
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json)
Hash identifier: mBZZ5NYQMNnpIOiPLGLZUHSy1sxn26nO1KifolCclkY=
Subject key identifier: 1B:EB:E7:3D:09:4C:68:53:61:87:7D:C3:5D:A0:AF:54:E9:D3:51:C7
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial: 0A92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
Manifest number: 0A7E
Signing time: Wed 20 May 2026 19:38:37 +0000
Manifest this update: Wed 20 May 2026 19:38:37 +0000
Manifest next update: Wed 27 May 2026 19:38:37 +0000
Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: QZNnybR44SA7C1v8WhHOaJLpu6NmRtTph7fFbechzwM=)
2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: +xcD+XJAzMs34Apsat7Enhn+9h/kEqw5O2ozBTodW3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2706 (0xa92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Validity
Not Before: May 20 19:38:37 2026 GMT
Not After : May 27 19:38:37 2026 GMT
Subject: CN=6a0e0dbd-a450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:46:c2:83:dd:22:f9:24:1b:9d:59:87:cf:
35:4a:45:ad:4b:f4:9c:b2:60:86:50:7f:ea:af:d6:
33:73:2f:5b:94:8c:e9:d7:34:df:9b:b6:03:03:8a:
84:98:74:e9:e7:fe:05:90:c5:33:7a:db:11:09:ad:
00:e1:1e:1f:a3:25:12:a9:ac:82:89:bf:c2:b8:9b:
fd:fe:34:f5:ab:5f:2d:bd:83:68:74:89:1a:7a:6d:
73:ef:1e:12:75:44:a4:9d:27:c1:b3:b7:c2:31:0e:
7f:9d:1c:58:97:a5:54:d5:43:c3:8a:17:24:5d:24:
16:04:a6:6f:95:09:2c:b0:0a:61:2b:47:23:e9:c7:
5a:2a:ef:d8:b8:98:f3:30:71:76:fd:c5:9f:ab:aa:
09:8e:f9:86:26:98:a4:0d:fc:18:76:3f:92:75:81:
9b:6d:96:42:fe:67:87:02:1b:db:a5:4f:b6:d1:76:
0e:32:01:6d:38:60:dc:eb:0d:35:1e:88:64:7d:15:
bb:1c:8b:3a:3a:ec:95:18:90:5c:38:31:d6:c7:0e:
ab:54:8c:35:04:e2:5e:0d:98:50:6c:b2:c0:55:64:
a3:9e:92:97:7b:5d:41:20:6f:22:02:fe:9e:9f:6c:
cf:1a:43:e3:08:72:fc:c6:db:81:3d:4b:43:44:09:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EB:E7:3D:09:4C:68:53:61:87:7D:C3:5D:A0:AF:54:E9:D3:51:C7
X509v3 Authority Key Identifier:
keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:5e:dd:17:8d:54:a3:37:a5:5e:81:14:41:e2:94:1f:df:da:
43:a0:8d:e2:c3:56:5d:d2:9f:98:4b:6a:7d:34:de:fa:b3:88:
39:12:f8:c2:ad:02:cd:ed:e4:54:fd:e5:a1:01:d0:42:6a:ed:
99:05:06:ec:19:85:44:dc:5e:21:7a:ff:95:a2:4a:14:6b:a3:
5e:67:4b:54:d8:8e:56:57:a5:66:a0:07:e6:59:42:89:7d:72:
8c:74:de:22:2b:7b:a3:31:cf:64:e0:54:e2:66:1e:7f:e6:20:
22:d4:ae:91:1b:af:57:e0:f6:53:ca:33:11:7a:89:c7:db:4f:
62:81:5d:ab:3c:9e:77:35:1f:39:5d:2c:35:5e:2a:76:9c:0e:
0d:ef:e6:33:7f:bf:1b:bd:88:ad:64:26:19:c6:0c:91:90:62:
e7:61:74:f6:63:e0:56:84:13:15:49:bc:35:46:c5:8b:67:72:
74:71:26:78:5d:83:83:0c:68:57:f3:3e:0c:29:71:d6:6c:ab:
a0:a4:a8:c1:8e:24:a4:0f:59:19:ca:a7:57:da:09:d9:52:31:
75:14:00:c8:e7:6e:ae:75:9c:50:4c:24:e5:30:b5:2d:b4:ad:
c5:fe:a1:da:92:93:fd:d6:d0:e9:c1:85:45:4e:a0:ec:3e:2d:
6d:c8:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:29:01 2026 by rpki-client