
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json)
Hash identifier: uUo69tjCNarFDA/NB/a/NWBVSYSwlzSc4No+kH9W0J4=
Subject key identifier: 5A:E6:04:B7:42:81:50:FB:44:C1:FF:A5:91:67:05:9D:65:10:9A:5A
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0CA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
Manifest number: 0AAB
Signing time: Mon 27 Jul 2026 08:48:17 +0000
Manifest this update: Mon 27 Jul 2026 08:48:16 +0000
Manifest next update: Mon 03 Aug 2026 08:48:16 +0000
Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: zibBfnrVKqsbP/Gm4OBywwOjjbmQcrKCfURE30XadVk=)
2: 3CE7D21201A311F1A14FC5D2686F56BC.roa (hash: EqLAuXxAZeKAYnuPs5OW1nY6ViQmlIY+p5+TLBkooss=)
3: 18E343FA3A3411F195AC72659C833773.roa (hash: C8YKOWTAFs4AuK1LSCOncUMIINtZQxLs2TqjAQ20XR0=)
4: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: naDflN2ZDqvNuyRMH9yg7NShqSkBOGk1R7/XQG5WRuw=)
5: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: v0jF8WeFZftcu6PScRsBenWIvu93y5DuxgFE9ecCGBw=)
6: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: 85+2M9Vs4x314HZvI0caNzpi2LtY+oROBZP1Q2xf7GM=)
7: 61EE2500936E11F091943583C4F9AE02.roa (hash: RZu+N0UMDFqrq/+u2/U/cWdhhSreA6LNQ4Hgg8v41p0=)
8: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: f/BC8ivG3s+/7SWxACHpcrIi5d6K+hPjENNTc6WbrhU=)
9: 1E01B6A0543D11F186DD736CA5833773.roa (hash: tKQG4OVdDdj4FPawULp/6JnWHU/v4Hs+sF2hw82P9C0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Jul 27 08:48:16 2026 GMT
Not After : Aug 3 08:48:16 2026 GMT
Subject: CN=6a671b50-f4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:15:dd:75:83:a6:5c:b6:02:fd:93:30:f7:
98:ad:a9:f4:95:e1:6b:be:fe:6b:9b:a7:e1:65:e7:
d9:83:6f:db:62:c0:7b:06:6e:85:cd:d2:81:77:df:
b3:3a:92:2c:0e:2f:91:02:5d:6a:93:ee:61:ea:79:
6d:de:51:02:03:d6:23:a1:01:2d:6c:8b:c0:db:5d:
3e:5c:c6:99:b8:3e:f8:48:1b:4c:d4:05:e8:71:e3:
7f:ad:4e:44:b8:15:b6:af:f9:0a:3f:df:9f:ab:a6:
da:c0:91:6c:9b:7e:17:94:9c:82:0b:a9:9d:1f:f0:
09:7f:7e:7e:6c:f6:89:9b:b1:b8:2a:fa:b4:ff:fc:
79:ff:b6:a5:e0:94:9c:fe:c6:e9:55:f1:dc:6d:02:
77:b8:ca:74:10:fd:b3:f6:e0:06:1f:8f:94:d2:4d:
91:b3:89:cc:39:c2:65:43:12:79:71:f1:6c:73:ae:
87:97:a8:81:a3:38:ed:88:d9:72:cd:a8:d7:66:07:
91:5e:10:42:ca:2b:28:85:a8:b1:c4:a3:3a:9b:8d:
8d:53:8a:a4:75:27:76:7f:73:da:37:51:88:85:24:
b7:ae:6c:70:fc:49:43:ec:75:0e:b1:b8:16:de:5d:
46:ba:70:3c:cf:8d:8b:84:fb:3f:9f:77:0b:5e:20:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:04:B7:42:81:50:FB:44:C1:FF:A5:91:67:05:9D:65:10:9A:5A
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:3e:8b:35:83:2c:68:b3:29:3f:b2:f9:68:be:79:77:84:4c:
b2:ba:bf:6a:f6:5a:a8:09:9f:51:5d:02:06:42:4e:bb:f7:40:
1b:69:7a:24:b1:39:4a:99:a9:f8:2f:a7:1e:ff:c0:ad:cd:89:
06:c2:6a:05:6c:c4:75:d9:dd:e6:75:64:0f:bf:29:b2:98:f6:
4f:34:b1:b8:91:d8:3c:23:8a:54:5c:e5:7a:80:27:56:ac:bd:
cc:c9:1d:13:c2:32:4e:be:a2:99:d4:9e:5b:b4:1d:87:09:bc:
52:57:e9:79:69:c4:b3:fd:28:09:6e:f0:20:93:56:de:5f:43:
42:72:65:e6:9e:bd:0a:cc:15:06:8f:76:db:27:aa:4e:9f:5b:
bb:4d:fe:c1:d1:55:96:29:5e:96:73:f3:8e:02:60:58:04:e1:
77:cc:2d:57:0b:e1:c7:1f:43:17:a2:8d:c8:05:02:29:b5:86:
4b:49:78:6e:64:97:27:6e:98:04:65:f6:d8:ab:b3:6c:46:b2:
e9:93:6e:84:cd:26:75:3e:08:93:e7:46:be:46:ef:0b:59:e3:
74:4b:5d:64:42:83:aa:13:5a:64:73:24:d1:b5:12:c8:8f:8c:
17:b6:40:79:0a:bc:8f:76:16:ef:8c:5e:16:70:96:4a:88:0c:
61:3d:88:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjYwNzI3MDg0ODE2WhcNMjYwODAzMDg0ODE2WjAYMRYwFAYD
VQQDEw02YTY3MWI1MC1mNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApn0V3XWDply2Av2TMPeYran0leFrvv5rm6fhZefZg2/bYsB7Bm6FzdKBd9+z
OpIsDi+RAl1qk+5h6nlt3lECA9YjoQEtbIvA210+XMaZuD74SBtM1AXoceN/rU5E
uBW2r/kKP9+fq6bawJFsm34XlJyCC6mdH/AJf35+bPaJm7G4Kvq0//x5/7al4JSc
/sbpVfHcbQJ3uMp0EP2z9uAGH4+U0k2Rs4nMOcJlQxJ5cfFsc66Hl6iBozjtiNly
zajXZgeRXhBCyisohaixxKM6m42NU4qkdSd2f3PaN1GIhSS3rmxw/ElD7HUOsbgW
3l1GunA8z42LhPs/n3cLXiBytwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrmBLdC
gVD7RMH/pZFnBZ1lEJpaMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf
V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABz6LNYMsaLMpP7L5aL55d4RMsrq/avZaqAmfUV0CBkJOu/dAG2l6JLE5Spmp
+C+nHv/Arc2JBsJqBWzEddnd5nVkD78pspj2TzSxuJHYPCOKVFzleoAnVqy9zMkd
E8IyTr6imdSeW7Qdhwm8UlfpeWnEs/0oCW7wIJNW3l9DQnJl5p69CswVBo922yeq
Tp9bu03+wdFVlilelnPzjgJgWAThd8wtVwvhxx9DF6KNyAUCKbWGS0l4bmSXJ26Y
BGX22KuzbEay6ZNuhM0mdT4Ik+dGvkbvC1njdEtdZEKDqhNaZHMk0bUSyI+MF7ZA
eQq8j3YW74xeFnCWSogMYT2ISQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 17:48:55 2026 by rpki-client