
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.mft
File: oC-hN36Jc9g06JmSEuwsVwlg380.mft (raw, json)
Hash identifier: 1wCGBmQTyKVsHugdIL+lTZFPyauoIgK6nKWOSUvhNwc=
Subject key identifier: 20:65:7F:AF:9F:24:67:F9:F4:8E:3B:E7:AB:D5:BF:F1:BC:F5:E7:2A
Authority key identifier: A0:2F:A1:37:7E:89:73:D8:34:E8:99:92:12:EC:2C:57:09:60:DF:CD
Certificate issuer: /CN=A912AF78/serialNumber=A02FA1377E8973D834E8999212EC2C570960DFCD
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.mft
Manifest number: 15
Signing time: Thu 23 Jul 2026 11:06:39 +0000
Manifest this update: Thu 23 Jul 2026 11:06:39 +0000
Manifest next update: Thu 30 Jul 2026 11:06:39 +0000
Files and hashes: 1: oC-hN36Jc9g06JmSEuwsVwlg380.crl (hash: ww42JOZrnqQBpWMxOUTQ92ZnVCAZYdSjSSn4I3PtUq0=)
2: 92F6F8D0866A11F19ACF0A6359A30FBC.roa (hash: OxQYq5Pl6LLzBR7Hlyn/TUzcpXJUxM8IGIxor8rYXrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.crl
rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AF78, serialNumber=A02FA1377E8973D834E8999212EC2C570960DFCD
Validity
Not Before: Jul 23 11:06:39 2026 GMT
Not After : Jul 30 11:06:39 2026 GMT
Subject: CN=6a61f5bf-78b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:33:67:10:fb:ba:ea:77:87:60:ad:7d:e1:
79:f1:dd:bb:e0:98:73:f4:02:cc:a9:df:f1:b4:70:
05:0a:f2:0a:3c:68:e1:d7:f7:4d:08:14:ce:45:de:
72:ca:de:58:a4:82:96:2b:5d:54:6c:e1:1c:8e:26:
1f:56:35:56:38:24:4e:6a:71:e6:4a:9b:1a:e8:46:
5b:d5:4f:bd:7a:5e:9d:66:74:9b:b2:71:97:fd:3d:
bc:fa:cf:53:fd:ab:fa:bf:5d:95:72:69:b3:23:2a:
f5:50:33:ee:8a:30:4c:aa:00:3c:6b:20:99:af:65:
15:2f:39:99:15:9a:70:61:58:06:78:56:6a:3f:81:
58:6a:b5:ec:78:a5:41:1c:da:6a:c4:d8:be:97:d3:
de:89:f1:af:20:eb:8a:49:53:b8:1d:09:5f:2a:f5:
52:d9:d7:b8:96:a3:e4:26:3e:2d:c4:1e:7f:3d:aa:
d9:fb:23:25:8e:20:1f:18:b9:9c:20:16:5b:ec:34:
7e:bd:f7:6d:a7:1b:e5:af:b3:c5:81:6c:6d:92:08:
fa:e0:32:4e:79:4a:34:22:7e:18:3e:7f:3d:91:79:
20:b4:18:75:a2:99:13:ea:65:68:25:19:7d:e4:ab:
e7:e2:0d:25:cf:6e:06:e9:d7:25:ad:06:06:ce:1a:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:65:7F:AF:9F:24:67:F9:F4:8E:3B:E7:AB:D5:BF:F1:BC:F5:E7:2A
X509v3 Authority Key Identifier:
keyid:A0:2F:A1:37:7E:89:73:D8:34:E8:99:92:12:EC:2C:57:09:60:DF:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:e0:5f:c9:98:93:98:c3:61:17:2c:5e:fe:b5:68:d1:a3:de:
9f:67:98:fa:4e:55:c0:ac:a9:78:a5:93:00:30:85:44:38:00:
27:21:c1:f5:cd:3b:e9:70:08:3b:e6:a0:2c:5a:6b:75:a1:10:
c3:7c:e4:0c:da:3f:77:bd:97:51:51:49:87:14:a6:37:95:a6:
80:81:3b:54:bf:54:11:9f:f7:43:fb:be:e8:b1:8b:fe:d4:96:
d3:1f:29:84:83:50:52:67:f2:e8:27:5e:16:d9:48:49:28:7d:
3d:50:e9:08:9e:c0:dd:4a:bd:a0:6b:42:5c:7f:7b:22:18:10:
cf:a8:12:88:27:37:7a:c1:d8:ee:cd:1c:35:c5:2b:4e:d8:05:
df:7c:75:ef:fa:89:26:d3:be:ae:d1:ba:f6:ef:a5:2f:e9:03:
8d:2d:67:c7:d1:22:6b:0a:4e:e9:d7:85:37:b8:9f:4f:ab:b9:
9b:77:da:d7:88:17:bb:3a:a4:9c:f0:be:c5:67:0c:1f:db:ca:
c5:82:c4:88:85:3d:32:55:ac:06:53:13:71:23:b5:0d:0d:d4:
e3:02:f6:46:b9:d1:cd:60:c8:55:16:4c:d9:ee:31:46:9f:27:
4f:7d:7e:a8:35:ac:c4:2b:95:06:11:0b:ec:47:79:a9:13:f4:
d5:68:bf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:44 2026 by rpki-client