
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier: 70WSN41iuoRMPbM0bE+fo8cLuxPKyhcg4/Oi9po2Z/s=
Subject key identifier: EB:CC:9C:59:B2:C7:D8:7D:3F:87:2A:83:F1:E7:80:66:62:B9:FF:2D
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer: /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial: 0840
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number: 0829
Signing time: Mon 20 Jul 2026 21:41:27 +0000
Manifest this update: Mon 20 Jul 2026 21:41:27 +0000
Manifest next update: Mon 27 Jul 2026 21:41:27 +0000
Files and hashes: 1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: NLvq7kQ5MkbpNSak6q5Gc+07A1rVcIs74meEcY1NOMQ=)
2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: a8Wy1m3Rmhsdw7JgMn9q7U8Wx5LEB2V1AB0BFbhhHE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 21:41:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Validity
Not Before: Jul 20 21:41:27 2026 GMT
Not After : Jul 27 21:41:27 2026 GMT
Subject: CN=6a5e9607-d0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:a9:b7:82:26:b6:a8:95:e6:03:ec:04:5a:
df:3a:bf:2d:ad:39:c2:5a:81:aa:ea:f6:18:36:b5:
76:c8:d9:1d:8a:bc:4c:2b:34:a5:86:e0:3b:e0:81:
33:67:0e:93:ab:a3:83:26:c8:fa:df:fd:9e:07:fd:
f1:25:18:a2:4f:f9:e2:6d:d5:1b:ad:57:f3:d8:40:
08:5e:51:a1:88:5a:d5:b0:de:d0:be:c8:e3:3e:1f:
8a:ae:48:93:16:33:77:82:ee:fb:bd:c9:60:4a:0b:
da:aa:8c:99:90:63:a1:6a:65:99:45:4f:66:a0:c8:
94:69:88:1a:58:38:ff:02:5c:f8:58:92:d3:6a:46:
46:f3:b0:df:a3:e1:9d:19:6b:2d:e1:a1:06:1d:9d:
3c:1a:26:50:00:48:6a:89:9a:d1:f1:b9:93:b2:49:
62:94:00:4d:29:b4:18:c9:6f:dc:63:93:59:db:e0:
1c:aa:6f:d2:2b:c4:67:d2:1e:f4:9c:3d:c0:36:d5:
16:c2:f8:44:87:51:70:d1:ed:f2:b2:cb:41:41:92:
a1:f1:25:0b:96:f4:f6:97:84:3a:9c:24:b1:16:44:
66:f4:6c:49:2c:c2:85:fa:b3:b6:c6:f3:9c:70:71:
b1:8d:6c:c0:09:b5:98:8c:0e:ad:6b:6e:5b:46:a6:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CC:9C:59:B2:C7:D8:7D:3F:87:2A:83:F1:E7:80:66:62:B9:FF:2D
X509v3 Authority Key Identifier:
keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:43:8b:09:11:83:e0:b0:56:1d:53:87:de:ae:a4:5a:be:b7:
ce:18:f8:5c:bf:ba:50:6b:ba:3c:a0:80:de:d8:35:99:b8:2b:
0d:27:46:b4:ab:88:9e:f4:81:90:d2:31:d5:13:43:f3:ae:06:
03:c0:16:a6:8b:4b:5f:16:16:e1:93:81:d6:7e:6c:ac:46:74:
0c:87:7f:8b:b1:b8:77:ea:60:ce:85:da:b1:bb:92:6e:31:6b:
89:20:82:3a:f9:76:8e:0e:1c:30:f5:09:be:ac:f6:82:ed:ba:
96:c9:54:97:a9:4e:44:93:42:40:de:1c:ac:ae:7d:5e:76:c9:
76:86:7c:bc:12:0d:f3:12:d7:db:49:7d:20:47:e2:d7:1f:6a:
63:c9:12:73:9d:4f:32:05:bd:a9:2f:e3:24:f8:7c:aa:11:d7:
e5:db:7a:74:c6:ca:0e:ce:73:de:7d:7e:93:c6:ec:39:b4:b2:
24:e0:95:fc:4a:7a:4d:08:53:9c:53:87:26:7e:b7:c7:3e:d6:
ae:e6:67:f1:a5:32:ec:6d:f9:1b:93:4a:af:97:06:35:f5:67:
9c:60:b4:4b:35:88:84:02:3f:23:fc:6e:f9:f5:8d:23:54:f6:
0c:9a:e0:3c:2b:2a:ef:ca:a6:5f:75:e5:d7:8c:e4:48:99:a4:
86:4b:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:18:21 2026 by rpki-client