
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File: OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier: CuwRIp2SUKQjeu4+31Qu8YrOJvh57kV3IsnhoWgNWm0=
Subject key identifier: 8B:02:D7:3F:F1:26:C7:08:8F:42:D2:3A:50:B1:77:31:3D:F9:F2:B4
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial: 1121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number: 10F5
Signing time: Thu 20 Aug 2026 17:16:57 +0000
Manifest this update: Thu 20 Aug 2026 17:16:56 +0000
Manifest next update: Thu 27 Aug 2026 17:16:56 +0000
Files and hashes: 1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: yMWHmrEtlPkyAd4wOJ9ZR72gGCpLLKTg+oxKZW0M6YQ=)
2: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: Ii/gO0OKf8bIzXuRcAmTcbAZrOkECJjXAFuEdJBjwE8=)
3: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: gYUYL+Jd8BqYDcq6w9aABSq0jEzKxGSrRN4Kct2Vn7c=)
4: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: L+cBg8DZ8MWiGD4ABrUtf99Xn9LyTrz132AQjeQ8FK8=)
5: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: kQR2rJRw7cibG4+VWuepJmVVMALBPz98kkD/QBlTqb4=)
6: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: +oZqqbSfF7y4PvnGsPCA1za/Eu6HGAUVAMjzcBgpEOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4385 (0x1121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Validity
Not Before: Aug 20 17:16:56 2026 GMT
Not After : Aug 27 17:16:56 2026 GMT
Subject: CN=6a873689-bd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:36:f6:b6:6f:a9:cd:a2:e4:2a:81:aa:1b:
12:57:34:a5:b1:8e:d4:8d:97:8c:7c:39:cf:b6:5e:
e6:4c:da:82:ca:1f:fa:b7:f4:8c:cd:2d:64:63:7e:
c1:1d:b3:78:0b:76:39:bd:80:a6:56:7c:a0:21:65:
5d:c7:5b:af:81:41:74:27:1d:82:c2:9a:05:1e:25:
39:0f:ff:c3:48:bb:0e:aa:e6:29:09:77:11:94:14:
f6:45:d7:fd:c9:7d:40:b2:63:e4:65:79:ef:63:b6:
0b:7e:14:a2:ce:85:e1:d4:d5:56:db:ed:f6:22:b2:
d9:59:34:be:fe:33:3a:28:1a:bb:aa:17:34:cb:51:
3f:46:c1:4c:ac:85:f8:25:4f:0b:40:bf:40:1b:07:
55:1d:b5:67:29:57:88:8c:4a:4a:2c:13:81:e5:9c:
a5:64:9c:7d:18:6d:6e:81:75:bc:5f:27:80:15:21:
05:57:76:94:5d:18:8d:3e:5f:34:55:18:e7:46:80:
f0:46:a9:a6:8b:e1:5c:87:ae:7d:f1:cb:f0:2b:39:
9b:63:c5:4a:c1:77:d6:fa:a1:56:9b:3e:f0:51:67:
c2:60:0b:a7:8c:4e:de:bd:cc:03:2b:52:33:17:6b:
c3:a6:b6:a7:e9:84:cc:45:b2:00:15:ac:5a:50:ce:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:02:D7:3F:F1:26:C7:08:8F:42:D2:3A:50:B1:77:31:3D:F9:F2:B4
X509v3 Authority Key Identifier:
keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:58:b0:27:db:bf:07:af:54:c2:d6:8c:5f:dd:47:95:46:f2:
d5:56:e3:3a:49:7c:fd:33:0d:f6:8e:3f:f5:d3:f9:ad:aa:51:
d0:a6:1e:d0:78:46:53:2d:56:3c:55:1e:3e:ef:c7:54:e1:7b:
f5:5f:1e:8a:70:da:d3:36:fb:58:0d:36:f8:54:1b:9d:79:3e:
8c:f4:87:ee:07:9c:ba:9d:c6:19:73:0f:57:69:e7:c5:24:27:
3e:d7:ce:4b:a8:09:a1:28:9d:38:06:ae:b6:d3:e6:87:39:0f:
f7:29:4b:fe:b8:32:e6:61:9e:58:7f:91:a6:aa:1b:0d:86:3a:
1a:c8:dd:c1:75:b1:ec:18:33:14:1a:77:ca:97:75:38:f6:e2:
41:b9:31:b9:08:03:e9:fb:76:fa:aa:01:34:e3:ab:8c:09:1d:
e9:f3:06:3a:3b:c0:76:32:14:e4:20:54:87:ad:19:49:b6:7f:
89:6b:3b:0d:f8:5e:ca:ff:2e:5d:70:4a:b8:3a:81:b5:2b:3a:
ab:ba:ce:09:e2:08:62:ee:3b:16:4b:83:76:a1:90:f5:b4:4b:
fe:9e:9e:04:ec:ff:51:e2:98:65:3e:27:6f:a6:33:33:01:c9:
f6:ed:b5:23:a9:23:bd:14:3a:ad:5b:c6:4a:56:fb:6f:78:6d:
64:53:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:34:58 2026 by rpki-client