
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
File: OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json)
Hash identifier: roDJvJQHEtJLv0+7oMLSv8aEyWixiB6hwR+pT+1vhzo=
Subject key identifier: C8:F4:1F:35:46:CA:7C:79:64:8A:55:D1:18:B9:6A:EB:B6:CF:EF:B8
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Certificate issuer: /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
Manifest number: B2
Signing time: Mon 05 Oct 2026 07:51:10 +0000
Manifest this update: Mon 05 Oct 2026 07:51:10 +0000
Manifest next update: Mon 12 Oct 2026 07:51:10 +0000
Files and hashes: 1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: BTJKX6PbkkreHnprYJ8v1W/d2hBxk0l5b3oQT9AzE/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Validity
Not Before: Oct 5 07:51:10 2026 GMT
Not After : Oct 12 07:51:10 2026 GMT
Subject: CN=6ac356ee-0ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b4:d6:ec:97:f0:91:ce:ac:ba:6a:22:94:e7:
07:26:1b:8a:7d:c1:2a:ae:94:b8:af:47:8a:4a:96:
34:8f:1c:63:a6:62:65:00:4a:54:09:47:8b:62:f2:
b5:a8:f1:a0:d1:a3:f2:20:d9:df:f2:1d:fb:4a:c0:
55:8c:60:c6:46:9f:db:d3:e4:4d:c8:a4:0e:5c:f9:
97:4a:23:ff:6d:ac:d1:47:a8:c9:df:a8:7d:99:92:
21:67:d4:d7:eb:4f:46:36:d9:3f:97:a9:e2:69:e3:
d2:dd:71:3b:81:63:19:30:ad:fa:1d:f7:6f:cb:b3:
b4:a6:4b:96:a6:21:88:cd:72:f1:f0:7b:b8:a2:63:
36:f5:f9:f9:0e:f9:77:d2:69:4c:78:f0:06:ed:91:
4c:1a:d2:a5:3f:a9:ec:5f:8f:d9:30:b6:f8:77:5d:
21:87:ee:12:3c:b3:42:9f:86:9e:54:e1:72:6a:78:
33:ac:d0:72:e1:b1:26:c4:ab:e6:93:90:da:4c:3c:
22:4e:c6:1b:7f:9d:8d:82:71:4d:e0:8e:69:6d:0b:
98:a4:a6:3d:80:41:fc:e7:e3:ad:95:f1:ad:b7:59:
14:8b:74:c0:fc:64:32:b2:9a:3f:4c:a1:56:03:70:
66:35:61:ff:8d:25:1c:a4:c8:78:48:39:aa:9d:df:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F4:1F:35:46:CA:7C:79:64:8A:55:D1:18:B9:6A:EB:B6:CF:EF:B8
X509v3 Authority Key Identifier:
keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:c0:bf:16:e4:77:9c:c2:94:e2:c4:ee:79:bf:5d:12:56:74:
69:18:8d:bd:c5:53:0c:dd:99:c3:f5:80:66:c0:3f:f1:fe:cb:
10:64:17:6e:87:ea:f8:e9:d6:f2:65:19:28:8a:35:87:f7:67:
09:69:1f:35:a6:0d:44:35:54:ef:71:ba:ed:fb:cb:5f:29:09:
1e:6a:0d:1f:63:7c:8e:55:43:60:c6:ac:16:9b:18:b8:b4:56:
45:00:cd:27:2a:63:ff:1d:9d:fd:67:5d:64:66:0f:a5:06:80:
07:2a:e2:b2:74:be:bf:75:eb:95:c4:bd:d8:37:61:29:dd:59:
45:ec:17:e9:e8:4c:94:4a:84:84:d6:98:67:69:29:74:fc:73:
bb:3b:80:53:d5:20:18:fc:87:a8:6e:c1:e1:a0:c5:c1:4b:5e:
da:bd:10:05:38:f1:32:b0:da:9e:13:0b:71:9d:b4:08:77:a0:
5c:2c:a3:a0:31:53:9e:87:85:35:ed:2a:bf:b7:98:94:6a:2f:
94:9a:a9:f6:50:19:9c:a3:ab:30:2a:da:f5:fd:73:7c:ab:5e:
d0:4d:c3:e5:3c:48:25:2f:68:0e:94:1c:ec:37:2b:eb:1e:6e:
e6:be:0b:e4:c7:fd:ab:fb:a7:b4:85:bb:1b:e0:80:78:4e:aa:
21:1d:96:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:47:24 2026 by rpki-client