
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json)
Hash identifier: XNGW/io/woMDocCsxA48Qc109PicYLu0nKVJXG2tHl4=
Subject key identifier: 77:81:8F:35:A6:3F:B9:4C:41:2E:D7:46:2E:89:64:40:62:E3:38:D7
Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
Manifest number: 01D3
Signing time: Thu 23 Jul 2026 05:02:22 +0000
Manifest this update: Thu 23 Jul 2026 05:02:21 +0000
Manifest next update: Thu 30 Jul 2026 05:02:21 +0000
Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: 8EzxZRJNig2O/N+ObqMIQ3y1/l7JSNtbMP0QvyHQ7mI=)
2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: kEA6yeUhDISU7WpJDe7H86w819sEogR4lALDsAB0ROU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Validity
Not Before: Jul 23 05:02:21 2026 GMT
Not After : Jul 30 05:02:21 2026 GMT
Subject: CN=6a61a05e-fb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:68:c3:3b:72:e4:4f:e8:6a:d5:2f:01:32:
d6:f3:4e:06:a5:d4:f9:7d:ee:e8:a7:5a:f3:d6:09:
3f:fb:19:20:70:fa:9e:ab:f8:f3:96:10:88:94:e2:
12:73:50:b6:a3:98:44:15:cf:45:50:55:48:6c:b8:
be:0a:d9:c0:54:ca:4b:08:77:75:81:cd:0d:f9:82:
c1:26:b0:c0:1c:09:8a:86:34:c6:a2:e8:07:ef:92:
8d:fc:39:54:8f:2c:87:cd:45:f9:9b:89:b7:c3:12:
6c:0e:88:86:b7:5c:44:05:0a:c9:65:8a:2d:4f:7c:
3f:16:77:96:ec:d2:2f:a2:17:c0:99:37:36:10:66:
83:09:d4:05:91:62:65:ac:b2:e5:cf:03:79:51:bd:
5a:7b:8d:f3:2e:fe:7b:b7:69:d4:7b:23:f8:e2:c0:
33:34:82:4a:5f:dc:b5:fa:90:2f:ee:15:3b:81:3d:
95:de:b0:83:59:25:48:51:e6:d3:1e:f4:b3:ad:3e:
ff:d2:6a:29:55:3c:5a:0e:40:5c:2d:0c:12:e7:bf:
f2:cd:69:14:5b:75:06:ea:fb:3b:68:fe:30:4c:de:
39:56:38:a6:8b:d6:f3:0a:aa:fb:62:c6:8c:d3:9f:
31:f9:d6:48:fd:f2:ad:59:7e:0f:f4:8e:fd:58:98:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:81:8F:35:A6:3F:B9:4C:41:2E:D7:46:2E:89:64:40:62:E3:38:D7
X509v3 Authority Key Identifier:
keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:60:da:c5:11:9a:7a:4d:90:1a:00:7b:23:c5:6e:b4:e9:74:
75:b8:af:7d:27:ba:f3:90:dd:d8:ab:2b:1b:4f:c0:8b:7e:91:
11:b8:6c:96:2f:31:0d:73:19:44:00:f5:56:32:e5:9b:33:49:
1b:97:7d:b9:34:ad:85:2e:00:98:b4:87:cd:dc:4f:2f:ef:85:
25:d8:63:11:ef:16:6c:05:e9:76:0a:0c:39:e6:cf:db:50:fb:
1c:b6:c3:71:86:62:df:d3:5d:e1:05:f9:59:05:df:2d:df:b6:
b6:77:98:f0:bc:9a:b9:b3:0f:c9:30:dd:b1:26:19:65:14:46:
ea:6f:ba:ed:32:81:0b:d3:89:ad:14:4e:fb:ca:a6:fa:2e:25:
4b:c5:2b:4d:4b:0b:66:da:e6:23:60:0c:eb:c1:f4:6d:64:5b:
74:32:12:97:6a:ba:ec:e9:ff:e9:1a:5f:0b:97:ff:c6:e3:7c:
1e:94:b2:ee:92:20:a7:13:80:af:98:d5:94:9b:d4:06:38:0f:
07:c2:45:e6:53:38:0b:20:b1:bb:2e:46:55:36:f8:31:21:0d:
33:3e:9b:63:e3:b8:2a:a0:97:44:44:5f:d6:83:3a:ef:97:79:
9b:b0:d8:63:8e:2b:a3:78:5c:71:51:8e:0f:5e:ab:99:b2:53:
f2:32:e3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:29 2026 by rpki-client