
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft
File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json)
Hash identifier: NabTxQ9GoQZUEHQWGmYQr3erQUomp+nEVNaDvpK0hUU=
Subject key identifier: 51:19:08:45:FA:38:B3:2C:C2:2B:20:54:C2:5F:D7:C7:9E:7D:1D:22
Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA
Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA
Certificate serial: 1E25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft
Manifest number: 1E10
Signing time: Fri 24 Jul 2026 01:30:48 +0000
Manifest this update: Fri 24 Jul 2026 01:30:47 +0000
Manifest next update: Fri 31 Jul 2026 01:30:47 +0000
Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: fDuj4yFbG39W///Ff+6YmBI0yCPW5JB3lyJCCBucu5s=)
2: D544B54486EF11F19E006003A7EE528E.roa (hash: h826NuL9LphWVMKp0+bjOsjjWbr8Y2wIF8KmzaJ2k3Y=)
3: D64B0F1086EF11F19E006003A7EE528E.roa (hash: 3EGss4x0ac1o+zeKud2Kpa04Wj1gBtROV497ReGOk30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl
rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7717 (0x1e25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA
Validity
Not Before: Jul 24 01:30:47 2026 GMT
Not After : Jul 31 01:30:47 2026 GMT
Subject: CN=6a62c047-4cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:3b:e2:28:8e:fd:2e:da:93:98:59:40:a3:
03:c6:8e:18:16:ed:f5:78:cf:74:ad:dd:1c:8c:05:
e5:21:2a:2e:1a:3d:24:66:eb:1f:66:5e:0b:51:bc:
07:ad:ce:98:51:79:a4:ab:3c:71:58:a7:9e:15:2e:
14:5a:0e:54:9f:41:91:76:46:b5:b1:cc:73:83:76:
25:83:50:0d:ff:60:47:6b:fd:59:66:55:99:98:3b:
16:7e:93:eb:cf:6a:95:42:87:24:a0:f7:37:69:a9:
5c:85:62:7a:7f:b1:a6:8d:c7:2c:fe:23:58:8e:d9:
3a:24:ba:b9:e6:e5:0c:d1:dc:1e:fa:cd:1f:6c:e5:
9d:e6:5a:10:d1:fe:12:5e:ac:b6:ba:2d:7c:3b:45:
f8:30:96:17:38:19:d4:18:c1:12:a6:b3:a5:95:6d:
52:de:96:c3:c7:68:1d:9d:c4:f4:59:dd:0e:e1:e0:
1c:62:c1:90:45:95:05:15:6d:39:72:d1:13:29:07:
a6:1a:e2:6a:b4:68:03:2a:9c:e4:ac:58:d1:e8:ff:
6d:42:c1:96:2b:47:c7:05:d3:7d:ad:4c:cd:44:e0:
83:fe:1c:2a:ee:cd:a8:60:ae:c6:46:f5:3a:d3:0d:
0f:43:9c:6c:a0:3f:a5:5d:b1:4d:a0:86:8c:54:b7:
ea:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:19:08:45:FA:38:B3:2C:C2:2B:20:54:C2:5F:D7:C7:9E:7D:1D:22
X509v3 Authority Key Identifier:
keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:d5:ed:63:ad:7a:ce:36:a2:d0:1e:58:02:a9:84:6c:38:8c:
94:07:29:67:4a:72:35:d1:b4:d2:82:7e:77:c4:9a:c8:d3:60:
44:0e:8e:b7:cc:22:47:2c:b2:8f:4c:f0:75:e1:d2:ed:a1:fc:
0d:19:6f:9f:24:67:c4:74:41:b9:a2:04:28:d7:9d:3c:cb:3e:
34:bb:1d:41:b6:05:29:a1:0c:d8:a3:e9:6f:db:4d:eb:97:15:
34:22:e2:eb:38:23:67:3d:0f:ef:3b:95:54:c0:03:14:ff:ef:
00:5e:69:db:99:27:64:3e:85:b9:68:d4:f2:ed:4a:c5:98:c1:
d6:35:f9:3a:15:f3:b2:76:a5:eb:34:c6:e5:e4:ca:56:a3:bc:
7b:fa:85:42:21:85:7a:ee:05:f7:ef:fd:0e:28:c7:75:7e:81:
ce:8a:01:65:2f:46:84:c4:df:58:ea:20:19:2e:fe:fc:81:19:
a6:5c:b4:92:56:31:51:ee:12:91:11:9d:e0:d9:ed:ea:0f:12:
e3:e1:cd:84:64:29:aa:45:55:87:77:ee:4d:ec:de:2c:0e:a0:
6e:f6:36:33:63:60:9d:74:d9:f6:5a:1d:fc:62:95:9c:c7:ce:
58:c3:4c:3d:c4:4c:ff:c5:bf:6a:c5:90:3d:fc:5f:59:7b:5e:
ff:68:d2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:21 2026 by rpki-client