
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier: c3aUyNtDfjzYNLV4jtgEzl5wUSZ6kCb3g/c9VfSdV0s=
Subject key identifier: 3D:75:B1:F0:FE:20:44:A6:63:65:ED:0F:2C:6E:6F:E4:34:86:C4:48
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial: 0CD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number: 0CC2
Signing time: Mon 06 Jul 2026 18:52:20 +0000
Manifest this update: Mon 06 Jul 2026 18:52:20 +0000
Manifest next update: Mon 13 Jul 2026 18:52:20 +0000
Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: QcT6uekyZb62jI94Gl0/v8QxK0s12JiYtfsIYxVmTUg=)
2: B49D829014F411EA96EC5874C4F9AE02.roa (hash: jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=)
3: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: 0ylwtp+Xde2oLtmDBX2li5EHhsIVUZ6el50n4zuRj9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 18:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3284 (0xcd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Validity
Not Before: Jul 6 18:52:20 2026 GMT
Not After : Jul 13 18:52:20 2026 GMT
Subject: CN=6a4bf964-4f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:ee:5d:4e:48:aa:f3:0b:ff:e5:64:0a:29:
36:0d:52:24:e3:40:8b:43:0d:6c:c6:66:fc:7d:ec:
4d:2e:41:10:ae:3a:cf:7d:2c:c8:1f:ed:ec:b5:dc:
9e:df:ab:90:ee:dc:2c:98:cf:6e:cd:35:42:33:2c:
62:bc:d7:51:41:97:71:ce:d6:13:ab:9f:bf:52:ae:
b1:78:e7:47:a0:8e:7a:26:7a:09:60:85:f2:d7:5c:
61:2e:e3:f1:38:ba:b5:a6:cb:77:c1:5a:ef:b6:ee:
e0:a6:21:e5:44:13:87:99:ba:45:73:be:65:87:34:
13:8b:dd:99:07:3f:0f:63:96:22:e2:7c:ce:d0:29:
89:e9:d5:14:3f:69:3f:f4:b2:76:7d:71:b3:e4:9e:
c3:94:0b:92:4b:9c:14:b7:09:2e:fc:e3:cd:2c:0a:
91:92:84:04:86:8e:ec:78:f2:eb:e0:71:9d:21:b7:
0e:fa:59:22:4d:c5:32:7f:68:5b:69:3e:d3:af:9d:
98:81:81:51:d9:7e:75:2c:39:d9:e1:07:2f:33:03:
d6:40:a9:7f:af:4a:c6:07:fa:4b:f2:ba:03:af:55:
ae:c5:fc:1c:a0:6b:1d:2f:2a:3a:81:5e:47:11:77:
ea:b3:de:a2:c5:d5:0f:77:54:cd:73:f0:81:e7:52:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:75:B1:F0:FE:20:44:A6:63:65:ED:0F:2C:6E:6F:E4:34:86:C4:48
X509v3 Authority Key Identifier:
keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:8a:f1:0e:72:56:df:b6:45:73:1f:bd:4f:a6:e6:03:16:56:
34:1d:95:45:c2:ce:98:08:9a:8d:85:ee:ae:c4:01:72:8a:57:
af:3d:0e:5c:95:32:bd:7a:f8:2d:44:75:19:4c:9d:70:52:c6:
ad:ef:76:c0:cc:51:3e:64:0d:9a:f4:fd:5c:9a:43:73:47:b4:
f1:2d:e8:c5:b0:32:5a:9f:d7:c7:8f:25:ae:a4:03:34:af:0e:
6c:04:16:9d:b4:26:9a:a8:71:69:ef:81:10:1a:f9:70:ec:23:
26:31:9f:4f:19:69:0f:e5:84:15:7c:ad:a3:f1:d0:85:e2:10:
b7:ed:9e:40:cd:95:6a:ef:92:03:2b:14:0d:49:8a:a8:ce:37:
60:97:c4:61:61:2d:37:b5:c5:71:05:0c:2e:2f:b3:7c:e0:a9:
9a:88:20:76:07:3e:37:7d:4b:66:f8:57:f8:9e:1c:b6:44:ec:
d1:9d:82:13:71:f7:b0:d9:c8:cf:27:19:a0:32:1d:64:93:bb:
e5:ff:73:11:45:4c:2b:8a:03:dc:9d:77:52:34:c1:75:3e:0f:
20:fa:ef:51:29:41:a3:f6:d2:af:08:6e:db:49:d3:75:31:65:
c0:b1:f2:3a:d3:b9:ab:a7:a6:0f:f5:e3:4d:85:34:c1:6a:78:
d3:48:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:04 2026 by rpki-client