
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
File: mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft (raw, json)
Hash identifier: cDRiWbuVtxdFaulTX3C3JQNNss8fRYjqARgtd9jXntY=
Subject key identifier: 0F:B3:42:9C:8C:3B:B9:4F:08:D7:2D:4B:77:9A:7A:9A:9B:9D:24:26
Authority key identifier: 98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F
Certificate issuer: /CN=A9148141/serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
Manifest number: 3E
Signing time: Tue 19 May 2026 08:23:34 +0000
Manifest this update: Tue 19 May 2026 08:23:33 +0000
Manifest next update: Tue 26 May 2026 08:23:33 +0000
Files and hashes: 1: mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl (hash: BdPXKufO/2LLiawfbsg7yc3IH5TJwPj7/00rGcATh1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl
rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148141, serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
Validity
Not Before: May 19 08:23:33 2026 GMT
Not After : May 26 08:23:33 2026 GMT
Subject: CN=6a0c1e06-1dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:5f:db:b6:dc:ed:dc:d6:6a:17:2a:9f:47:
52:b8:dd:b7:66:cb:42:7d:4e:85:3f:75:88:e1:fd:
1c:40:58:56:65:ca:fe:9c:4e:b0:49:39:00:f1:17:
37:90:87:5c:71:a5:f9:dd:10:a0:36:ad:d7:d6:66:
5c:04:7e:65:7e:4a:9f:6c:8e:f5:83:bb:eb:96:ee:
3a:01:4f:db:ff:7d:2a:99:2c:28:21:1e:79:90:0f:
fe:63:ae:01:2e:00:6c:2c:a9:50:e2:a4:57:59:5b:
3c:44:db:b4:1b:3d:2f:ec:e8:c8:2d:0d:70:b4:34:
d3:f0:14:f2:a1:7f:95:31:10:40:b2:17:f9:5d:63:
d2:b3:27:d8:01:96:ec:d8:32:eb:1e:27:c1:b8:16:
5b:5c:08:a1:09:65:46:0c:3e:fb:91:d1:cd:84:c4:
88:26:c1:88:27:6e:31:c9:fb:50:67:d3:35:f8:96:
1a:36:a2:97:ff:02:33:a9:49:2e:c7:bc:ad:c2:1e:
c5:03:53:e6:7e:b4:2f:e2:6f:d1:0f:aa:f9:2c:b6:
e2:61:39:b5:d6:c1:80:8e:c8:c1:aa:fa:d7:4a:3c:
9f:02:11:4a:02:de:71:86:7d:81:21:70:41:9e:14:
01:ed:01:ca:67:d7:bf:3a:6d:e8:20:eb:df:f3:16:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B3:42:9C:8C:3B:B9:4F:08:D7:2D:4B:77:9A:7A:9A:9B:9D:24:26
X509v3 Authority Key Identifier:
keyid:98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:7f:83:20:1c:54:36:b5:1a:69:41:11:0b:aa:8e:7a:1c:d0:
cb:b4:6e:09:7d:2d:7a:db:ab:ef:13:99:75:2a:3e:5d:e4:05:
ac:69:40:18:18:dc:54:b8:c0:4f:1f:00:c8:8e:8c:9f:33:00:
ae:f2:d3:09:d7:7d:2c:88:82:48:45:17:41:fa:4c:b0:71:12:
4c:6f:88:c2:2a:8a:f1:f4:16:e5:eb:e7:2f:e8:42:07:5f:30:
c8:74:8d:34:a1:ec:5e:68:fc:c4:0a:b0:c3:30:50:b7:b1:8b:
c4:d6:ec:0f:e5:93:89:d1:05:a9:04:e6:4b:90:55:e3:9a:38:
74:26:4f:e3:9e:1d:35:8b:5f:53:e8:27:27:c5:8b:40:41:4c:
d7:07:80:d8:14:c7:77:d3:21:73:08:07:fe:df:7e:87:c4:73:
53:4d:b5:82:cd:fb:2e:39:d2:9f:76:c3:55:a1:0b:7b:c2:f9:
e6:66:42:a0:53:11:cd:99:8a:20:32:11:5f:18:66:3d:b1:ca:
19:8c:58:1f:37:08:1a:33:ca:3d:fb:c3:05:ac:8b:e2:15:8b:
69:1a:af:72:f3:89:ce:d2:b9:21:1f:c1:de:ce:52:a5:36:85:
07:0c:10:41:b4:8f:fb:cb:24:fc:f6:ea:12:c0:79:d3:49:4f:
d3:79:30:24
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
ODE0MTExMC8GA1UEBRMoOThFMDk2RjgxMURGMTA5MzM5NkRBQTIyMEQ5RDZCNDYx
RERENjc1RjAeFw0yNjA1MTkwODIzMzNaFw0yNjA1MjYwODIzMzNaMBgxFjAUBgNV
BAMTDTZhMGMxZTA2LTFkYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIKl/bttzt3NZqFyqfR1K43bdmy0J9ToU/dYjh/RxAWFZlyv6cTrBJOQDxFzeQ
h1xxpfndEKA2rdfWZlwEfmV+Sp9sjvWDu+uW7joBT9v/fSqZLCghHnmQD/5jrgEu
AGwsqVDipFdZWzxE27QbPS/s6MgtDXC0NNPwFPKhf5UxEECyF/ldY9KzJ9gBluzY
MuseJ8G4FltcCKEJZUYMPvuR0c2ExIgmwYgnbjHJ+1Bn0zX4lho2opf/AjOpSS7H
vK3CHsUDU+Z+tC/ib9EPqvkstuJhObXWwYCOyMGq+tdKPJ8CEUoC3nGGfYEhcEGe
FAHtAcpn1786begg69/zFu1bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUD7NCnIw7
uU8I1y1Ld5p6mpudJCYwHwYDVR0jBBgwFoAUmOCW+BHfEJM5baoiDZ1rRh3dZ18w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4MTQxLzIxRTY1RjBDRkM4
NDExRjBBREEzNDU1RjU2NkY1NkJDL21PQ1ctQkhmRUpNNWJhb2lEWjFyUmgzZFox
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbU9DVy1CSGZFSk01YmFvaURaMXJSaDNkWjE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4
MTQxLzIxRTY1RjBDRkM4NDExRjBBREEzNDU1RjU2NkY1NkJDL21PQ1ctQkhmRUpN
NWJhb2lEWjFyUmgzZFoxOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAIf4MgHFQ2tRppQRELqo56HNDLtG4JfS1626vvE5l1Kj5d5AWsaUAYGNxUuMBP
HwDIjoyfMwCu8tMJ130siIJIRRdB+kywcRJMb4jCKorx9Bbl6+cv6EIHXzDIdI00
oexeaPzECrDDMFC3sYvE1uwP5ZOJ0QWpBOZLkFXjmjh0Jk/jnh01i19T6CcnxYtA
QUzXB4DYFMd30yFzCAf+336HxHNTTbWCzfsuOdKfdsNVoQt7wvnmZkKgUxHNmYog
MhFfGGY9scoZjFgfNwgaM8o9+8MFrIviFYtpGq9y84nO0rkhH8HezlKlNoUHDBBB
tI/7yyT89uoSwHnTSU/TeTAk
-----END CERTIFICATE-----
Generated at Thu May 21 09:36:55 2026 by rpki-client