
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
File: oJnQLNC3-WiJZGVjnxrwazPkaqI.mft (raw, json)
Hash identifier: B9uRlO7Y9bxleITbBu9A8TVtaSIzeB+dfJuOxGbWj3w=
Subject key identifier: DC:D5:A3:96:BD:81:96:9D:19:97:7E:83:D0:FC:FC:3E:1F:38:EF:85
Authority key identifier: A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2
Certificate issuer: /CN=A91A36F2/serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
Manifest number: 14
Signing time: Fri 03 Jul 2026 10:00:39 +0000
Manifest this update: Fri 03 Jul 2026 10:00:39 +0000
Manifest next update: Fri 10 Jul 2026 10:00:39 +0000
Files and hashes: 1: oJnQLNC3-WiJZGVjnxrwazPkaqI.crl (hash: ip94fegt7i6VLZW7B9GNxAYP+xyCHwMLrdaHhHxVakM=)
2: 368A4C9869E911F1A073B420A247A888.roa (hash: m8oJx9hXPNbmDxAhEro4ptD49DaHfsx1w8kJNIUKkpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl
rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36F2, serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2
Validity
Not Before: Jul 3 10:00:39 2026 GMT
Not After : Jul 10 10:00:39 2026 GMT
Subject: CN=6a478847-185a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:4f:bd:b2:15:16:71:99:8c:60:23:83:e5:
12:94:14:e8:15:b4:55:ac:66:81:a4:17:91:d2:7b:
ea:c6:43:5f:35:85:18:09:d1:60:ba:b2:e9:b5:52:
7d:cd:8b:5f:28:f8:89:22:a1:5c:c7:d7:f0:96:a4:
20:7b:5b:3b:8c:79:f5:0c:b9:ba:70:67:b6:51:17:
0a:11:32:04:2f:23:de:e3:39:d6:bc:d2:ea:2d:07:
2a:96:23:58:df:db:f1:48:92:29:10:52:7d:10:50:
08:11:ea:43:c5:7c:86:25:e4:9d:7b:34:d7:44:d1:
6b:2b:05:4b:ba:b2:cd:c0:6f:fb:fc:6e:45:38:a0:
4d:d8:b0:63:29:68:a6:91:05:98:bc:16:12:1e:2f:
25:84:3e:19:b3:5a:8e:23:22:2e:8c:c1:cc:1a:d6:
eb:72:05:66:8e:23:84:99:73:c2:51:b2:eb:f7:b3:
d8:87:ff:43:db:d5:df:11:ef:33:a6:65:60:69:85:
e7:0e:9e:99:aa:7a:c2:7c:67:0f:22:64:f0:41:e7:
d2:d4:df:9a:cf:6f:c7:d7:e1:b5:36:b6:ed:99:05:
3e:b7:46:f2:ae:32:76:ff:c5:a2:4d:d9:ba:81:8c:
cf:92:a1:a2:93:a1:09:7c:10:22:47:91:40:4c:57:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D5:A3:96:BD:81:96:9D:19:97:7E:83:D0:FC:FC:3E:1F:38:EF:85
X509v3 Authority Key Identifier:
keyid:A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b1:d0:d3:c6:43:a9:e2:88:7d:49:4b:a2:7b:af:f3:3b:6a:
b0:31:98:25:4d:a1:20:25:4c:52:94:c3:8b:4f:b5:71:7c:71:
4f:49:8c:bd:b4:61:90:92:42:6b:80:b2:d0:81:e6:1e:8a:3c:
92:da:1f:57:3a:a8:37:0a:71:6e:e0:2f:fe:5a:6e:55:e1:a8:
23:d1:94:62:87:e2:9c:1c:e9:1d:50:8a:d5:50:6d:15:e8:d4:
4b:d2:6b:e3:fa:a8:00:c7:d7:cb:77:13:c3:1f:b0:26:57:a3:
15:7d:a1:4a:9a:02:a9:e8:0b:48:64:ff:7b:04:83:af:88:35:
8e:0f:b0:a4:5d:95:51:fb:76:a3:56:09:77:22:a9:5e:aa:70:
1f:26:66:61:fc:3e:5a:e4:d7:5a:7f:5f:7e:b8:ca:5d:cc:3d:
3d:dc:80:83:5e:97:dc:a1:89:23:63:5e:1e:ff:8e:b9:08:54:
fa:ab:3e:6a:68:9a:80:b0:60:47:c0:12:10:43:2b:75:8b:dc:
b4:71:ab:5e:82:57:ad:87:96:10:d6:39:63:cb:74:03:01:4a:
3a:82:8e:e4:de:5d:5a:7a:8f:86:16:e7:1a:6f:b4:fd:83:73:
e3:a7:e4:0f:14:3b:be:fb:6b:24:e5:44:13:ec:9a:64:9a:cb:
52:07:50:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:36:14 2026 by rpki-client