
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json)
Hash identifier: fZEgehrghPm06seWhADwqBS0E+BH1xiYZCflIFVRg6M=
Subject key identifier: 0E:AB:79:24:BC:6A:61:9F:94:AF:7A:A6:46:6A:4F:C7:6D:38:5E:B2
Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Certificate serial: 0399
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
Manifest number: 0390
Signing time: Sat 07 Mar 2026 00:10:32 +0000
Manifest this update: Sat 07 Mar 2026 00:10:32 +0000
Manifest next update: Sat 14 Mar 2026 00:10:32 +0000
Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: T/YcaPYYb4Ffjjpo+78R2aB2urlJGmiHK0ergJGBOXk=)
2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: cU2lqC8TIbL72lTnvOhD/xI/XrTHAha+gv4NhbTb0Kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 00:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Validity
Not Before: Mar 7 00:10:32 2026 GMT
Not After : Mar 14 00:10:32 2026 GMT
Subject: CN=69ab6cf8-b31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:30:fb:1d:13:98:75:d3:37:cb:ac:8e:a3:
f0:2c:7e:d1:30:b3:c7:e9:2d:df:f1:21:cb:f9:68:
97:59:9c:2b:ef:82:d5:2b:18:f2:b6:5a:89:df:05:
4f:98:a9:d8:4f:ec:35:45:d4:66:b2:30:b4:a0:70:
da:37:45:11:3a:4a:4e:c2:75:fb:93:44:83:8e:7f:
88:1f:76:35:fd:b1:61:52:67:94:74:e7:94:27:9e:
7f:50:42:c8:4d:11:f1:57:e2:8a:03:47:cf:96:f4:
0d:39:d0:f4:3e:84:08:d0:3f:33:f3:45:47:52:1a:
e2:14:29:cd:88:cb:69:74:9e:1d:d8:e3:3d:86:bb:
40:b6:cc:3b:dd:c0:bd:f9:59:71:77:7c:fd:c9:7d:
26:e5:10:e4:e3:43:e8:0c:29:22:22:23:41:87:67:
19:16:86:81:0c:c5:84:84:94:2b:3b:56:56:40:69:
68:9d:d4:26:98:7f:b9:ca:f6:50:c4:50:7c:c6:4d:
fa:e1:f3:4a:6e:2b:b6:d3:20:a6:db:f2:85:1c:c5:
ba:80:96:bc:9a:8e:18:67:a6:24:5b:6c:96:41:bf:
63:0f:77:30:fa:43:91:a5:2a:e1:76:9f:ea:3e:31:
7a:0e:c8:b7:95:29:f2:4f:36:88:af:42:c9:8c:08:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AB:79:24:BC:6A:61:9F:94:AF:7A:A6:46:6A:4F:C7:6D:38:5E:B2
X509v3 Authority Key Identifier:
keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:81:d6:eb:c6:98:25:df:15:c6:da:00:c2:22:03:b3:51:e5:
0e:f2:dd:87:db:bd:07:7f:ab:99:d3:69:6f:06:ed:29:ce:e2:
b2:ad:1f:d3:25:46:78:b1:2d:db:5e:f4:50:d7:73:f0:e0:46:
cc:9b:38:5e:44:da:b0:20:a5:7b:90:26:3b:71:4c:74:40:72:
00:d8:39:82:37:52:95:04:50:7b:97:6b:9e:04:47:83:be:01:
6d:a0:29:01:f4:82:d5:b0:bf:80:f4:60:9e:2a:3b:9e:12:9c:
30:4d:b2:99:46:61:12:a2:89:f8:f8:c7:cf:2a:5e:46:d7:53:
7b:a0:f4:58:03:b5:8a:5f:aa:ba:be:c6:6e:a8:dd:0d:0b:41:
32:eb:b0:11:a1:78:fa:41:cb:a7:1b:aa:26:d1:e4:c3:2b:88:
38:ac:2a:69:83:38:59:19:db:88:94:fa:9f:da:5b:b3:c1:d6:
7b:18:ff:0e:0f:6d:37:b0:76:c1:33:83:96:da:19:ed:53:24:
6a:54:17:77:ec:bb:2e:ab:62:45:1b:91:ba:a6:6a:3a:2b:3b:
4d:49:42:6e:21:dd:69:ac:bb:12:7a:29:69:b6:f0:59:f9:87:
15:4b:4b:65:b3:87:8b:85:49:d8:5f:c2:16:67:c0:c1:d8:fd:
62:64:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:04:30 2026 by rpki-client