71:66:5d:b9:9e:6e:99:4b:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B7:8B:B8:23:FB:79:D5:AA:5D:A4:AD:09:55:E0:E5:92:49:26:E6
X509v3 Authority Key Identifier:
keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6f:3b:0c:f1:3b:bf:fa:44:3e:fe:1b:93:21:32:b1:c9:2c:
ac:71:41:56:93:e6:26:2a:19:06:f1:24:13:86:52:12:7b:c6:
4a:cd:ed:1e:a1:d6:f7:a1:00:a3:a4:f1:c2:10:7f:d9:ff:cc:
b2:a7:03:42:c3:03:4c:4f:92:3e:11:36:96:8a:be:1a:dc:bf:
bc:ac:6d:b8:08:e1:96:7a:ab:b2:ae:72:69:47:92:8b:37:12:
7b:70:9f:fe:32:1c:44:51:94:9c:96:39:99:67:45:fb:ae:89:
97:20:96:73:7d:6f:35:5b:ad:e1:76:aa:eb:ce:e4:58:93:c8:
96:5f:79:bb:9d:11:7d:16:1c:24:87:8f:26:ba:80:88:56:74:
d8:59:7f:7e:68:4d:a8:1a:8c:64:01:30:d1:5c:92:03:ef:13:
e6:31:2b:6b:76:94:ad:c5:9d:1e:7d:72:19:a7:1f:9e:26:10:
e0:2c:1d:aa:1f:8b:10:80:5f:29:e0:eb:b3:35:ac:02:5d:cc:
11:a9:90:d6:52:75:b7:b0:d6:13:53:a4:44:09:4c:2f:de:ee:
08:5b:4d:3f:9c:92:d1:f6:aa:a9:a1:7e:74:9a:97:4a:7f:67:
55:a7:6f:0b:d4:cd:f3:36:57:91:7f:c3:5b:30:40:ae:71:1a:
39:5d:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:08 2026 by rpki-client