
$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json)
Hash identifier: xaKD/lgHhyo5O/gJTVJvj2ZMOxvs25eJaH6aMZ8Eqk0=
Subject key identifier: E1:D8:55:41:56:9D:31:73:3B:99:38:9C:2B:90:B2:5B:FF:45:5F:06
Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
Manifest number: 01EB
Signing time: Thu 21 May 2026 03:26:44 +0000
Manifest this update: Thu 21 May 2026 03:26:44 +0000
Manifest next update: Thu 28 May 2026 03:26:44 +0000
Files and hashes: 1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: nEL1WhGhSXBJ3sDl5HddtqWWHuks95nAyxsgeUG2NuU=)
2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: 0I41scQnlQoDdFvVFzcCFfoeGZFnCbRneF/j1Qm629c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Validity
Not Before: May 21 03:26:44 2026 GMT
Not After : May 28 03:26:44 2026 GMT
Subject: CN=6a0e7b74-258e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:e3:92:a3:93:84:6a:18:3c:e9:8a:3a:3d:
f6:53:36:c8:a8:d5:c2:bb:0f:9f:df:d5:28:31:44:
1a:94:06:36:cc:96:16:1d:0c:73:47:bd:13:24:53:
76:5b:98:4e:61:47:eb:65:2b:7d:5d:8f:41:98:f3:
50:22:6d:20:33:d3:62:a4:4a:29:a9:a0:fe:24:8a:
01:8a:46:7a:30:f2:c4:9f:b3:d9:b8:c3:c5:dd:21:
7e:4e:38:76:96:1e:7c:c0:ee:ca:68:0e:d2:a7:f0:
00:5e:73:c8:8a:67:f3:da:e1:8a:4b:12:16:1c:31:
65:0c:8b:d6:22:8c:8e:71:34:1e:30:82:f8:f9:7b:
a1:c1:85:23:17:28:33:cf:5f:b7:19:f1:01:13:80:
0d:c5:19:ea:7e:02:86:8a:3a:14:7a:89:ae:21:e2:
af:1a:32:99:ce:aa:68:e0:7a:aa:42:ca:5e:e4:08:
72:c6:87:81:ed:2f:32:94:a1:a3:11:11:97:b7:f1:
a0:e4:e6:32:4f:25:c6:61:70:8e:77:21:c3:70:06:
ed:3e:87:c3:b9:c6:b5:2a:84:2f:99:55:ec:18:db:
2c:e7:e9:48:5d:70:d9:89:6a:7a:13:db:a1:9e:29:
ed:fa:e1:d3:c7:78:48:1b:12:32:56:cf:07:f8:8c:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D8:55:41:56:9D:31:73:3B:99:38:9C:2B:90:B2:5B:FF:45:5F:06
X509v3 Authority Key Identifier:
keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:4f:09:1f:50:61:39:6c:4e:ac:a3:3b:54:19:ce:af:5f:61:
40:01:c0:5c:51:b2:e0:1d:20:5b:92:70:f3:57:8d:22:25:5a:
e7:b8:a5:67:06:90:71:eb:35:1c:ad:9e:ca:f6:23:74:b8:c4:
29:29:9a:7e:d9:f6:59:bc:77:d2:ba:bd:08:a4:b4:ca:d4:2f:
3c:ca:ab:c8:23:81:17:fc:40:f2:b0:50:41:a5:27:8d:74:89:
f3:1b:10:88:57:ff:63:6d:36:17:f3:dd:ca:94:b6:0a:8d:21:
32:d3:8a:f2:50:8f:c5:f2:b6:22:21:43:14:c3:f7:70:b5:05:
62:82:95:04:d5:24:aa:cf:a0:80:49:f0:7b:5e:f3:28:63:8d:
ad:73:1b:5c:96:98:23:38:c3:c0:77:c3:d0:34:93:42:54:61:
d4:d5:0d:ca:d0:0c:04:b3:fd:b7:51:5d:06:67:5f:51:a4:a7:
ee:c6:40:af:18:14:5f:8b:2d:ff:9d:4f:b1:51:9d:91:64:0d:
e7:6e:a0:29:69:75:6b:2f:a9:9d:12:55:2d:1d:da:ef:0c:3d:
69:bc:2c:ba:3d:64:86:8d:82:ab:83:66:55:2a:31:dc:87:e9:
73:8f:45:dd:f9:d2:74:a0:14:d0:17:a3:c2:1a:f4:58:5c:43:
b4:2b:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:07 2026 by rpki-client