
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json)
Hash identifier: 6DBvoWNadrDgeLohnEw6viF44ZWQQgr0+OWeCFKtB54=
Subject key identifier: 85:BB:61:8C:4C:4F:09:8F:8C:DD:84:32:B5:75:32:60:44:8A:E0:83
Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
Manifest number: 0219
Signing time: Fri 21 Aug 2026 02:58:25 +0000
Manifest this update: Fri 21 Aug 2026 02:58:25 +0000
Manifest next update: Fri 28 Aug 2026 02:58:25 +0000
Files and hashes: 1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: m7qSQScXxMl/RcnEeJPkkDkd+6vXp5JEPGWXrX80IgI=)
2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: 0I41scQnlQoDdFvVFzcCFfoeGZFnCbRneF/j1Qm629c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Validity
Not Before: Aug 21 02:58:25 2026 GMT
Not After : Aug 28 02:58:25 2026 GMT
Subject: CN=6a87bed1-a81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:32:48:b7:a0:13:c9:57:4d:19:b8:6e:c2:af:
af:da:6b:1b:0c:d8:e8:9f:e3:0e:3f:39:cb:f5:b6:
d5:6c:d6:c0:7c:1c:61:06:91:85:14:82:45:a8:c9:
f1:24:64:d4:d1:8d:e0:8a:b1:26:d3:07:d7:c1:d8:
7f:57:49:e6:c6:35:6b:1b:d2:99:3f:0a:7d:83:68:
d2:d0:5a:fc:e5:f0:1b:5c:c2:28:55:4e:cd:a8:ff:
b4:15:4f:a1:82:25:2d:bc:71:30:21:73:47:49:b0:
e7:ed:3d:51:ac:c0:f5:54:4d:a3:21:6a:08:17:93:
b0:5c:b3:43:e3:c7:b3:67:fb:77:13:52:30:c8:50:
93:45:cc:a7:5e:b5:da:62:d8:2e:7c:a9:95:54:52:
4e:aa:88:bc:0a:d0:08:ea:92:97:bd:6c:ff:f1:1c:
13:8d:b6:c5:71:6a:36:c3:ea:18:c8:c2:2a:c0:fe:
46:8d:12:45:05:e4:b0:bf:49:a4:ba:a2:d2:2c:fc:
b4:34:a5:05:5b:74:10:9f:4a:57:ca:a5:ce:64:29:
aa:79:d0:46:8d:91:f9:85:67:81:c6:73:fb:5a:26:
0f:a6:e5:3c:58:03:16:61:ae:a6:02:f3:01:52:c2:
3d:49:4c:a5:50:8d:4f:af:bc:69:6d:dd:8f:a5:82:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BB:61:8C:4C:4F:09:8F:8C:DD:84:32:B5:75:32:60:44:8A:E0:83
X509v3 Authority Key Identifier:
keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:59:14:01:3e:54:2d:5e:0a:f7:d6:ae:9e:c5:83:90:99:d7:
03:e5:b6:4e:6e:6e:69:3e:d8:29:6e:4a:57:0d:bc:d4:36:04:
7e:1d:a2:76:a6:44:6d:f6:0c:56:11:35:23:a5:a6:a8:8f:19:
28:28:c8:c7:80:42:85:dd:c4:72:a5:07:d1:30:22:ec:b6:e8:
fc:2f:f8:02:0c:7c:aa:4c:8b:23:04:91:10:77:ca:b5:e2:f2:
e1:ba:bb:7c:9d:db:bf:ef:fb:98:a0:64:1e:f7:5f:ae:2b:e9:
6f:ce:a7:86:8d:34:16:36:bc:70:7f:f9:36:cb:fa:e7:2a:ab:
ed:78:60:5d:4d:65:55:17:19:6a:63:c1:88:40:20:03:26:41:
3b:66:b7:3f:dc:f8:9b:43:da:89:18:56:e2:0f:9d:2c:d5:6f:
e3:72:fe:63:0f:14:e9:4f:ff:71:ca:10:f2:82:51:f5:28:d7:
36:5d:42:7c:d8:f4:36:c4:7a:72:cb:10:4f:72:5b:2b:40:a8:
e9:2c:05:a4:a7:0d:eb:6e:ec:18:01:89:1b:37:a9:40:c1:8e:
c7:5a:ce:d8:b5:2b:0d:c2:c9:cc:b2:84:ce:5f:4a:a6:c9:fd:
01:94:0e:6e:7b:2c:50:cb:b3:71:8b:49:1e:3e:b1:04:9f:7a:
4d:ba:ff:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYwNEIxMTAvBgNVBAUTKEExNEJEQUEzMTU3NkE2MzY3QTBCNUMzQUNBQjkxQzRF
OUYzMTE4RUYwHhcNMjYwODIxMDI1ODI1WhcNMjYwODI4MDI1ODI1WjAYMRYwFAYD
VQQDEw02YTg3YmVkMS1hODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5DJIt6ATyVdNGbhuwq+v2msbDNjon+MOPznL9bbVbNbAfBxhBpGFFIJFqMnx
JGTU0Y3girEm0wfXwdh/V0nmxjVrG9KZPwp9g2jS0Fr85fAbXMIoVU7NqP+0FU+h
giUtvHEwIXNHSbDn7T1RrMD1VE2jIWoIF5OwXLND48ezZ/t3E1IwyFCTRcynXrXa
YtgufKmVVFJOqoi8CtAI6pKXvWz/8RwTjbbFcWo2w+oYyMIqwP5GjRJFBeSwv0mk
uqLSLPy0NKUFW3QQn0pXyqXOZCmqedBGjZH5hWeBxnP7WiYPpuU8WAMWYa6mAvMB
UsI9SUylUI1Pr7xpbd2PpYJgYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIW7YYxM
TwmPjN2EMrV1MmBEiuCDMB8GA1UdIwQYMBaAFKFL2qMVdqY2egtcOsq5HE6fMRjv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjA0Qi80MUMwMTM1QzZE
QUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBqWjZDMXc2eXJrY1RwOHhH
TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29VdmFveFYycGpaNkMxdzZ5cmtjVHA4eEdPOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjA0Qi80MUMwMTM1QzZEQUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBq
WjZDMXc2eXJrY1RwOHhHTzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPlkUAT5ULV4K99aunsWDkJnXA+W2Tm5uaT7YKW5KVw281DYEfh2idqZEbfYM
VhE1I6WmqI8ZKCjIx4BChd3EcqUH0TAi7Lbo/C/4Agx8qkyLIwSREHfKteLy4bq7
fJ3bv+/7mKBkHvdfrivpb86nho00Fja8cH/5Nsv65yqr7XhgXU1lVRcZamPBiEAg
AyZBO2a3P9z4m0PaiRhW4g+dLNVv43L+Yw8U6U//ccoQ8oJR9SjXNl1CfNj0NsR6
cssQT3JbK0Co6SwFpKcN627sGAGJGzepQMGOx1rO2LUrDcLJzLKEzl9Kpsn9AZQO
bnssUMuzcYtJHj6xBJ96Tbr/7Q==
-----END CERTIFICATE-----
Generated at Sat Aug 22 00:53:42 2026 by rpki-client