
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json)
Hash identifier: RjbkGmG33lGnI/ZERRC6wlDi9W7e1YjFosim+W60v5U=
Subject key identifier: 41:F2:A5:F3:CB:59:B3:51:5F:F1:33:60:EB:4A:58:3D:63:19:A4:BB
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 367B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
Manifest number: 35ED
Signing time: Tue 18 Aug 2026 14:26:58 +0000
Manifest this update: Tue 18 Aug 2026 14:26:58 +0000
Manifest next update: Tue 25 Aug 2026 14:26:58 +0000
Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: Lj/VPWwgNXPW3LbczJurCKqYDA5JKKQeTmydU29V1lk=)
2: 02C97520985011F083EA2077C4F9AE02.roa (hash: elpetSZnc/cw/UNBwFiiaE6GRjUvr9tLQSkFah9iq8Y=)
3: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: +E2YvC30N7G4XyfUFImEIGM741TQeBV6oc6cEcKy0A4=)
4: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: GDg6tzHTkf4U+SPLrShf4CtKLD6rp4wOgPpuQzEBJ6s=)
5: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (hash: SDyY9CxWbpTxTv2y+7w0t15rfAMVOucoRmveZEJG2J4=)
6: 72378020EE2A11F0BE1A1CA2486F56BC.roa (hash: aKgJ5Lr0RjgCGZC/3syl2BTMU1aaDSTAss+LizAPlBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 14:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13947 (0x367b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Aug 18 14:26:58 2026 GMT
Not After : Aug 25 14:26:58 2026 GMT
Subject: CN=6a846bb2-5bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:0a:17:d5:aa:d5:8c:3b:74:51:ee:14:cf:
a3:3a:1f:f1:84:cb:89:ec:f4:fa:72:e9:44:0d:12:
c3:63:a2:c4:f4:04:dc:05:2a:44:5a:4e:41:eb:c8:
91:fe:80:a0:26:5d:9e:49:49:46:46:c2:e7:c9:dc:
75:62:9f:03:0a:ea:ff:71:a2:56:8d:06:33:9d:22:
4a:31:a0:11:de:01:7d:33:f5:16:11:ec:fc:27:f2:
6e:96:20:bd:f7:84:77:b1:ee:86:46:07:81:67:85:
80:ce:08:e2:f8:39:28:27:b6:6b:fd:2d:d1:c2:54:
60:ff:c5:24:7a:f2:1b:8a:5a:47:77:b1:97:ad:f1:
90:6b:9d:ad:53:82:ee:88:0c:56:98:e1:bd:04:fd:
fb:5f:22:66:dc:9f:9c:7a:41:59:01:08:73:71:b5:
5f:84:b1:28:13:06:ca:9a:e0:61:a6:cc:b3:2e:5e:
3a:89:34:49:3f:8b:05:32:50:0a:5a:b4:25:02:2c:
4f:b3:6a:3e:e8:fa:6a:73:a0:2f:78:bf:28:e8:0e:
3c:7c:cd:b1:be:75:00:c3:da:ef:e4:b8:71:91:1e:
f3:d9:10:d0:41:d1:fc:c9:18:aa:bd:7e:65:59:ff:
45:5d:15:15:d5:05:eb:44:4b:ca:30:6f:89:12:a3:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F2:A5:F3:CB:59:B3:51:5F:F1:33:60:EB:4A:58:3D:63:19:A4:BB
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:fe:f5:7b:1e:98:3f:a4:22:cc:02:23:39:a3:da:27:e9:0d:
cc:81:a9:4e:38:bf:b0:09:1f:6d:6d:dc:70:4a:76:47:eb:4b:
3c:53:a2:b3:a5:7f:ed:08:24:df:97:97:f8:a8:49:eb:d6:17:
d6:65:df:42:37:66:3d:54:cf:e6:c2:9e:90:b7:dd:ef:a8:b4:
91:04:ae:9d:ae:cc:de:0a:66:41:ec:e5:d4:c8:30:7e:74:3d:
88:1a:a9:ab:cc:0c:8c:c8:b8:3a:01:ad:8d:91:d1:de:b5:c1:
e4:b8:e7:37:ce:67:42:1e:f1:28:d9:78:64:f3:8e:06:47:22:
9a:b7:89:39:74:38:e4:be:65:f7:8f:25:36:9c:51:68:cf:8c:
9f:54:eb:b0:c2:34:0c:e5:2f:a2:8f:8c:32:c3:a5:f9:b6:30:
2e:e1:30:fd:bb:d0:62:0d:a4:33:2c:94:c0:96:63:2f:6d:1e:
2b:eb:79:40:c4:5d:03:81:5c:33:0f:e9:9e:e7:19:3c:e4:0f:
c0:48:79:33:b6:cb:b8:d6:d7:85:38:6c:52:d0:8c:a9:7c:2b:
ed:3c:05:7d:b4:b6:74:68:90:48:e8:89:60:aa:e5:5e:49:6b:
c0:c5:00:6b:f7:21:88:da:67:13:a0:30:3f:0a:f5:d4:d1:dc:
c2:45:db:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG
MkYxN0YzRkYwHhcNMjYwODE4MTQyNjU4WhcNMjYwODI1MTQyNjU4WjAYMRYwFAYD
VQQDEw02YTg0NmJiMi01YmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoCMKF9Wq1Yw7dFHuFM+jOh/xhMuJ7PT6culEDRLDY6LE9ATcBSpEWk5B68iR
/oCgJl2eSUlGRsLnydx1Yp8DCur/caJWjQYznSJKMaAR3gF9M/UWEez8J/JuliC9
94R3se6GRgeBZ4WAzgji+DkoJ7Zr/S3RwlRg/8UkevIbilpHd7GXrfGQa52tU4Lu
iAxWmOG9BP37XyJm3J+cekFZAQhzcbVfhLEoEwbKmuBhpsyzLl46iTRJP4sFMlAK
WrQlAixPs2o+6Ppqc6AveL8o6A48fM2xvnUAw9rv5LhxkR7z2RDQQdH8yRiqvX5l
Wf9FXRUV1QXrREvKMG+JEqO16QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHypfPL
WbNRX/EzYOtKWD1jGaS7MB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE
ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjU1MC84QjlCRDIwMjFEODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNB
WmZCUVk0aEdEa3J5OFg4XzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmf71ex6YP6QizAIjOaPaJ+kNzIGpTji/sAkfbW3ccEp2R+tLPFOis6V/7Qgk
35eX+KhJ69YX1mXfQjdmPVTP5sKekLfd76i0kQSuna7M3gpmQezl1MgwfnQ9iBqp
q8wMjMi4OgGtjZHR3rXB5LjnN85nQh7xKNl4ZPOOBkcimreJOXQ45L5l948lNpxR
aM+Mn1TrsMI0DOUvoo+MMsOl+bYwLuEw/bvQYg2kMyyUwJZjL20eK+t5QMRdA4Fc
Mw/pnucZPOQPwEh5M7bLuNbXhThsUtCMqXwr7TwFfbS2dGiQSOiJYKrlXklrwMUA
a/chiNpnE6AwPwr11NHcwkXbLw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:38 2026 by rpki-client