
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
File: O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft (raw, json)
Hash identifier: 1mbIUUhEFbnwlmMN8dSY1kpdc+GKFG7zELipJ2V1nYQ=
Subject key identifier: 09:C4:2B:2C:F7:F7:FB:DE:8E:B7:A6:E3:CA:27:11:39:FE:47:C1:5D
Authority key identifier: 3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC
Certificate issuer: /CN=A916D2D2/serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
Certificate serial: 0BAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
Manifest number: 0BA1
Signing time: Wed 20 May 2026 19:05:49 +0000
Manifest this update: Wed 20 May 2026 19:05:49 +0000
Manifest next update: Wed 27 May 2026 19:05:49 +0000
Files and hashes: 1: O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl (hash: GDIzA42M4w6W+8TAtrMczObNwEpzB97La6UUgOZrk+k=)
2: E174463E4BD411EAAD10A710C4F9AE02.roa (hash: Fx0k0TQfkTjEx5QYzTZXVEk1I1QDmv0PoZpDBUY4GRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl
rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2987 (0xbab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D2D2, serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
Validity
Not Before: May 20 19:05:49 2026 GMT
Not After : May 27 19:05:49 2026 GMT
Subject: CN=6a0e060d-a884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:85:88:75:61:47:a8:17:0a:8d:bb:10:fc:
3a:eb:ff:15:73:22:ee:13:08:27:62:8f:94:16:be:
bc:b7:72:e9:33:39:66:0f:a6:33:e0:97:61:ef:07:
88:e8:72:2c:80:64:80:ed:42:c8:90:a3:b3:53:a3:
c7:fc:82:a3:2d:77:30:ee:38:ba:5f:10:c2:d1:4c:
e1:d1:54:da:5c:e0:fe:44:30:c7:08:99:a0:2a:41:
62:d6:ef:67:22:de:f6:08:ce:d9:e7:92:dc:49:3b:
dd:f2:e6:1d:f0:76:ae:1c:04:ca:59:fd:b0:d5:a0:
85:92:ff:f5:78:84:92:19:11:0e:94:10:98:46:1b:
88:46:fc:21:e4:53:e2:e7:e8:3e:d4:38:05:35:03:
4c:03:7e:7f:8b:47:14:67:11:6f:53:06:0a:61:51:
38:97:99:10:e6:aa:a7:9c:d9:85:52:9b:4b:6d:b5:
b4:23:94:d4:43:d0:38:7f:fb:c0:b3:cf:a9:b5:36:
8d:00:ed:d4:a4:40:3d:2e:4b:37:7c:2c:93:66:8f:
47:07:e8:3e:a3:73:bc:5b:1d:93:71:ba:60:a9:98:
b2:86:17:5d:9f:b8:db:dd:c8:d5:94:c4:bd:f3:4f:
91:fb:5f:12:09:8a:55:4b:5e:cb:05:de:73:83:b5:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:2B:2C:F7:F7:FB:DE:8E:B7:A6:E3:CA:27:11:39:FE:47:C1:5D
X509v3 Authority Key Identifier:
keyid:3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:22:85:8b:84:19:4d:cb:e1:92:bc:d5:59:08:d3:b3:18:
c9:55:20:1e:15:e3:7f:23:96:7f:6c:e1:8f:9b:fb:22:c8:34:
93:b1:87:9b:cb:67:90:3c:e5:d3:4e:be:8b:44:e8:fa:08:ea:
05:0b:a9:f9:d2:72:dc:51:32:cd:99:ae:bf:f6:46:41:df:8c:
19:5d:ee:af:12:9c:e3:26:42:e9:c9:9f:82:b0:4e:45:fa:e2:
06:50:8b:78:42:14:89:fe:6b:b4:75:6e:45:e2:b5:b5:54:f6:
88:78:5a:61:2b:fa:11:3d:14:56:70:c9:4b:97:66:c4:ba:0c:
bb:a5:80:63:5d:01:d5:7c:67:8a:19:11:f2:61:5f:1e:4a:6d:
ec:d6:7e:1d:06:ab:7a:4b:32:a5:3f:a4:32:d1:57:3f:64:b9:
c9:7c:b0:ec:de:44:41:45:ec:f0:8c:96:14:6b:a7:60:a0:02:
b7:16:05:3a:37:ca:ae:8b:60:a8:9d:93:bc:2c:bc:45:ee:0c:
f7:ff:53:4f:01:34:90:c6:c3:69:2e:ec:0b:87:bd:98:38:47:
f4:91:a8:8f:b7:41:a4:12:9a:92:a3:a3:1c:f3:7f:9f:b3:9f:
4c:de:38:68:bb:11:e1:bb:8f:5a:b5:92:73:84:3e:e2:a6:0e:
39:f9:13:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:43 2026 by rpki-client