
$ rpki-client -vvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
File: oQCGP_euS0zjitmLfMw3suVvSQk.mft (raw, json)
Hash identifier: 0ofmcXMMHZFB8HAc+nXWcUoLSFM3Gp1S2Qgp37hY3kA=
Subject key identifier: 0A:85:1F:5F:35:D5:C7:D1:67:BD:C1:31:15:93:A0:E2:7D:37:0E:A2
Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Certificate issuer: /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
Manifest number: 59
Signing time: Wed 19 Aug 2026 08:58:45 +0000
Manifest this update: Wed 19 Aug 2026 08:58:45 +0000
Manifest next update: Wed 26 Aug 2026 08:58:45 +0000
Files and hashes: 1: oQCGP_euS0zjitmLfMw3suVvSQk.crl (hash: pwjuNKpvNT0kkrrvaSmZr8+aLwc28IOIBQdWn1HWCY0=)
2: D1960A28493D11F1A113D1E6B5833773.roa (hash: 3ZGbdg04NB+U1p4ArMrgy7RjHgfQTqsGhjizYBFQoP0=)
3: 68869A98493D11F1A62A19BFB5833773.roa (hash: G98XlGylGqD4IWLKPRkQ33JbE0HvP479vwIkVZry/iM=)
4: 9EE84698489A11F1AF98834FB4833773.roa (hash: HyVMau6tP4Gxadmevajmg0fDJUTUHCH9joRR5GgFIHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Validity
Not Before: Aug 19 08:58:45 2026 GMT
Not After : Aug 26 08:58:45 2026 GMT
Subject: CN=6a857045-3ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:1d:f2:64:d7:c0:b9:0a:d0:e8:dc:7f:75:
bc:b7:00:30:06:29:b6:f2:44:cd:df:83:4e:a6:b1:
22:d5:24:8a:57:76:0f:a8:4e:cd:ff:79:6f:0e:28:
6a:61:bf:7d:7e:95:72:7c:74:92:ab:3b:49:0c:09:
d1:47:ae:53:a9:0d:ef:fc:6f:af:dd:0b:dc:7f:f7:
78:8a:15:ff:f4:38:4e:4e:82:84:8f:78:5f:c1:1e:
81:07:b9:77:df:1d:bc:0b:87:6f:1a:80:44:72:d8:
83:37:09:ef:7a:3d:2b:2c:ce:08:03:7d:8b:de:48:
3f:82:64:fa:2c:95:4e:94:ea:ac:eb:d0:c6:cf:cd:
61:bc:da:e8:83:71:a4:f8:60:85:5e:ca:f1:a9:35:
94:03:c6:77:7f:ff:ce:b7:e4:f6:77:0a:02:b6:6c:
5f:1d:f7:e9:03:da:02:0c:51:11:db:3c:c2:07:70:
c3:bb:b6:c8:09:79:8f:b2:d9:92:13:7b:90:37:25:
34:cf:5b:0b:57:dd:fa:4b:81:73:39:3f:32:69:31:
6d:04:d6:03:26:37:cc:9f:02:5a:51:ab:97:d3:5a:
aa:16:58:6f:c3:d7:46:1b:cb:4a:73:7d:07:79:63:
15:16:bf:64:1d:02:4d:61:88:e2:c6:c8:50:6d:ba:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:1F:5F:35:D5:C7:D1:67:BD:C1:31:15:93:A0:E2:7D:37:0E:A2
X509v3 Authority Key Identifier:
keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:ce:32:e9:4b:1f:4a:04:13:8d:ad:56:ca:a6:1f:02:b3:61:
9c:43:8d:a8:1f:36:26:48:6a:73:50:49:44:38:d5:e8:e1:8e:
c9:b1:9f:2b:e6:00:69:83:e7:14:a6:00:a7:05:95:18:12:97:
bf:68:00:3f:b4:fb:a0:14:d6:3d:a7:b8:a8:af:7c:be:ad:78:
cf:83:1a:af:e8:b4:37:c3:ec:59:a8:aa:8a:75:11:03:99:8b:
0a:39:3c:96:15:c5:95:58:6a:21:85:01:61:25:df:9a:1d:60:
0a:2d:53:af:35:4f:f8:be:a8:f2:a0:b0:a6:80:f6:2d:5f:69:
04:e3:12:44:03:7a:3c:55:02:41:b9:39:ca:2a:4f:72:f2:6b:
1d:4f:51:5c:36:19:1e:c2:d4:e8:85:01:51:17:ad:20:74:94:
fd:a3:a6:a9:27:d7:dc:47:67:55:21:a7:44:50:b7:dc:ef:eb:
35:9d:e1:de:f9:10:6a:b1:cd:01:29:b1:a9:5d:62:da:a8:ae:
c0:20:0b:2c:32:a9:04:8d:d5:70:a5:ee:57:20:c1:e5:04:fd:
fe:22:1f:e8:a8:61:5e:2b:8c:e7:ae:a6:d1:cd:2a:04:40:af:
da:be:5c:63:fb:e5:ef:dc:9d:8b:54:8d:f3:83:ef:1e:3e:77:
af:f5:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:17 2026 by rpki-client