
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json)
Hash identifier: cYSjPs/5U8X4wkdTX8JEwpk29tERWCz88lRACOwcTTg=
Subject key identifier: 14:62:C0:4A:D6:D9:0A:9D:B2:4F:42:F4:90:74:7D:6A:13:9D:88:28
Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Certificate serial: 08ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
Manifest number: 08E4
Signing time: Fri 24 Jul 2026 20:55:33 +0000
Manifest this update: Fri 24 Jul 2026 20:55:32 +0000
Manifest next update: Fri 31 Jul 2026 20:55:32 +0000
Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: TctTLRBtH5+b4cBd/zkyyhbTqv+FntsPzPD82EOU/fs=)
2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: 4i5AOZWsffBcYvR2KypBRmQ6TWACokAcBSGDEbGPTU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 20:55:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2285 (0x8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Validity
Not Before: Jul 24 20:55:32 2026 GMT
Not After : Jul 31 20:55:32 2026 GMT
Subject: CN=6a63d145-c90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:34:4b:80:1b:04:3c:a8:b2:9d:96:08:59:
d4:c0:11:ae:7e:42:79:08:5d:d9:c2:7e:c0:09:66:
8e:8c:d8:57:62:29:2e:e2:03:0b:51:d6:0c:8c:27:
7a:58:ab:72:dc:96:39:64:39:8e:e3:c3:31:94:65:
5e:d3:d8:10:9f:c0:93:6b:a7:bc:3e:c2:b7:53:a9:
ab:cf:6d:69:fd:26:2c:9d:f0:86:d5:c7:ea:f4:8f:
bc:11:d8:a8:0b:ce:35:a7:d5:48:dc:db:1e:fe:05:
d0:b7:b5:96:c4:89:34:88:ec:41:2b:77:76:7c:6f:
34:80:98:04:24:4a:71:57:41:43:bd:7f:47:ad:ff:
5f:99:2c:09:82:b3:c9:b9:9c:fa:df:8f:40:6e:69:
a2:0d:b4:a7:7c:1a:f8:42:a1:b8:5d:97:53:a2:c6:
80:00:e1:57:56:1d:0a:ef:01:64:47:8b:08:84:0b:
eb:c6:8f:7e:b3:03:46:b1:65:54:a1:41:0f:5c:b5:
25:61:46:2b:f8:cc:96:44:80:c1:05:cd:a3:3c:87:
fa:25:9d:20:e0:ea:cc:38:c4:9a:c4:28:6a:8d:73:
b1:99:c2:1f:e5:c2:15:59:1c:04:f0:5e:77:80:5a:
69:06:89:5a:85:89:02:59:47:12:a8:10:37:2d:f1:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:62:C0:4A:D6:D9:0A:9D:B2:4F:42:F4:90:74:7D:6A:13:9D:88:28
X509v3 Authority Key Identifier:
keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:73:01:2b:ab:54:63:9f:99:6d:67:06:a2:2a:cc:6d:6b:66:
b5:36:e9:19:2c:19:e0:15:56:06:f6:07:49:1b:ab:3f:9e:d0:
67:56:bb:0b:c6:3a:89:4e:bc:35:9b:15:85:d2:1a:54:6e:b8:
34:bc:67:ed:5c:8e:03:63:24:4f:0d:1e:33:90:65:38:77:d8:
0f:d2:23:06:dc:52:41:5a:41:a3:67:f0:a1:75:a1:14:8a:c0:
75:c4:9c:38:1e:b1:b7:56:76:0d:be:0b:55:4f:5c:af:d9:b9:
a8:54:b2:f7:87:e9:ca:12:b9:2f:76:7b:60:07:69:17:d4:12:
d6:5a:53:d4:c8:6d:f3:60:b4:43:1d:db:40:82:2f:39:ee:99:
66:27:f0:4e:fc:04:51:14:60:dd:cb:fb:98:db:ef:33:18:70:
69:e8:e5:67:7b:9d:10:af:80:06:81:53:f5:95:07:c0:21:f9:
dd:cc:b7:45:dd:4b:ee:98:d1:71:3d:51:39:95:67:ea:35:51:
7c:44:40:93:4d:48:c4:1c:5c:a7:c2:87:6a:ab:9e:36:97:74:
4c:70:0b:f5:0c:51:2c:dc:b8:db:99:7c:ea:a2:64:55:41:1c:
2e:48:a7:92:56:9b:4b:e5:33:3a:2a:7b:3b:61:86:fe:65:a1:
aa:e2:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:37:07 2026 by rpki-client