
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json)
Hash identifier: tKjX8qBw0q5pfkSrnJ6aFMdMDk8keRC8WtazsiSEXNE=
Subject key identifier: 5C:95:1D:36:8A:03:7A:2C:06:92:0B:34:83:C2:DA:6F:84:F1:36:E6
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
Manifest number: 012E
Signing time: Fri 25 Sep 2026 05:51:02 +0000
Manifest this update: Fri 25 Sep 2026 05:51:02 +0000
Manifest next update: Fri 02 Oct 2026 05:51:02 +0000
Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: eBQizuJYcVg/GgAe8TGvmXhEqaLZ1Aa2bSJyIbd6blk=)
2: 41C8C708244111F1AF80D04DBB833773.roa (hash: P0OVA8RnrCkxwGNC5Oj/FAk/vhkA7eOmVQFaY4OMLYg=)
3: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: lVJ/wAuLoxmXnwU3EkGNm9UUsAUB6qqvPi8MZYUo1FY=)
4: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: aNrWLrutR5ArzXGRsTtMLurkk5UM/Q77zEZqj2DNM6w=)
5: D759EECE244011F1B0BBBC37BB833773.roa (hash: 4ZLnEVH62B/fFZNl3E3aTQ7rJ1PwOzf217E+4KcGPOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Validity
Not Before: Sep 25 05:51:02 2026 GMT
Not After : Oct 2 05:51:02 2026 GMT
Subject: CN=6ab60bc6-8c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:98:51:ed:cc:53:0f:00:1e:82:68:d0:14:
94:ee:db:06:41:f7:36:b0:fd:7e:5b:c6:39:cd:34:
8c:5a:c2:a5:ed:61:2e:ff:df:b4:ac:01:9e:72:88:
7c:c9:9e:db:b4:31:2c:1e:c5:14:d9:9d:df:89:35:
37:2a:de:28:ea:5e:f3:b2:4a:58:c3:0e:fc:68:a6:
06:8b:a6:53:6e:83:5a:86:02:8b:43:40:b7:53:fa:
ee:73:3e:ba:49:02:de:ff:83:f1:84:13:79:7a:53:
e4:b1:4c:ae:d2:02:e9:69:30:e6:7e:13:86:9b:69:
95:71:7c:63:da:61:78:96:d6:cd:a8:09:0a:76:7c:
1d:c0:a6:4f:9b:0f:88:79:d1:9c:0f:f3:4a:ad:52:
92:03:74:45:c0:d9:ae:33:2b:ce:85:30:78:1b:01:
4a:74:49:cf:3e:84:1c:85:d5:64:e7:d1:ae:4e:2a:
7b:8e:df:97:0c:de:5d:e3:6a:5f:4d:41:8a:11:cf:
ae:75:65:f3:f6:52:41:be:da:7a:27:5a:78:a1:e3:
89:67:4c:50:1d:58:8b:46:37:ea:fc:54:2c:0f:9d:
ed:76:59:a7:79:ae:bf:95:4d:dc:70:f0:02:b4:29:
74:40:69:93:df:1b:5e:31:04:e5:5e:26:d5:8d:ef:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:95:1D:36:8A:03:7A:2C:06:92:0B:34:83:C2:DA:6F:84:F1:36:E6
X509v3 Authority Key Identifier:
keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f0:c7:7d:21:93:95:5c:1a:a7:d8:a5:b0:b1:cf:0a:d0:5e:
c5:0b:23:b5:36:6e:0b:00:79:f5:3e:27:eb:14:8a:d6:0d:4f:
98:7b:bd:f7:68:a3:bd:80:b8:41:59:91:87:cc:5f:44:7d:42:
61:b3:c4:6c:57:5b:6e:de:41:de:ea:77:94:81:33:b2:0f:ae:
34:bb:11:36:6c:4a:a7:65:c7:2a:15:67:9d:58:7f:b4:d8:d3:
78:e7:dd:7a:3f:bd:e0:f6:06:09:ed:af:b2:66:8e:dd:9d:1b:
25:a8:9e:c3:3c:e9:4e:e3:e7:5c:75:29:1d:25:d7:e4:3c:e0:
a0:44:55:89:72:52:72:c9:1e:80:db:dc:b3:4a:01:43:0d:18:
85:70:58:13:12:56:ce:a7:59:ba:c9:ce:e6:0b:92:25:9a:60:
e8:7e:37:ba:a5:ef:2f:f9:66:39:4b:cd:8c:02:cd:d2:d8:99:
1f:33:4a:20:c9:6f:0d:c0:5a:16:e0:33:eb:76:b4:c9:15:2d:
1f:5c:f4:34:99:9f:c6:82:e5:13:0f:09:c5:bb:ef:2d:4e:f2:
e6:b5:90:7b:cb:25:9f:14:69:1b:c6:fb:69:61:0c:8c:9e:7d:
ab:ad:d2:e4:1e:2b:d3:b1:e7:b6:1f:35:17:9a:3a:d0:09:7b:
f3:9e:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:17:01 2026 by rpki-client