
$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json)
Hash identifier: yiK1xeQiAXNifgvDt+sbs+t8DQZBH+bbpgl6ER46gS8=
Subject key identifier: 9A:86:56:B7:6F:9D:80:CC:C1:FE:C8:6C:0E:62:91:86:3C:B3:09:85
Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
Manifest number: 01D4
Signing time: Sun 05 Apr 2026 03:09:06 +0000
Manifest this update: Sun 05 Apr 2026 03:09:05 +0000
Manifest next update: Sun 12 Apr 2026 03:09:05 +0000
Files and hashes: 1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: H9PQJFXMfiYer0InLl2QM2YFbwRW7hb+REqNpN97jsc=)
2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: 0I41scQnlQoDdFvVFzcCFfoeGZFnCbRneF/j1Qm629c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Validity
Not Before: Apr 5 03:09:05 2026 GMT
Not After : Apr 12 03:09:05 2026 GMT
Subject: CN=69d1d251-9022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:95:f5:e7:d5:67:96:fa:1c:ea:7b:b9:c1:
dd:ae:df:d4:75:81:71:65:a2:df:8f:8c:33:c6:1e:
d2:dd:ed:9b:1a:0f:3b:93:c0:a9:e5:e4:6e:60:11:
a8:96:51:66:6a:c3:79:7b:62:72:fb:ec:2a:6c:ba:
c0:aa:3d:4e:a4:e8:f9:4c:d2:3e:cd:c6:12:79:8e:
f0:3f:39:30:0f:57:0b:07:7d:4d:db:88:76:70:09:
58:e3:29:8d:89:72:e8:f3:f5:00:cc:b1:41:e6:a0:
c2:e7:f7:5f:a9:67:a4:3c:c8:3b:80:5a:77:66:e0:
17:ba:67:d2:66:09:eb:c9:80:d6:f0:80:dd:3c:eb:
43:ff:d1:ae:de:0f:ba:e5:cc:2b:05:03:ee:61:a4:
22:1f:d1:95:62:e0:83:3d:e6:1a:6f:a8:65:0e:99:
f8:34:fc:99:46:eb:fd:98:cb:fc:7e:54:11:b1:c7:
1f:78:ac:32:6c:8e:2f:77:5f:8c:18:ff:5b:0f:e6:
a9:90:c6:37:83:6e:00:d7:a3:c1:cf:0d:ac:9d:ae:
b7:76:31:6f:94:a1:90:ba:21:bb:18:2a:49:13:77:
2f:8f:c3:0e:e9:74:2e:b4:cd:04:e8:08:69:eb:c9:
d8:41:0c:d5:77:64:89:4d:86:0d:90:4a:52:b3:07:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:86:56:B7:6F:9D:80:CC:C1:FE:C8:6C:0E:62:91:86:3C:B3:09:85
X509v3 Authority Key Identifier:
keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:f9:f9:b1:a7:f3:89:34:be:6c:53:55:73:48:a2:a9:15:6b:
7d:e0:2a:f7:dd:ce:50:03:2b:a7:de:f3:90:d9:fc:18:5a:7d:
92:ee:db:66:1f:3f:73:e8:d2:cd:ac:25:7d:63:52:ab:97:45:
8b:eb:82:1b:ad:4b:93:64:8d:b4:c6:c6:73:1f:a0:39:63:9f:
de:6e:ea:e2:a5:e8:f7:26:6d:38:1e:89:e2:21:47:59:e6:85:
ea:fa:81:33:68:98:97:e7:31:ab:03:7b:ce:1d:bc:a3:de:b6:
6b:a0:19:01:b6:f6:1d:31:03:1d:cd:bb:77:e7:0c:93:13:52:
23:14:a0:2f:b7:9a:7f:f4:0b:16:fb:37:8c:94:eb:cf:22:1f:
5c:c7:68:da:da:54:2a:f3:b5:e5:70:34:38:99:11:26:ce:9f:
f9:cc:a0:e9:bc:ae:c1:3d:5b:29:00:7f:52:ab:90:9f:6a:13:
19:b3:ae:65:62:96:2b:b9:33:9b:6c:b1:95:bb:55:df:71:28:
26:83:9b:21:16:22:d3:3b:ff:38:bd:45:b4:09:63:40:4c:28:
fc:97:8c:23:0e:ff:b6:e2:f8:1b:92:c1:e6:4a:65:77:42:12:
b5:f1:45:84:e4:00:e4:df:2c:6b:24:75:ac:17:6d:0c:35:d7:
37:d5:f1:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYwNEIxMTAvBgNVBAUTKEExNEJEQUEzMTU3NkE2MzY3QTBCNUMzQUNBQjkxQzRF
OUYzMTE4RUYwHhcNMjYwNDA1MDMwOTA1WhcNMjYwNDEyMDMwOTA1WjAYMRYwFAYD
VQQDEw02OWQxZDI1MS05MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAutKV9efVZ5b6HOp7ucHdrt/UdYFxZaLfj4wzxh7S3e2bGg87k8Cp5eRuYBGo
llFmasN5e2Jy++wqbLrAqj1OpOj5TNI+zcYSeY7wPzkwD1cLB31N24h2cAlY4ymN
iXLo8/UAzLFB5qDC5/dfqWekPMg7gFp3ZuAXumfSZgnryYDW8IDdPOtD/9Gu3g+6
5cwrBQPuYaQiH9GVYuCDPeYab6hlDpn4NPyZRuv9mMv8flQRsccfeKwybI4vd1+M
GP9bD+apkMY3g24A16PBzw2sna63djFvlKGQuiG7GCpJE3cvj8MO6XQutM0E6Ahp
68nYQQzVd2SJTYYNkEpSswfsiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqGVrdv
nYDMwf7IbA5ikYY8swmFMB8GA1UdIwQYMBaAFKFL2qMVdqY2egtcOsq5HE6fMRjv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjA0Qi80MUMwMTM1QzZE
QUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBqWjZDMXc2eXJrY1RwOHhH
TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29VdmFveFYycGpaNkMxdzZ5cmtjVHA4eEdPOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjA0Qi80MUMwMTM1QzZEQUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBq
WjZDMXc2eXJrY1RwOHhHTzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFPn5safziTS+bFNVc0iiqRVrfeAq993OUAMrp97zkNn8GFp9ku7bZh8/c+jS
zawlfWNSq5dFi+uCG61Lk2SNtMbGcx+gOWOf3m7q4qXo9yZtOB6J4iFHWeaF6vqB
M2iYl+cxqwN7zh28o962a6AZAbb2HTEDHc27d+cMkxNSIxSgL7eaf/QLFvs3jJTr
zyIfXMdo2tpUKvO15XA0OJkRJs6f+cyg6byuwT1bKQB/UquQn2oTGbOuZWKWK7kz
m2yxlbtV33EoJoObIRYi0zv/OL1FtAljQEwo/JeMIw7/tuL4G5LB5kpld0IStfFF
hOQA5N8sayR1rBdtDDXXN9XxbA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:01 2026 by rpki-client