
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json)
Hash identifier: PF0hb0Tz8pgEq9QAjh+DU1voYZ1T4tCHdknPxOX0dic=
Subject key identifier: 4B:53:A8:50:5F:6B:8F:FE:B9:4D:BD:6A:B6:C6:A5:6F:CE:5C:1E:E9
Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
Manifest number: 01C0
Signing time: Tue 23 Jun 2026 04:02:30 +0000
Manifest this update: Tue 23 Jun 2026 04:02:30 +0000
Manifest next update: Tue 30 Jun 2026 04:02:30 +0000
Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: NeM1VXu3GePwIMzUfvWJYBTh0kpBEKlk709bMUaBM4I=)
2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: Gu3gLu/Zq+fJHK0nLLCq05QCFvC/IzAtjG0pre/fGVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 04:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Validity
Not Before: Jun 23 04:02:30 2026 GMT
Not After : Jun 30 04:02:30 2026 GMT
Subject: CN=6a3a0556-3220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:f8:3a:06:5b:18:ee:4c:00:fd:c7:df:2d:
1c:13:59:27:4b:b1:07:f8:c0:8b:ee:41:a2:8b:e1:
27:b1:11:28:e8:73:2a:4b:75:43:08:ed:04:1a:1b:
76:16:13:7d:1f:7b:ff:0e:1d:b7:bf:eb:58:9e:91:
ed:20:99:da:54:89:b6:81:8f:a8:77:8f:05:9e:0c:
99:bf:db:1b:e6:c4:ee:34:08:7e:81:39:bd:db:39:
1c:95:7a:b3:85:f0:9a:67:a3:4d:b6:ea:12:4e:bf:
44:23:17:46:3e:af:ba:25:c6:e6:7e:7a:8b:4b:ee:
76:3e:92:b0:b8:f2:93:31:2a:5f:de:3f:87:04:b4:
19:dd:4d:f8:de:64:ed:c1:34:50:97:df:94:13:aa:
17:51:e6:da:76:84:51:d8:42:11:48:12:33:a7:23:
39:bf:63:63:d1:a2:2c:f4:4d:7e:e4:9b:1b:54:46:
1c:ef:ea:fa:60:06:a4:0f:a1:47:61:02:d2:9c:36:
2a:6f:f6:33:66:f5:32:b1:db:2e:d8:f1:90:38:4c:
82:56:4e:18:3c:ca:21:4b:c8:e7:fa:e2:69:13:33:
ff:bd:75:a4:2c:bf:cb:94:f1:a5:17:af:ec:40:8c:
f2:0a:6e:cf:7f:c8:4a:d3:28:a8:8c:a6:7c:d8:35:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:53:A8:50:5F:6B:8F:FE:B9:4D:BD:6A:B6:C6:A5:6F:CE:5C:1E:E9
X509v3 Authority Key Identifier:
keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:c3:a5:be:01:9b:78:7a:65:c9:36:31:8d:c5:1c:96:fa:9f:
ea:6c:95:e8:90:a5:ab:dd:83:e4:6c:48:7a:f9:fb:bf:c9:ef:
27:e3:e6:d2:c2:56:1a:08:13:ca:6c:5f:92:13:a9:ac:92:c9:
4e:15:11:dc:44:73:61:00:25:90:66:a3:e5:1d:d7:fe:a3:d3:
f8:a4:48:e7:04:2e:58:a2:3b:f1:53:4e:30:f5:8a:ee:5d:c7:
6e:bd:55:53:36:3c:0e:ba:b5:95:f0:a6:86:88:fb:1b:88:a4:
3b:ea:1d:3d:a0:d1:8d:92:65:1c:4e:cb:54:79:00:43:28:41:
03:1a:43:88:31:95:58:f5:0c:c0:7a:36:a1:04:52:c7:66:37:
6a:6d:c3:b6:78:bf:43:94:95:12:90:62:c6:8b:a2:49:4b:a9:
8c:22:f5:0d:b7:ea:84:c1:6f:90:0b:37:d7:81:64:37:e3:a5:
91:35:42:56:ae:3b:73:3a:34:6e:30:69:c0:3f:09:cf:80:eb:
f5:91:a9:7b:81:b9:96:44:1a:ba:eb:9b:5e:52:6c:3b:d6:3c:
44:aa:b6:f7:93:53:3b:a0:93:97:03:3e:35:fe:a3:2c:cd:ca:
82:b8:28:88:cb:53:9f:c4:a1:fd:9c:cf:ea:89:e0:60:18:95:
af:85:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:45 2026 by rpki-client