
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier: JkBI3r2lwKjabR5+HUIX5pU2BVfI2wqbWY3GaVWt5D0=
Subject key identifier: EC:71:32:3B:B1:2C:C3:8C:1D:F6:04:95:0C:5F:C6:44:91:59:1F:28
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number: 01BF
Signing time: Thu 27 Aug 2026 01:46:37 +0000
Manifest this update: Thu 27 Aug 2026 01:46:36 +0000
Manifest next update: Thu 03 Sep 2026 01:46:36 +0000
Files and hashes: 1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: VuIahpsoVGRBfh5sWijH5/S/OHIHM+vtKOPrMPPUFWQ=)
2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: +DCvPGD1gJzVRYp0NyLyo9qI/LocUFsJLWMxD2e8AY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 01:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Validity
Not Before: Aug 27 01:46:36 2026 GMT
Not After : Sep 3 01:46:36 2026 GMT
Subject: CN=6a8f96fd-0098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:93:47:cd:6b:1a:6e:29:f1:9a:de:71:d3:
e0:14:15:0c:00:82:a1:c1:ef:ec:1a:79:d3:40:b7:
75:6e:bb:fe:60:32:da:4d:63:98:3e:08:81:f7:5d:
c0:8d:70:e5:8c:49:0d:fb:62:aa:8c:99:43:2e:cb:
17:07:99:19:b4:2d:c1:30:5f:14:e6:7c:43:be:f6:
00:38:5b:13:ee:93:eb:79:8a:75:02:84:30:e6:96:
38:3c:d8:12:d7:b7:a3:c8:4b:37:ce:7e:97:03:30:
21:79:eb:6a:ed:97:e7:f7:fd:64:5e:75:94:08:7e:
a7:f7:19:23:39:95:37:8c:f1:ad:69:6e:6d:fd:71:
a1:a4:0b:84:02:4f:35:9f:c0:f1:70:1c:9c:ec:51:
ce:e1:4a:a0:bd:26:ce:80:f3:03:a0:99:76:22:45:
4b:a9:cc:6e:de:98:e1:99:87:c1:42:bf:7a:3e:0b:
3d:f1:20:3c:eb:cb:92:b0:5f:f7:f6:fb:69:38:a0:
63:11:da:94:6f:33:c6:d5:8a:50:2f:15:3e:cf:d5:
4e:ff:79:8e:1b:06:ea:b3:8f:f5:d9:38:e1:96:3d:
ce:10:c0:46:66:95:63:1b:47:6d:32:60:e1:0a:6b:
75:95:53:72:bf:e7:fa:13:bc:63:b4:2c:1d:8e:d1:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:71:32:3B:B1:2C:C3:8C:1D:F6:04:95:0C:5F:C6:44:91:59:1F:28
X509v3 Authority Key Identifier:
keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:3f:67:86:41:42:2a:ec:11:11:2c:a9:0e:a5:20:df:31:14:
21:09:97:68:9e:c6:c9:36:52:bb:06:0a:96:b4:19:bf:7c:ae:
02:7e:ec:65:3e:53:96:01:b5:42:c0:a3:bf:2c:c8:46:c0:d3:
d3:1c:ee:54:ae:ae:c5:e2:ee:d9:44:f9:11:bd:9a:46:45:bf:
bf:10:b4:ba:e9:95:89:d3:5a:f3:71:cf:e6:99:9a:6b:fb:9f:
52:3e:ff:ef:c5:ee:65:c1:5b:6c:bc:14:5f:49:5d:cb:d3:92:
f4:cd:d8:7d:95:6b:b5:c6:45:0b:20:84:a8:cf:61:8b:44:82:
1b:c3:51:2f:10:d8:a0:5e:cc:77:a2:98:51:cf:e8:65:1d:15:
9a:77:c7:76:87:15:70:a4:d9:8c:fe:95:53:1d:02:d4:da:e8:
aa:51:a5:52:3d:47:2b:3b:9a:7e:89:bd:e5:b3:5f:97:c1:2e:
51:48:9b:ef:6b:8b:35:3a:81:cc:53:fb:58:27:65:c1:b2:92:
63:c5:db:a3:92:d2:1f:c0:61:49:85:4c:df:61:c1:6d:d6:af:
4a:39:61:ce:04:d1:8d:5b:6d:11:b6:f9:37:a3:de:5b:a7:b9:
79:2e:f8:4a:b7:12:5d:d1:0d:f4:49:d3:9f:27:28:cc:69:6f:
fb:2f:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:03:27 2026 by rpki-client