
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
File: OT6njk2TI25QcfuK_61B1iQmql0.mft (raw, json)
Hash identifier: XKTvh86qEJqR9QNrbHufc+zG/5mWXdWT+/sjKGogQiI=
Subject key identifier: 68:0C:AE:14:59:71:A3:C3:4A:5E:E5:BC:BC:A0:FA:DC:40:E5:9D:E7
Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D
Certificate issuer: /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
Manifest number: 011C
Signing time: Wed 27 May 2026 03:33:35 +0000
Manifest this update: Wed 27 May 2026 03:33:34 +0000
Manifest next update: Wed 03 Jun 2026 03:33:34 +0000
Files and hashes: 1: OT6njk2TI25QcfuK_61B1iQmql0.crl (hash: NtlZDC9F76mwGgKRRRcw2F/Hfts9Bt+pGLsFx6oXgPg=)
2: 3CFE7680BC5C11EFB951FD4FC4F9AE02.roa (hash: T9cYe9ZeR41yqY0Knl/5FUBYrilHkPIrqJ76+KfRgiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl
rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 03:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
Validity
Not Before: May 27 03:33:34 2026 GMT
Not After : Jun 3 03:33:34 2026 GMT
Subject: CN=6a16660e-7414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f2:7d:b6:59:a4:88:20:20:72:cd:81:7f:2c:
4d:8d:c4:76:dd:c1:35:5b:f8:b4:c0:fa:f0:dd:cf:
3f:fd:df:0a:48:bf:07:0e:2e:6e:f1:16:8e:8d:d5:
1b:de:53:cf:9c:f3:d3:54:fc:b4:69:45:74:7f:a3:
58:a6:44:ac:a7:d5:2e:24:25:7e:f3:bf:fb:21:aa:
4d:35:7e:85:8f:a5:cf:31:ce:b6:e2:b9:f6:55:0a:
09:61:61:32:a6:11:64:a5:5f:95:28:95:a8:b9:78:
ca:a0:de:9d:11:36:b7:74:6d:c0:98:6f:a3:8b:ad:
a4:af:a2:ad:39:11:e0:41:f6:77:1c:dc:6e:4a:52:
71:f7:f9:df:3f:7c:f5:7e:d3:14:0f:1c:9b:b0:8c:
a5:63:c6:8a:bb:8b:54:f6:78:55:97:5c:65:ca:45:
8d:03:83:e9:0d:9a:9c:19:20:fd:f3:4f:a3:84:ca:
37:24:b2:14:cf:64:ff:83:dd:c5:be:50:22:fa:60:
b5:db:f3:2b:ac:dc:45:27:85:50:e7:f9:44:58:a1:
8f:6d:f5:51:05:5d:9a:b7:78:5a:f7:9b:43:f0:dd:
77:ea:86:95:21:ea:90:bf:25:1e:27:1a:ef:6b:47:
b6:15:64:7f:4c:d8:f8:1b:bb:e2:47:ab:d1:1c:11:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0C:AE:14:59:71:A3:C3:4A:5E:E5:BC:BC:A0:FA:DC:40:E5:9D:E7
X509v3 Authority Key Identifier:
keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:73:12:4c:0c:c5:62:4a:66:2a:61:de:78:29:a7:af:3b:34:
ea:2d:63:38:59:2f:59:bc:90:d7:08:85:a4:14:f5:b9:68:d6:
81:22:d4:5c:b5:70:f3:99:e8:7f:35:85:5e:11:02:90:f6:68:
77:3a:09:52:64:08:92:04:83:6a:bf:5c:a7:96:49:37:60:77:
97:2d:2d:60:d2:5a:cd:65:76:d9:46:d2:55:cd:4e:31:b1:61:
af:fa:2b:a0:19:67:f3:04:e0:23:85:63:a7:da:ac:c0:aa:62:
22:2b:98:67:af:87:df:d4:45:4f:95:f6:47:f5:89:dc:ed:f6:
8e:e6:7d:17:59:3c:ca:8d:6a:b3:9f:58:55:3c:5e:9f:56:c3:
04:4f:b3:ad:46:97:ca:5b:37:81:34:46:32:ec:59:75:de:43:
a6:4e:c4:4e:26:61:0d:17:42:ff:99:ee:00:1d:49:1b:30:98:
ca:a4:90:9a:45:e5:85:aa:4e:eb:09:f8:66:d2:b5:fa:f6:a9:
af:d5:db:56:b3:ae:b6:87:c8:d7:e7:ec:94:d9:94:07:5e:e5:
37:ea:a9:41:5a:61:4e:b2:3a:dc:47:1b:40:c4:bb:c0:37:2f:
cd:95:1e:43:a6:6a:d4:39:87:ee:5e:8d:83:cf:87:c8:45:fe:
a0:63:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 18:55:48 2026 by rpki-client