
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json)
Hash identifier: 2xAidRcHAn64+Zv/sABLg6d2z73pXAwEzrq3ubPGif0=
Subject key identifier: CD:CC:09:A2:CD:0E:07:3C:3E:95:6A:6B:CF:53:93:6B:95:AD:09:FA
Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
Manifest number: 024C
Signing time: Tue 21 Jul 2026 03:59:31 +0000
Manifest this update: Tue 21 Jul 2026 03:59:31 +0000
Manifest next update: Tue 28 Jul 2026 03:59:31 +0000
Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: bSm0VvFiVjbJ5A1CHT2fTHdfsEL4NsnhA+LZMHy9y84=)
2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: UJfcT25TpxMsPXblHXFvDdc06o4EalWiUveKOaWphfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Validity
Not Before: Jul 21 03:59:31 2026 GMT
Not After : Jul 28 03:59:31 2026 GMT
Subject: CN=6a5eeea3-3118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:06:1c:5a:51:5e:14:75:75:99:6b:d1:3d:
39:24:69:c3:ae:b5:77:27:fa:3b:6f:6c:2c:12:47:
14:a2:fb:4e:02:9a:6c:f1:b0:5e:f7:d5:ac:01:d1:
31:4f:49:ba:70:e2:15:c3:ed:92:2c:0e:da:56:e8:
63:d8:82:8f:70:e8:2c:0f:c7:95:89:35:42:a7:e9:
26:57:4a:70:29:68:06:5c:08:f3:b9:35:82:cf:0d:
92:e6:de:d8:61:17:60:9d:ef:4d:5e:32:8c:4f:74:
24:fc:68:b3:92:c5:9b:8c:5a:5b:34:09:f6:e8:b6:
47:de:99:fa:05:a3:0a:65:ec:41:9c:84:c8:e2:2f:
3c:c4:b7:9a:b9:89:98:ef:ef:65:bb:a6:f8:56:3c:
a1:be:b4:16:b8:bf:ff:1a:3b:ad:f9:a2:8f:86:10:
3f:49:9d:0e:0a:67:10:75:c1:4a:86:e1:67:42:cf:
ad:cd:1a:55:02:47:d6:1f:f8:eb:08:79:4f:a6:89:
63:75:66:b9:3d:3f:f1:4d:b2:70:e6:aa:c3:12:8f:
dc:70:3f:45:46:d4:79:e1:c1:51:20:0f:f3:27:dd:
db:b5:6c:9b:8c:e1:b7:b6:55:0c:c6:9a:96:bb:66:
31:57:f7:77:e3:07:6c:87:72:fc:f8:d9:ca:9e:cc:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CC:09:A2:CD:0E:07:3C:3E:95:6A:6B:CF:53:93:6B:95:AD:09:FA
X509v3 Authority Key Identifier:
keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:19:c5:f1:75:73:7a:67:6c:9a:58:91:3d:25:1d:5b:f8:ac:
fc:9c:a0:d6:ad:15:cf:8d:29:e8:21:6c:b9:57:30:81:d5:fe:
eb:7f:00:8f:ff:ce:fb:33:d7:af:9c:32:72:6e:5b:1f:38:b6:
e2:1e:f0:4b:37:5e:63:e2:75:f2:d4:29:ce:95:5a:62:48:fa:
cb:81:d5:7c:79:bb:bb:e9:ac:3a:b3:fd:0c:cb:91:97:66:ba:
33:4c:51:2f:20:16:41:e8:c1:a8:e7:f2:5f:75:91:65:4f:45:
9d:12:2c:ee:f6:f4:37:99:ca:50:90:4c:99:26:24:26:f0:ec:
e4:e3:dc:a6:fe:19:be:4b:27:8e:cd:9e:de:0d:b5:a5:f0:98:
18:e6:5d:6d:61:75:ae:85:a0:59:a8:af:cc:78:a5:8e:e9:51:
1e:38:63:9a:e8:e1:f5:80:5e:70:01:a2:65:b7:26:66:19:4e:
db:64:38:61:0c:ba:52:26:4c:97:7c:00:82:32:99:e3:26:9a:
13:c1:f1:e2:29:29:6e:82:f4:92:2b:b9:52:45:d0:86:d3:bb:
2a:2f:64:58:64:7b:fa:ac:85:e4:6c:dd:5c:f8:44:90:80:da:
36:45:f9:cd:3a:c5:53:db:55:f5:64:7b:aa:03:61:58:3e:46:
79:76:e9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:44:40 2026 by rpki-client