
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
File: OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json)
Hash identifier: CED21pF3xOAyXyDF1EmFd8BUxwjjeb0Ri1tWIV9ZujI=
Subject key identifier: 35:E0:4B:28:9B:A1:AA:0B:63:60:14:FB:A4:58:1C:5C:17:88:2C:61
Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Certificate issuer: /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
Manifest number: 026D
Signing time: Sat 05 Sep 2026 01:55:35 +0000
Manifest this update: Sat 05 Sep 2026 01:55:34 +0000
Manifest next update: Sat 12 Sep 2026 01:55:34 +0000
Files and hashes: 1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: /us/QXfhNhLRwDFxYPeDoexxqYRCaIIhMbw1AlcFPwk=)
2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: PQd/8cl7exmw5LNAxBVE8+5SKezKc679UfwN3IJFrBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Validity
Not Before: Sep 5 01:55:34 2026 GMT
Not After : Sep 12 01:55:34 2026 GMT
Subject: CN=6a9b7696-3e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:16:a1:6b:27:d9:a0:3a:30:f7:ef:2f:54:
14:99:57:4f:cb:05:67:bf:f8:ae:d2:04:d4:99:f3:
8d:d6:e5:d5:f1:9a:82:bf:9c:ff:eb:45:27:06:d9:
b5:4a:79:8e:e7:db:3b:bc:a8:55:dd:82:a5:91:84:
d0:e6:f7:11:29:e9:d1:0b:5a:2e:a2:1f:e5:9e:fa:
71:6b:84:a1:12:bd:7f:66:b6:85:c8:57:9a:ed:6d:
eb:a5:f5:a6:84:e1:34:29:0c:f1:68:e6:b8:57:b6:
52:fa:da:0b:ba:88:ca:de:c9:30:ec:b1:a0:51:eb:
8a:f4:6f:d0:87:9a:c1:91:0d:cf:35:23:18:0f:ae:
54:c0:19:7c:09:17:8c:5f:5e:68:5c:f6:8f:35:bd:
23:29:5d:ac:16:c4:64:d2:6f:88:62:36:a2:6b:85:
fe:d1:7c:b3:4e:be:ca:e4:7e:39:d2:c9:22:84:72:
12:6b:b0:5e:df:d5:1c:3e:cd:be:d1:9b:ea:8e:d7:
44:b7:1a:d6:43:95:db:cc:13:4b:3c:44:bc:e7:bb:
c1:1d:b2:55:00:a8:dc:16:36:92:ba:02:27:73:30:
6e:4d:4f:bd:a6:49:ec:0e:8c:1e:7f:ff:05:59:c6:
00:a3:b4:c5:f7:15:5e:a4:23:be:f9:62:7c:ce:a2:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:4B:28:9B:A1:AA:0B:63:60:14:FB:A4:58:1C:5C:17:88:2C:61
X509v3 Authority Key Identifier:
keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:dd:8f:a4:d3:fd:23:47:3b:79:dc:cb:03:d9:bf:d6:d1:5d:
5a:e1:32:f0:3c:ab:ac:24:29:11:cc:1e:00:1d:07:b3:22:49:
cb:8f:54:fb:ae:b4:e8:ce:97:26:1b:e7:7b:e0:4b:67:1e:b2:
01:cb:b3:5d:de:bc:0a:99:66:5b:87:fd:30:c2:fa:82:97:f3:
23:00:1b:b8:a8:05:a7:6f:d5:b6:eb:74:dd:79:85:e1:8c:a4:
ec:53:47:3e:14:92:29:7d:09:58:2f:cf:41:96:24:a7:74:6d:
8b:95:13:7d:bb:e5:99:fd:ed:9a:7e:9e:ff:3f:dc:ea:66:63:
2a:35:c3:61:29:ec:81:d0:0b:14:b6:b7:72:b0:e8:85:9b:2e:
8d:7a:92:d4:19:b8:c1:68:96:60:c4:6b:dd:de:bf:9e:52:fa:
f1:d9:81:0a:32:28:a8:f6:38:83:44:76:18:7c:1e:27:46:2e:
ef:b4:20:db:4c:d1:39:2a:0b:96:86:98:df:7c:25:69:bb:74:
2c:26:3c:ad:b3:fa:78:08:e2:83:97:5e:97:f6:25:88:ee:e6:
34:03:43:a2:7c:9c:e6:9d:e2:54:66:3a:c0:ca:7b:cd:87:fc:
66:7a:e6:e6:20:2c:27:70:c7:6f:c5:28:d7:97:9c:57:bb:d5:
f3:8a:9a:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE1MzMxMTAvBgNVBAUTKDNBQTVBQ0E1NUM3QjM1RTNGOTIyQkJCOERBQUIxRDdE
ODg3MEUzNzMwHhcNMjYwOTA1MDE1NTM0WhcNMjYwOTEyMDE1NTM0WjAYMRYwFAYD
VQQDEw02YTliNzY5Ni0zZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0a8WoWsn2aA6MPfvL1QUmVdPywVnv/iu0gTUmfON1uXV8ZqCv5z/60UnBtm1
SnmO59s7vKhV3YKlkYTQ5vcRKenRC1ouoh/lnvpxa4ShEr1/ZraFyFea7W3rpfWm
hOE0KQzxaOa4V7ZS+toLuojK3skw7LGgUeuK9G/Qh5rBkQ3PNSMYD65UwBl8CReM
X15oXPaPNb0jKV2sFsRk0m+IYjaia4X+0XyzTr7K5H450skihHISa7Be39UcPs2+
0ZvqjtdEtxrWQ5XbzBNLPES857vBHbJVAKjcFjaSugInczBuTU+9pknsDowef/8F
WcYAo7TF9xVepCO++WJ8zqL4swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXgSyib
oaoLY2AU+6RYHFwXiCxhMB8GA1UdIwQYMBaAFDqlrKVcezXj+SK7uNqrHX2IcONz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTUzMy80MDI5OTc4QUY4
N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05lUDVJcnU0MnFzZGZZaHc0
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09xV3NwVng3TmVQNUlydTQycXNkZllodzQzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTUzMy80MDI5OTc4QUY4N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05l
UDVJcnU0MnFzZGZZaHc0M00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdt2PpNP9I0c7edzLA9m/1tFdWuEy8DyrrCQpEcweAB0HsyJJy49U+6606M6X
Jhvne+BLZx6yAcuzXd68CplmW4f9MML6gpfzIwAbuKgFp2/Vtut03XmF4Yyk7FNH
PhSSKX0JWC/PQZYkp3Rti5UTfbvlmf3tmn6e/z/c6mZjKjXDYSnsgdALFLa3crDo
hZsujXqS1Bm4wWiWYMRr3d6/nlL68dmBCjIoqPY4g0R2GHweJ0Yu77Qg20zROSoL
loaY33wlabt0LCY8rbP6eAjig5del/YliO7mNANDonyc5p3iVGY6wMp7zYf8Znrm
5iAsJ3DHb8Uo15ecV7vV84qaAA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:16:12 2026 by rpki-client