
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft
File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json)
Hash identifier: XnoUTFVi2XCffDDcOMISxsM0WUrvDoC4LBA4sCJyH0g=
Subject key identifier: 40:1B:B8:98:F4:30:D9:51:98:7B:DF:22:CD:3F:4D:35:3F:C8:E6:C9
Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08
Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408
Certificate serial: 028F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft
Manifest number: 0289
Signing time: Sun 05 Jul 2026 02:19:47 +0000
Manifest this update: Sun 05 Jul 2026 02:19:47 +0000
Manifest next update: Sun 12 Jul 2026 02:19:47 +0000
Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: Bcwd9PLf+cL3wXHs820EuN2zQgXRtfDiVFIZkNGkRnQ=)
2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: L6DpKLFyryWWogDG5wVgqr7Rv6sOS8ilyfaVcgY1X1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl
rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 02:19:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408
Validity
Not Before: Jul 5 02:19:47 2026 GMT
Not After : Jul 12 02:19:47 2026 GMT
Subject: CN=6a49bf43-d140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:8c:ae:f7:c5:42:08:65:a9:45:24:02:14:
dc:52:11:7d:c3:d7:95:bc:97:ee:ee:dd:9a:9a:c6:
84:c6:b6:04:f2:0a:b7:92:c8:89:0e:43:21:0f:95:
f6:4e:e8:d0:a2:41:86:be:51:7c:10:9e:6e:6a:cd:
5f:15:00:9b:e9:04:76:c4:76:5e:67:0c:8d:c0:8d:
cb:b2:03:04:38:ba:9c:d2:53:3e:ce:4a:a2:24:ab:
b1:81:b1:63:d6:ae:94:b0:01:25:2f:f4:9a:ae:4e:
df:51:05:c4:4a:eb:46:e4:5b:43:30:b0:31:7e:e4:
c3:70:b7:02:ad:3d:1c:a0:a0:68:17:fc:63:66:8c:
67:da:76:49:19:be:91:74:4d:a1:78:e4:06:5c:bf:
37:4f:1c:14:4b:28:73:df:ed:f0:7d:6b:86:8d:e8:
12:9e:d8:19:35:50:1f:e1:48:d2:95:75:f8:1e:03:
7f:e7:84:d4:d9:0f:47:09:87:9b:73:63:6b:e4:fe:
0a:81:6a:71:12:43:76:4e:ad:60:53:d5:be:7f:3c:
56:14:10:ee:8a:ed:28:05:e6:b7:01:41:a1:ee:9b:
d5:a2:71:98:8c:01:1a:77:a6:97:f9:21:d0:40:ea:
ab:b7:1a:28:a6:f1:76:1c:f1:1c:e5:04:5d:72:b1:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:B8:98:F4:30:D9:51:98:7B:DF:22:CD:3F:4D:35:3F:C8:E6:C9
X509v3 Authority Key Identifier:
keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:df:4c:77:3c:a3:5e:d1:cb:02:5c:3d:95:01:2c:88:37:6a:
94:93:66:6a:7a:00:dd:34:26:33:2c:03:cc:2c:f3:65:0f:39:
ee:95:71:69:35:a1:cb:f2:af:63:d8:f4:d4:7e:2a:81:62:97:
10:3b:22:17:6b:c0:e6:59:47:ab:06:bb:72:09:d0:4b:c3:36:
82:34:23:f0:32:e4:0b:e4:0f:2c:64:2f:3f:9e:60:ed:a8:56:
be:37:ae:36:bb:ef:af:e4:71:42:c6:f5:e3:5a:1f:7a:1a:0e:
9b:c2:8b:1f:74:0f:e8:c9:9c:3c:d5:6b:a5:0f:14:aa:81:36:
06:f1:34:79:70:88:35:7b:34:74:06:29:45:a0:51:ce:01:82:
bd:63:0c:38:6a:7a:ae:53:83:53:d4:b4:ef:18:1b:c5:c8:f0:
65:83:d3:fd:f5:c9:4b:3a:1a:34:3a:e8:95:e2:b3:46:f1:a8:
d0:1d:f5:28:9a:32:1d:7c:05:a9:a3:de:b6:c5:ed:50:0d:f1:
7a:2a:ed:b2:be:61:69:03:de:2c:5f:52:d7:69:fc:1a:ef:60:
a9:5b:dc:88:93:6b:65:bf:b2:cc:a7:17:5c:6c:c1:4f:73:61:
03:af:21:47:42:d9:04:86:49:fc:2b:ae:82:b5:2c:8b:55:ad:
a5:34:9f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:38:06 2026 by rpki-client