
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json)
Hash identifier: HG2FRQjKTFA8W7N0RBy671KssyjBbpAUVPVTi1R6M3A=
Subject key identifier: B3:F9:AE:D0:C7:68:2F:88:2F:B2:EF:A8:ED:30:CE:1B:16:59:16:CD
Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Certificate serial: 0D92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
Manifest number: 0D5F
Signing time: Sun 26 Jul 2026 18:22:08 +0000
Manifest this update: Sun 26 Jul 2026 18:22:07 +0000
Manifest next update: Sun 02 Aug 2026 18:22:07 +0000
Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: CtTeTtHomPSbYB4og1W7v+ATYVbrchcyMp0LnGIiHo4=)
2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 742WnLRxRAdtV7KzoHDoGL/kuH4GkN1lYPhgQ1RkcrQ=)
3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: gsMKozdipIVu4yCNIKSgaJ/LpxKdahpbHV6vCqtL14U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3474 (0xd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Validity
Not Before: Jul 26 18:22:07 2026 GMT
Not After : Aug 2 18:22:07 2026 GMT
Subject: CN=6a665050-4127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:26:4d:1a:f8:32:63:81:07:54:41:a0:5b:
47:bf:34:97:26:e7:58:79:b1:51:ff:1d:e6:8e:a8:
5b:df:eb:95:fd:39:4a:fe:02:68:27:14:4f:d1:2a:
0a:03:77:d5:b2:cc:36:61:96:32:43:bf:6c:65:68:
44:6c:88:98:f4:c4:89:0d:9d:67:54:e5:1c:6f:29:
6f:83:08:18:63:30:71:39:ac:36:9e:50:2d:c2:4f:
57:c7:17:9a:46:41:fe:ba:11:7c:81:63:4b:46:67:
15:e8:12:52:e9:4e:4e:2b:1f:ea:c2:cd:7f:c7:b4:
a2:5a:3b:8e:ba:38:b6:05:45:53:78:44:52:41:db:
75:56:5c:9e:7a:fa:69:1d:3e:f3:b0:66:eb:68:59:
82:25:1b:c3:91:fe:57:34:82:2d:8e:68:3b:5f:d6:
86:2d:0a:e3:01:70:40:bc:d5:b2:41:93:6e:dc:85:
e5:7e:2e:bb:fc:91:35:fb:2e:27:18:e7:a0:cb:87:
75:6a:c9:bf:f0:12:ec:b6:ba:7a:76:89:f1:25:91:
bd:f7:5c:48:a8:2e:b3:64:fe:23:6c:10:22:bb:c7:
8b:39:81:2f:3c:e2:c4:da:cb:f1:b2:66:26:19:87:
09:0b:fc:0e:da:82:7f:40:d8:a5:a3:7f:05:d3:2e:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F9:AE:D0:C7:68:2F:88:2F:B2:EF:A8:ED:30:CE:1B:16:59:16:CD
X509v3 Authority Key Identifier:
keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:89:97:81:12:61:25:de:20:59:fd:6d:1d:4b:c5:be:56:40:
bb:44:35:cd:c7:97:79:b7:42:2c:1c:e1:eb:04:5d:69:8a:00:
ec:b1:2c:44:04:4e:18:56:41:e7:b5:84:02:98:85:6d:1b:3a:
58:6d:5f:0f:32:4a:1a:1b:07:6c:6e:93:2b:4c:bd:64:81:81:
48:45:65:8e:8c:df:f5:f5:7e:9b:ea:4c:06:95:96:e0:f9:02:
eb:30:b7:7d:65:10:eb:77:56:b0:6f:f8:bd:21:0d:54:25:a8:
69:1c:54:aa:09:05:42:bc:d5:50:21:b6:b6:ac:1a:a6:32:b3:
40:42:e6:24:e6:cd:db:12:b8:83:23:92:ff:03:c2:d1:85:61:
73:66:75:78:34:11:53:e4:cc:a0:b3:68:df:9b:c5:2f:f3:6b:
3f:6f:57:d4:45:2f:1e:6c:2d:e3:40:f2:61:a5:e8:4f:bd:f3:
62:2b:d4:5b:90:ab:eb:f0:7b:c8:0f:7b:51:b5:7a:8f:68:d0:
59:53:d0:4f:b2:7c:3d:d2:c5:b0:97:10:f5:b3:98:a6:51:6b:
9d:e8:bf:b9:51:67:a4:26:f6:2c:a4:c3:b7:e5:55:bc:db:6e:
a0:1f:3f:b8:c6:e6:6d:dc:94:40:28:1d:6f:8a:61:ba:f8:23:
12:47:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:46:01 2026 by rpki-client