
$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
File: OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json)
Hash identifier: 7WuJ/LX2HT8vBqXIjFWS2o+EEI1iKfKQqzbt0kG12Do=
Subject key identifier: 10:88:12:83:40:7F:3F:F7:A1:C3:A5:94:FE:C4:3B:0F:AA:AF:DE:BF
Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07
Certificate issuer: /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
Certificate serial: 13D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
Manifest number: 2547
Signing time: Wed 20 May 2026 16:56:02 +0000
Manifest this update: Wed 20 May 2026 16:56:02 +0000
Manifest next update: Wed 27 May 2026 16:56:02 +0000
Files and hashes: 1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: aio6OdCWsh8xq8HJBK0Au/R5+L1T9eocB5Tgwg0IWPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl
rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5079 (0x13d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
Validity
Not Before: May 20 16:56:02 2026 GMT
Not After : May 27 16:56:02 2026 GMT
Subject: CN=6a0de7a2-2ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:e8:99:0f:80:cd:3d:39:8e:09:1d:e3:a3:
c2:14:80:c5:0b:11:9e:e6:21:45:67:ff:2c:75:a7:
11:73:4d:1c:d4:eb:91:27:a9:ba:c5:95:1a:3b:33:
6d:e7:4d:aa:9e:24:85:98:00:48:e9:a2:5f:78:d8:
c0:5e:5b:75:09:1b:9d:78:bf:a0:51:74:1b:73:84:
d8:96:20:cf:c4:09:74:7e:4b:15:1f:36:3d:92:90:
09:4a:7d:97:bd:12:37:8e:e5:13:8c:19:aa:40:1f:
45:29:4f:83:03:87:c6:ec:ee:8f:ce:38:04:d0:b6:
3e:3d:2a:0f:bb:35:4b:d3:42:84:59:49:42:d9:17:
f4:1d:1c:d0:7b:42:12:d9:40:69:5c:13:24:9e:87:
86:d3:bc:67:f7:88:c0:9d:c9:84:3e:7b:0b:c3:b5:
2d:9d:63:b8:cf:a4:fe:62:ac:fc:14:23:d1:bf:58:
57:19:12:78:67:f3:11:95:ad:63:49:88:1a:ec:4b:
84:52:06:6e:d0:5a:d2:8d:1c:73:75:13:68:8f:c6:
6c:1d:66:27:7b:b9:b1:e6:12:a6:19:29:7a:71:4c:
99:3c:36:2b:34:29:68:8c:66:24:63:a6:ea:59:d1:
c8:29:77:4b:35:e7:a3:49:cb:75:bb:fe:3f:6b:04:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:88:12:83:40:7F:3F:F7:A1:C3:A5:94:FE:C4:3B:0F:AA:AF:DE:BF
X509v3 Authority Key Identifier:
keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f0:73:59:e8:9b:98:e2:3c:bc:76:07:f3:fb:5f:0b:24:46:c0:
f9:31:3b:8c:0f:21:5e:2b:fa:9e:62:6b:13:63:2e:de:0b:43:
d2:6e:9e:45:5c:75:99:1b:dd:4b:5e:1e:13:ce:e0:32:ad:3a:
ff:a0:cf:66:c1:72:66:26:2c:35:dc:8e:ce:9f:a9:08:d8:4e:
bd:11:85:73:85:d7:24:a1:b7:aa:51:4a:e9:d7:b0:b7:a7:cc:
df:43:c1:41:68:9c:5d:2e:81:97:d9:ce:1d:e6:a9:23:1e:d1:
d1:0d:0d:4d:f4:f4:5e:13:40:e8:53:0f:60:4e:67:d0:56:55:
a5:9f:2e:2f:de:53:98:b1:95:15:be:69:3e:bc:d0:35:d8:09:
03:56:57:4a:78:76:55:96:3c:24:b1:6f:50:b0:2a:7d:75:25:
93:c6:d7:77:a0:e3:d5:22:8f:03:8a:ab:09:55:55:b7:ab:a8:
da:a2:ae:5f:f9:b9:3a:38:e7:98:0c:ad:6d:e4:85:df:1d:ae:
13:29:16:1e:30:4c:1c:cf:42:a4:e9:7f:66:2e:40:8b:a3:51:
a7:7f:b5:32:31:22:6f:36:47:05:af:f7:a9:a9:33:2e:c9:ce:
8a:21:42:e1:78:e0:78:3f:a9:c5:9e:c3:75:8c:9f:88:34:cb:
80:70:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:07 2026 by rpki-client