
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
File: OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json)
Hash identifier: vVveSW+A1IlxfmPN/ylw7TyAn0kLMtTs/8nLs0tB0I4=
Subject key identifier: 08:32:53:8E:DE:6F:16:02:9E:FF:F5:12:1A:C7:71:10:C8:3F:C1:BA
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Certificate issuer: /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
Manifest number: 9A
Signing time: Wed 19 Aug 2026 08:25:07 +0000
Manifest this update: Wed 19 Aug 2026 08:25:06 +0000
Manifest next update: Wed 26 Aug 2026 08:25:06 +0000
Files and hashes: 1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: EBUUs6oY0mddGN7x3ao+LtaK8QWEhXKmVvw/UY5utpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Validity
Not Before: Aug 19 08:25:06 2026 GMT
Not After : Aug 26 08:25:06 2026 GMT
Subject: CN=6a856863-2b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:a2:2b:2e:b9:98:7b:46:01:3c:de:18:4b:
66:c1:04:fb:22:3f:f2:2a:65:98:9f:f4:26:c5:fa:
a6:c0:11:62:e4:8a:60:a1:36:85:50:c3:1e:d0:12:
c9:02:b8:9d:e0:fe:d9:fc:59:55:f8:54:54:c9:83:
99:6f:62:08:b9:65:8e:51:28:77:f2:a1:1d:59:1e:
86:a8:0c:67:59:ba:70:00:84:21:19:50:71:18:4e:
a7:56:46:5b:e3:78:a0:68:cb:4e:27:f1:43:de:19:
73:09:80:2c:16:1d:ef:35:02:cd:24:e7:13:8a:30:
d1:2f:2e:50:bb:a9:1c:da:12:9d:fa:28:a4:7e:41:
ee:70:07:b1:9c:26:6c:5b:f8:15:08:f6:82:97:93:
9b:c3:f8:ae:15:13:af:15:4b:8a:42:19:0d:1a:e2:
a7:3c:21:7e:fb:16:27:22:f4:3d:3c:e7:c7:28:84:
38:c8:56:5c:dd:f7:f1:86:24:72:ca:75:ac:65:36:
ad:90:11:bd:93:47:12:f8:4a:8a:42:f5:6c:47:f4:
dc:3c:38:00:fa:1e:b5:2f:3d:9c:75:3e:f5:18:49:
af:66:57:7a:a3:64:5f:2c:cf:39:e0:4f:91:fd:ee:
65:c4:22:24:8a:af:5e:d9:21:89:ce:a8:04:3b:78:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:32:53:8E:DE:6F:16:02:9E:FF:F5:12:1A:C7:71:10:C8:3F:C1:BA
X509v3 Authority Key Identifier:
keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:58:93:60:87:17:5e:e2:00:2b:86:3b:5e:d7:6d:bf:ef:9d:
1d:e1:ae:e6:10:f1:6c:a0:e7:11:14:c8:24:d8:b0:49:6d:2a:
7f:0b:c7:5e:03:ec:9f:d3:2f:98:b7:59:df:1f:b8:f7:0f:e0:
be:02:6b:47:a4:dd:52:5d:e2:cb:a8:9a:52:23:9c:0c:90:72:
47:ab:e4:f7:e1:61:11:d5:1f:ea:a8:d3:78:05:be:bf:e3:fd:
bd:9e:4c:a5:db:9f:4f:3d:af:7f:0b:15:cb:fd:2c:18:0d:2e:
24:c8:7d:22:da:8d:48:84:d0:04:c9:43:e9:21:6d:9d:a1:5a:
a0:fb:0a:1b:9d:5b:22:08:4b:50:cd:0a:f3:ce:72:18:22:8b:
85:50:58:75:0f:04:cd:56:70:1b:a0:5c:08:35:eb:eb:71:97:
63:27:26:73:1f:b8:9e:60:2b:33:fe:bd:5e:f5:f8:05:ec:ef:
67:64:ff:d1:51:5b:a7:6d:66:ca:78:45:a5:ac:e2:4f:6d:9b:
84:65:71:27:fd:1e:e3:0d:6d:f8:c7:3a:2e:f2:38:3a:f5:6a:
98:ff:69:64:ac:cd:43:6d:03:d6:5c:ad:91:73:aa:e3:57:7b:
34:5e:f3:b5:c7:a1:62:07:a4:9e:85:d4:42:b5:b1:1e:75:34:
95:b8:05:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:11 2026 by rpki-client