
$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
File: OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json)
Hash identifier: V/08VD7aUHLYtAljScSkG7zyBPJcvjAoP+4DmE0ksDQ=
Subject key identifier: EF:11:C3:00:CA:35:45:BA:ED:16:83:DE:C2:66:D7:2D:D6:7A:BA:8A
Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07
Certificate issuer: /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
Certificate serial: 1405
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
Manifest number: 25A3
Signing time: Tue 18 Aug 2026 17:05:19 +0000
Manifest this update: Tue 18 Aug 2026 17:05:19 +0000
Manifest next update: Tue 25 Aug 2026 17:05:19 +0000
Files and hashes: 1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: 3Tt3Lv860g2SmC1SKYQjIvFqMhJyMrvxlMrIIdbMCwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl
rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5125 (0x1405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
Validity
Not Before: Aug 18 17:05:19 2026 GMT
Not After : Aug 25 17:05:19 2026 GMT
Subject: CN=6a8490cf-9314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:66:de:ca:bb:8d:12:ef:f3:bc:24:4b:e8:
ef:b0:4f:9c:90:ed:f0:a1:d3:67:71:15:3f:b4:8d:
07:cb:82:ae:29:28:b7:ec:38:05:ab:62:f6:d6:5d:
cf:57:dd:cf:a9:f3:e5:2f:86:a5:25:3b:23:d9:71:
81:a2:85:58:8a:66:2a:a9:70:e2:95:1b:8c:8f:c3:
86:fc:a9:24:3d:cd:01:57:42:22:e8:ab:1c:fc:97:
d0:ef:62:21:53:98:11:85:3d:68:b3:f8:47:3c:bc:
79:f6:65:0d:0e:0e:b5:6c:d7:8e:56:17:7e:64:d2:
3a:ac:af:63:6e:ce:9e:e1:06:2f:07:32:68:42:a9:
32:c9:4f:0d:13:83:9c:46:a8:d9:97:6f:fd:a2:92:
16:ec:b1:87:c9:3c:f4:b8:e5:78:8b:df:a2:c4:64:
85:44:c1:51:f9:49:a0:01:56:07:ee:00:7a:87:77:
03:73:80:50:ec:27:6e:9e:9d:a1:91:7b:f0:01:4e:
f2:6d:13:0b:17:9a:58:70:a7:2b:89:1b:89:06:92:
b8:21:76:dc:ac:db:11:83:25:f9:33:df:50:65:4e:
70:64:39:2b:0c:cd:e6:1f:ad:e7:2c:3d:26:8b:a4:
ef:5b:29:1e:34:47:97:b3:3d:12:26:78:9b:60:dc:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:11:C3:00:CA:35:45:BA:ED:16:83:DE:C2:66:D7:2D:D6:7A:BA:8A
X509v3 Authority Key Identifier:
keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:f8:72:b0:85:8d:10:94:de:ab:0c:7c:71:bd:2b:25:fb:10:
02:b5:b3:03:6b:8b:d4:9b:ef:7a:68:b2:b4:33:82:c0:d6:12:
e0:ed:af:6a:36:11:6f:7f:04:90:a2:0e:f8:12:2b:68:e3:1c:
25:7a:73:3e:5d:8d:44:0a:db:67:c0:43:f4:45:0a:22:c2:2e:
44:85:38:a4:79:56:64:62:39:12:55:86:e2:28:0f:00:f0:52:
64:a6:97:8b:05:74:f6:0b:d0:39:0d:0b:2f:dc:cf:5a:07:f6:
3b:81:ea:7f:28:a3:83:a4:7e:2f:82:cb:4a:37:ef:f3:76:db:
c6:53:70:fb:b1:cb:62:d0:0d:83:f5:6a:53:d2:ac:73:f8:63:
fd:5c:e4:97:8b:ca:af:53:80:56:96:3b:9b:63:31:d9:a4:8b:
ce:11:db:64:9d:14:c2:fc:ca:f8:f9:f1:4d:f7:06:83:64:df:
d7:3d:9b:9f:ae:b4:ee:9b:4f:4b:cd:da:7e:88:f0:87:41:70:
6c:f9:38:40:c8:c2:e6:d3:d2:21:ad:66:9d:8f:79:f6:53:c3:
42:44:79:18:b4:3b:61:20:da:d5:32:55:36:c4:39:51:90:ec:
c1:51:9b:79:2c:c7:e0:3c:bc:f2:c4:59:23:2a:ec:54:da:a6:
53:b7:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:03 2026 by rpki-client