
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json)
Hash identifier: ONbqdguZ9r8RCdQ04Z2qn8Nlr3HYxw32sjwbfHsYovQ=
Subject key identifier: 8D:65:F4:95:56:79:31:5F:DE:63:E6:25:9E:41:F4:66:F2:BD:F9:EA
Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Certificate serial: 0694
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
Manifest number: 068D
Signing time: Sun 31 May 2026 23:08:29 +0000
Manifest this update: Sun 31 May 2026 23:08:29 +0000
Manifest next update: Sun 07 Jun 2026 23:08:29 +0000
Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: K5OpK4z9ywMoZK8rdg2/vkdQOQdBVw3+qxymntJQvh0=)
2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: LkWBUiZRF9C2VJ1E3RZPIAtHdVr7r2jvAKoSLz3FinE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1684 (0x694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Validity
Not Before: May 31 23:08:29 2026 GMT
Not After : Jun 7 23:08:29 2026 GMT
Subject: CN=6a1cbf6d-cc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:3b:6f:26:7b:97:32:1d:11:42:5a:f4:88:
68:fa:15:15:45:e6:bc:01:d5:80:22:d3:a4:a1:e4:
9b:ae:bb:c3:d0:02:1f:2e:7e:79:d5:a8:01:92:96:
71:da:6d:2e:55:6e:3a:bc:81:4e:8d:7f:e1:aa:d5:
c2:90:94:a2:c6:71:4c:52:25:67:02:c1:5f:07:84:
db:e6:2a:44:63:e4:77:74:02:e3:41:6b:8c:83:b9:
c0:fd:16:e1:94:b4:db:3d:d8:0f:14:e8:45:23:c3:
29:f7:97:06:70:bb:60:30:e9:1b:0f:1f:eb:84:13:
75:d9:ba:9c:16:54:21:fe:3d:9f:76:ae:e7:6e:0a:
26:aa:0b:4e:65:c5:3e:05:b1:38:a4:cc:f0:f4:07:
34:4a:4d:d8:ec:c7:eb:66:62:dc:68:9f:e9:02:a9:
90:b7:f6:fa:78:79:7b:6c:e4:f9:9f:db:b6:0a:c5:
90:4c:fd:a5:24:b3:e1:89:97:37:e1:ed:fd:30:b3:
3b:a5:2b:19:78:cd:a8:7f:ba:40:56:13:4c:f9:45:
8b:87:a2:a6:21:58:39:d3:ff:a2:8c:c1:9a:9a:79:
34:14:00:01:5e:27:a9:79:26:9d:d7:1c:01:2d:23:
63:63:91:ae:ee:9a:3c:07:0f:a1:39:4f:30:22:1a:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:65:F4:95:56:79:31:5F:DE:63:E6:25:9E:41:F4:66:F2:BD:F9:EA
X509v3 Authority Key Identifier:
keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:1a:b1:d3:8d:84:fa:cf:6c:a4:0f:f4:9d:47:aa:5c:0f:95:
14:4a:54:e7:78:f6:bf:66:71:11:db:98:37:fa:36:a1:8b:39:
ea:de:99:8d:2c:86:29:a6:1b:23:ca:9f:eb:e9:66:c7:97:d7:
8a:be:ec:ab:2f:2a:ef:c2:9f:de:e1:39:24:1c:dd:b8:e3:33:
b9:14:99:48:b2:64:84:20:e8:5f:55:7d:f4:37:4f:4c:05:27:
ef:86:e9:53:91:ff:03:d1:d0:4e:79:29:73:bf:1e:02:59:5b:
87:9c:43:b5:8d:8e:df:94:6f:f0:e4:d8:9a:0f:49:70:c5:d0:
b0:57:7e:70:38:80:72:60:07:76:84:b6:23:bf:6a:df:f2:aa:
46:74:b3:b7:f0:26:23:75:0c:e1:b9:d7:c8:dd:79:a0:79:f5:
55:fc:40:3b:e5:d4:d5:68:4e:c5:cb:06:4f:42:7a:a0:73:27:
89:44:5b:a1:59:d9:41:f3:93:c5:4b:d4:13:44:69:81:73:8d:
0d:b7:af:f3:04:3e:6d:5d:c4:64:ef:3c:fa:30:34:88:a8:27:
58:8f:58:a1:2d:b4:b4:1f:6b:60:d1:f0:fa:43:d5:5a:70:fc:
f0:c0:61:b0:65:6a:0f:a0:3d:c4:54:74:89:65:65:e6:95:fa:
d7:e5:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:23:35 2026 by rpki-client