
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft
File: O-7kvaWgSxBLHXLmAcMJONuktkQ.mft (raw, json)
Hash identifier: tAD301Vcm7oHAOF296tQXSCc3uLazF/yc68dvHnmhZY=
Subject key identifier: 8E:F6:11:DA:4C:82:AC:1A:E9:22:C1:FD:DD:41:2F:E2:B0:DB:99:6E
Authority key identifier: 3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44
Certificate issuer: /CN=A911D2A3/serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644
Certificate serial: 15C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft
Manifest number: 15B5
Signing time: Tue 12 May 2026 16:45:59 +0000
Manifest this update: Tue 12 May 2026 16:45:59 +0000
Manifest next update: Tue 19 May 2026 16:45:59 +0000
Files and hashes: 1: O-7kvaWgSxBLHXLmAcMJONuktkQ.crl (hash: MfhE3EQsfav0ov+6yN07wrRQ2JRw62voN4gaj9ocelg=)
2: D9EDB272C44C11ECA07C2D77C4F9AE02.roa (hash: FtB2tGvplGzCJWlj88NsorSrUzak1GMw1nVvvDj7yFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl
rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5570 (0x15c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D2A3, serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644
Validity
Not Before: May 12 16:45:59 2026 GMT
Not After : May 19 16:45:59 2026 GMT
Subject: CN=6a035947-0205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:92:b6:12:82:27:7f:77:c0:6e:cf:2e:f7:
6f:45:00:84:b7:39:90:1c:21:d1:77:cf:3c:ff:8e:
ca:b6:68:c3:69:bd:f0:4b:7c:c2:97:2b:f6:2f:80:
46:53:14:5b:92:19:f9:63:a1:64:b7:df:b0:1d:6b:
c3:ac:d9:1e:74:98:0d:85:00:dc:80:82:79:dd:a5:
02:70:ee:96:2a:79:06:9b:db:e1:3d:01:43:0c:e5:
03:68:75:7d:41:14:21:7d:e5:52:6c:74:8d:12:5f:
aa:d5:7e:34:e4:bf:d0:f1:84:68:ab:63:05:23:3e:
27:38:f3:f1:14:ac:88:96:d6:8e:42:32:d3:b4:dc:
f0:53:bb:f0:f6:df:f8:bc:bb:4a:ba:10:f8:ce:d8:
22:3c:ae:3a:8f:81:c0:c6:be:48:7c:b4:f5:6a:fa:
75:19:70:49:af:a6:14:28:bf:6d:6f:51:f2:a7:13:
10:96:63:f2:da:9d:d8:a2:15:a1:3e:86:bb:46:a0:
27:9e:21:0f:34:01:62:26:c9:41:69:bb:f7:ef:52:
59:76:2a:31:98:4c:e5:7c:72:f0:1b:64:09:eb:6d:
b0:25:09:70:27:28:20:09:fa:74:b0:71:5f:89:60:
7b:e7:22:82:7b:51:f8:a6:e3:dc:42:42:77:bd:4d:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F6:11:DA:4C:82:AC:1A:E9:22:C1:FD:DD:41:2F:E2:B0:DB:99:6E
X509v3 Authority Key Identifier:
keyid:3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:02:3f:de:44:be:ce:59:90:4b:c1:75:01:fc:db:72:4c:e4:
35:06:05:5a:13:33:5c:5f:6b:9a:a4:fc:d5:dd:63:de:24:a4:
a8:76:7e:5f:72:5b:b2:59:7f:a9:06:45:d9:df:6b:af:d3:5c:
b0:84:6c:8b:bc:ef:9e:64:3e:d8:cd:20:47:ce:38:fe:e0:43:
3e:ad:9d:4c:34:31:d7:fa:08:5a:8d:10:7e:9e:57:45:61:dd:
36:b9:22:2b:90:8a:a7:f8:f0:be:d2:fa:d3:00:eb:2e:02:b2:
be:41:78:86:76:df:ea:93:94:71:7d:e5:e7:7d:cf:73:f4:ac:
9d:0b:4f:93:95:cb:a3:37:43:e7:37:40:23:f9:7b:79:12:90:
28:1f:d1:ed:6f:3f:2d:4f:48:08:e0:4e:f2:21:48:39:ee:42:
47:9a:6b:86:bb:bf:23:54:92:0b:79:3a:f9:14:b0:51:69:9a:
13:48:69:70:a2:54:86:91:1a:2e:29:75:2d:57:d4:6b:3b:f4:
d1:81:30:48:88:fe:b7:cd:fa:43:98:da:7b:22:c0:19:d3:a9:
d4:24:83:08:35:87:ed:08:7a:f1:d2:e4:00:ac:6f:3a:ea:5c:
5e:47:26:7d:39:3a:82:df:fe:48:26:e0:6b:70:2a:12:e3:8c:
ca:8a:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:14:36 2026 by rpki-client