
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft
File: oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft (raw, json)
Hash identifier: ZakDR3/FqIGP/o5nSOsUjb0KS0ISiR5/izgNQJU/IB4=
Subject key identifier: D0:21:FB:81:72:BE:61:C5:B8:A0:D8:90:97:73:28:73:6A:15:A8:B9
Authority key identifier: A0:88:50:D5:31:5F:74:B6:14:8C:2E:56:F9:64:A7:DC:19:36:40:AE
Certificate issuer: /CN=A9111537/serialNumber=A08850D5315F74B6148C2E56F964A7DC193640AE
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft
Manifest number: 11
Signing time: Thu 23 Jul 2026 11:13:32 +0000
Manifest this update: Thu 23 Jul 2026 11:13:31 +0000
Manifest next update: Thu 30 Jul 2026 11:13:31 +0000
Files and hashes: 1: oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl (hash: Gsrlo9wSuySp6B1KqPi6HC8Un5307RvKt9ara4hEZBI=)
2: D5D654E4760611F1B28E97E07AA30FBC.roa (hash: LKzEPMeNq68lEF5DAAViO1AMnnXw1fNEUoGr5S01Lg8=)
3: -f1KKuk3XOdvY5Wq0W7fBdDDcis.asa (hash: 34xWYncooXu/pLgDlCTm9aAnxYEkji43aa8EWG7l/8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl
rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111537, serialNumber=A08850D5315F74B6148C2E56F964A7DC193640AE
Validity
Not Before: Jul 23 11:13:31 2026 GMT
Not After : Jul 30 11:13:31 2026 GMT
Subject: CN=6a61f75c-256b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:53:f5:35:51:40:bf:ad:be:36:df:c9:67:
ed:a1:a4:15:80:db:ee:8d:7e:d3:62:4a:47:eb:f3:
18:aa:86:14:fe:92:24:de:aa:3b:c8:c0:3f:6c:cf:
3c:96:f0:64:b5:ad:95:e9:81:9f:56:61:35:14:cb:
f3:52:97:2d:75:9d:7c:ce:de:ab:3d:da:61:45:6c:
a5:94:ec:b2:44:a1:2f:71:13:9c:f8:4d:ea:59:05:
da:20:76:c2:9a:77:8a:aa:71:56:59:c3:da:d8:64:
e5:ab:c0:84:b3:7b:cc:f0:b2:b3:64:7c:7d:cd:d9:
2a:3e:e0:00:13:6c:28:93:56:72:5d:85:27:d1:0d:
57:c7:61:31:61:75:0d:72:d5:69:03:1b:7f:ba:c9:
14:99:5a:59:57:10:29:8c:81:30:ff:b0:c3:0c:27:
fa:6a:72:00:fb:52:ec:0a:c1:c5:4d:23:e9:e5:b4:
b7:f4:b8:4f:69:ea:04:31:48:db:36:d1:36:39:e9:
ea:16:86:04:5a:13:99:1e:61:ad:80:77:f1:5a:94:
a5:aa:a2:76:57:c0:2f:ad:a3:c4:ef:d6:56:fe:46:
ad:15:c1:ca:1f:81:d4:bf:0f:05:58:02:6e:46:0d:
71:44:44:ff:c9:1e:f0:fe:44:cc:00:e0:f2:b6:94:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:FB:81:72:BE:61:C5:B8:A0:D8:90:97:73:28:73:6A:15:A8:B9
X509v3 Authority Key Identifier:
keyid:A0:88:50:D5:31:5F:74:B6:14:8C:2E:56:F9:64:A7:DC:19:36:40:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:45:4a:db:3f:df:d8:60:78:08:50:71:f6:2e:ff:54:1e:7a:
22:b7:7b:34:04:88:33:64:00:d6:a9:3e:ff:c4:2c:ef:4b:d4:
8f:39:e7:48:48:9b:d3:fc:38:18:25:52:14:16:61:3a:75:80:
8e:75:97:c3:2a:46:65:b6:4d:fe:c7:df:bf:23:b0:35:c0:31:
78:35:95:78:d0:09:c6:c7:ac:cf:00:fb:53:94:2a:51:27:02:
a0:94:85:bf:4e:2a:17:0a:d6:aa:1e:0b:4e:70:b5:9c:15:24:
ad:cb:fe:0c:53:2e:ba:7d:92:14:78:3a:00:9e:bf:39:8d:6f:
d0:81:c7:39:e7:9f:cb:ac:24:fa:21:af:10:69:24:41:77:1d:
40:7e:46:45:5d:18:4b:77:81:ba:40:f7:7d:e8:ab:e5:dd:28:
be:49:02:01:32:e2:1f:1e:6c:65:59:0d:21:9e:73:d7:1f:c6:
39:90:28:cf:51:97:2e:24:ae:93:92:c1:09:2e:07:00:9d:df:
1d:9b:5e:3f:3c:d8:33:a1:31:19:8d:ab:ed:b0:af:09:02:fd:
50:11:72:ab:9c:be:dd:92:18:c7:83:8f:ed:35:d9:17:02:77:
ed:c3:f0:2a:62:a1:de:3d:32:10:3f:6f:eb:e7:ad:62:31:0b:
75:5a:71:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:08:18 2026 by rpki-client