
$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
File: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json)
Hash identifier: P9b911Pm4ueYeI3QF5mEJzlmRHMbBnHpkbMxpPSpUEA=
Subject key identifier: 07:DB:AC:C0:39:00:A6:3C:62:E6:EB:A4:7F:A5:4B:64:6E:C7:A1:CD
Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
Manifest number: 0165
Signing time: Sun 05 Apr 2026 04:22:31 +0000
Manifest this update: Sun 05 Apr 2026 04:22:31 +0000
Manifest next update: Sun 12 Apr 2026 04:22:31 +0000
Files and hashes: 1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: 0g3xjKjJlh0bhGLzJB7gmEItXpb6cRcDPxSaAXOMg4w=)
2: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: 7slcloQAeT5wyJqAjye83Okm4uzNEuS1+WoZpKS16D8=)
3: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: luNzOp9WQ2A7sNDC/iK8zbbGEM1p3MEBvj7zZ4BWvgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Validity
Not Before: Apr 5 04:22:31 2026 GMT
Not After : Apr 12 04:22:31 2026 GMT
Subject: CN=69d1e387-62d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:93:d0:61:f8:c1:63:d6:a7:4a:5e:48:ef:
db:02:d5:71:7e:99:85:94:75:75:b7:6b:0d:11:87:
63:5e:ff:b9:0f:66:21:5c:02:c2:85:6a:e9:07:74:
08:df:d1:82:b2:c9:ec:44:ba:d2:ee:ab:bd:0c:16:
c0:a2:0f:28:99:f3:67:31:f1:e2:0c:d4:ad:8c:f2:
b3:c0:ff:88:75:58:f4:de:ac:8a:09:28:84:7e:12:
11:51:64:82:bd:69:24:e4:e9:ba:89:a3:f8:8b:8f:
f9:49:f3:d9:81:ec:b0:c3:6b:56:97:88:c0:d7:e3:
dd:58:d9:f1:05:7e:bc:e4:75:40:35:04:ed:49:a7:
bc:ee:ed:a6:3c:10:78:c7:9e:68:93:03:08:80:09:
74:da:f9:f6:5c:53:11:1f:4f:bc:e7:fa:b8:3c:b4:
71:b0:41:ae:99:7d:50:b7:1a:ac:ea:90:b2:d3:94:
90:d2:2d:cc:0b:f3:6f:6b:5a:51:a2:b2:ae:d1:16:
5b:fc:85:c0:56:85:0b:88:46:17:7b:b4:e6:87:6e:
53:13:ea:83:2f:4c:4d:c9:0b:d6:fb:62:24:5b:81:
53:0c:95:eb:ab:2d:73:19:fc:6f:9c:f8:0d:7f:0b:
6a:6d:4b:25:ff:49:e0:30:c2:80:32:1c:46:67:29:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DB:AC:C0:39:00:A6:3C:62:E6:EB:A4:7F:A5:4B:64:6E:C7:A1:CD
X509v3 Authority Key Identifier:
keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:6f:99:fc:db:0e:11:7b:2f:db:ce:7d:2d:31:1a:3b:f0:21:
c3:31:72:99:d3:4f:01:89:d7:d8:d5:f2:72:78:0c:dc:ba:3b:
86:14:94:81:cf:36:8f:87:b0:ac:6c:bd:83:75:8b:f4:9a:fe:
a2:49:86:f2:c8:46:4b:8b:a2:c3:74:24:a6:ff:8c:ae:ec:4f:
d3:b7:a0:90:08:70:4e:8a:bd:39:1b:52:ea:db:95:ef:7f:5f:
83:2f:8c:39:92:b0:71:40:99:9e:fe:45:ea:07:ca:ed:f1:c7:
ec:3c:76:13:03:70:37:52:4e:14:e6:c8:5d:5e:65:08:70:c5:
2a:7d:62:71:d9:be:ae:9a:f0:13:83:2e:82:ee:f0:52:3e:4a:
cf:25:73:8e:08:2e:38:f4:65:cb:c3:54:a6:a3:2e:19:4f:e2:
2e:2f:73:61:65:bd:2c:1a:e1:1d:7c:d7:e8:1f:91:fa:7a:5b:
12:c2:e3:0b:7b:43:d6:57:02:c2:dd:ed:0b:7e:08:bf:0f:e0:
d2:de:d1:64:f6:51:8a:c7:56:22:23:7c:09:fa:50:93:b5:e9:
1a:28:bd:bc:a1:8a:2f:fc:e9:bf:f0:9c:42:21:4e:cb:6c:3b:
2c:e4:79:df:42:59:f7:47:8f:4a:e7:fc:0f:29:fc:4b:c6:63:
3b:ef:40:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg3OUExMTAvBgNVBAUTKDM5OUE1RTE3RDlDQTQzQjZDMzNBQzMzMDIwNkRDQkRE
OTM1RTc4NzEwHhcNMjYwNDA1MDQyMjMxWhcNMjYwNDEyMDQyMjMxWjAYMRYwFAYD
VQQDEw02OWQxZTM4Ny02MmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvM2T0GH4wWPWp0peSO/bAtVxfpmFlHV1t2sNEYdjXv+5D2YhXALChWrpB3QI
39GCssnsRLrS7qu9DBbAog8omfNnMfHiDNStjPKzwP+IdVj03qyKCSiEfhIRUWSC
vWkk5Om6iaP4i4/5SfPZgeyww2tWl4jA1+PdWNnxBX685HVANQTtSae87u2mPBB4
x55okwMIgAl02vn2XFMRH0+85/q4PLRxsEGumX1Qtxqs6pCy05SQ0i3MC/Nva1pR
orKu0RZb/IXAVoULiEYXe7Tmh25TE+qDL0xNyQvW+2IkW4FTDJXrqy1zGfxvnPgN
fwtqbUsl/0ngMMKAMhxGZym5hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfbrMA5
AKY8YubrpH+lS2Rux6HNMB8GA1UdIwQYMBaAFDmaXhfZykO2wzrDMCBty92TXnhx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODc5QS9CNjcwMTczQzFD
OUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3YkRPc013SUczTDNaTmVl
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09acGVGOW5LUTdiRE9zTXdJRzNMM1pOZWVIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODc5QS9CNjcwMTczQzFDOUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3
YkRPc013SUczTDNaTmVlSEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhG+Z/NsOEXsv2859LTEaO/AhwzFymdNPAYnX2NXycngM3Lo7hhSUgc82j4ew
rGy9g3WL9Jr+okmG8shGS4uiw3Qkpv+MruxP07egkAhwToq9ORtS6tuV739fgy+M
OZKwcUCZnv5F6gfK7fHH7Dx2EwNwN1JOFObIXV5lCHDFKn1icdm+rprwE4Mugu7w
Uj5KzyVzjgguOPRly8NUpqMuGU/iLi9zYWW9LBrhHXzX6B+R+npbEsLjC3tD1lcC
wt3tC34Ivw/g0t7RZPZRisdWIiN8CfpQk7XpGii9vKGKL/zpv/CcQiFOy2w7LOR5
30JZ90ePSuf8Dyn8S8ZjO+9APw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:49 2026 by rpki-client