
$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
File: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json)
Hash identifier: a7PZDrjI6vi/W+6BikYDjk2m8crdUZAVLulpFOprjqw=
Subject key identifier: 4B:FD:70:BE:C8:55:9F:9A:9F:43:B3:F6:BA:BD:21:5D:D7:12:A9:EB
Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
Manifest number: 0198
Signing time: Fri 17 Jul 2026 05:23:12 +0000
Manifest this update: Fri 17 Jul 2026 05:23:12 +0000
Manifest next update: Fri 24 Jul 2026 05:23:12 +0000
Files and hashes: 1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: S/JCsGhbB2ErfumHUajhzUWEuR1SwswfWSBYyaTuHzw=)
2: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: luNzOp9WQ2A7sNDC/iK8zbbGEM1p3MEBvj7zZ4BWvgA=)
3: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: 7slcloQAeT5wyJqAjye83Okm4uzNEuS1+WoZpKS16D8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Validity
Not Before: Jul 17 05:23:12 2026 GMT
Not After : Jul 24 05:23:12 2026 GMT
Subject: CN=6a59bc40-7a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:38:08:db:57:31:81:7f:6b:fc:cf:76:27:
a6:21:26:b8:7e:09:78:f0:95:07:75:2b:47:38:83:
c4:45:d3:4d:c9:b5:10:f3:b3:e6:60:e1:7e:9a:e7:
22:b9:de:6f:58:a1:8a:74:e0:e1:92:25:1b:51:ac:
fa:71:1c:08:26:00:89:5c:64:e7:d6:4b:00:89:37:
2f:6a:16:80:e4:62:d2:72:3b:b7:65:f6:c7:5f:da:
2e:12:90:1d:06:f1:1a:e6:c3:fa:2c:46:47:30:82:
26:c7:48:8e:1e:7f:28:e1:11:77:f0:76:86:01:27:
fe:80:8e:89:89:a4:bf:3e:6e:1d:d9:6d:25:a0:6e:
38:bd:4c:04:41:b6:94:74:9e:71:74:b7:63:76:e9:
a6:77:f8:3b:3d:bd:af:47:2f:49:19:df:7c:f6:1a:
5c:02:c8:8f:64:6f:48:01:a8:30:24:fb:90:ab:fd:
4c:ab:bb:c4:1b:5c:3a:79:c0:f4:1b:ad:26:70:eb:
bc:d6:30:7a:89:da:a6:6d:09:ad:99:2b:3a:88:f2:
ed:b4:de:0c:99:b1:17:10:00:f8:bf:9a:7a:7b:b2:
29:82:9a:fb:59:b7:8d:8d:0d:0e:0e:8a:ef:54:a9:
3c:e0:09:8e:2c:37:7f:c4:a9:15:0a:5f:db:06:1f:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:70:BE:C8:55:9F:9A:9F:43:B3:F6:BA:BD:21:5D:D7:12:A9:EB
X509v3 Authority Key Identifier:
keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:29:f4:c7:ab:b8:63:c5:5f:b0:2c:7f:23:6b:89:9a:93:31:
9c:c5:68:e7:bc:ee:14:5f:3d:a3:58:51:4c:89:21:f2:d0:46:
e5:d7:a4:5a:39:3a:6f:27:67:88:45:b5:dc:35:56:49:52:8c:
b1:89:5d:60:f4:28:e7:07:50:4a:05:c2:b4:81:9f:ea:fb:cd:
c1:3c:a9:84:c6:76:e2:be:59:92:c6:ec:ec:e1:3b:4a:37:69:
ea:6a:e7:a1:88:ab:16:e6:41:c1:a8:ec:45:7f:99:49:49:7a:
b9:d3:aa:5b:4c:4e:ff:2d:41:8a:c8:b6:b5:bd:a0:ab:5e:64:
ef:f0:db:15:2c:dc:77:d0:cf:dd:51:dd:c6:fc:4c:90:91:a8:
5a:00:72:75:39:2d:e8:1e:b8:8e:82:1e:8a:09:fe:b9:8a:d5:
0f:83:e6:f9:d1:49:14:2f:a0:9e:e2:ed:52:50:13:df:86:aa:
3a:3c:55:fc:17:bb:15:27:82:00:a0:89:6a:d1:71:42:14:cb:
ba:0d:1d:b3:df:a8:2c:9a:66:a5:fb:4a:fb:da:f1:59:11:4b:
bf:30:8f:65:c5:17:7d:d6:47:51:f2:9e:57:ce:9b:f3:5e:1a:
94:2f:0d:27:46:e3:50:8f:24:c6:07:17:a4:5c:bd:b2:f2:c1:
04:ae:84:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg3OUExMTAvBgNVBAUTKDM5OUE1RTE3RDlDQTQzQjZDMzNBQzMzMDIwNkRDQkRE
OTM1RTc4NzEwHhcNMjYwNzE3MDUyMzEyWhcNMjYwNzI0MDUyMzEyWjAYMRYwFAYD
VQQDEw02YTU5YmM0MC03YTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx5o4CNtXMYF/a/zPdiemISa4fgl48JUHdStHOIPERdNNybUQ87PmYOF+muci
ud5vWKGKdODhkiUbUaz6cRwIJgCJXGTn1ksAiTcvahaA5GLScju3ZfbHX9ouEpAd
BvEa5sP6LEZHMIImx0iOHn8o4RF38HaGASf+gI6JiaS/Pm4d2W0loG44vUwEQbaU
dJ5xdLdjdummd/g7Pb2vRy9JGd989hpcAsiPZG9IAagwJPuQq/1Mq7vEG1w6ecD0
G60mcOu81jB6idqmbQmtmSs6iPLttN4MmbEXEAD4v5p6e7Ipgpr7WbeNjQ0ODorv
VKk84AmOLDd/xKkVCl/bBh8MSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEv9cL7I
VZ+an0Oz9rq9IV3XEqnrMB8GA1UdIwQYMBaAFDmaXhfZykO2wzrDMCBty92TXnhx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODc5QS9CNjcwMTczQzFD
OUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3YkRPc013SUczTDNaTmVl
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09acGVGOW5LUTdiRE9zTXdJRzNMM1pOZWVIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODc5QS9CNjcwMTczQzFDOUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3
YkRPc013SUczTDNaTmVlSEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADyn0x6u4Y8VfsCx/I2uJmpMxnMVo57zuFF89o1hRTIkh8tBG5dekWjk6bydn
iEW13DVWSVKMsYldYPQo5wdQSgXCtIGf6vvNwTyphMZ24r5Zksbs7OE7Sjdp6mrn
oYirFuZBwajsRX+ZSUl6udOqW0xO/y1Bisi2tb2gq15k7/DbFSzcd9DP3VHdxvxM
kJGoWgBydTkt6B64joIeign+uYrVD4Pm+dFJFC+gnuLtUlAT34aqOjxV/Be7FSeC
AKCJatFxQhTLug0ds9+oLJpmpftK+9rxWRFLvzCPZcUXfdZHUfKeV86b814alC8N
J0bjUI8kxgcXpFy9svLBBK6Eug==
-----END CERTIFICATE-----
Generated at Sat Jul 18 09:27:14 2026 by rpki-client