
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
File: oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json)
Hash identifier: y4XUTPgR7d09M3mlU8KDbanoZEMcMXlWhI0I1vK0/pI=
Subject key identifier: CF:8E:09:21:D3:80:41:C8:A7:14:15:FB:FD:97:DA:F8:50:D4:18:B4
Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
Certificate issuer: /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
Manifest number: 46
Signing time: Mon 11 May 2026 08:33:47 +0000
Manifest this update: Mon 11 May 2026 08:33:46 +0000
Manifest next update: Mon 18 May 2026 08:33:46 +0000
Files and hashes: 1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: Yat6R2Ct7UNwNZcLy+U5HMuEncNKeZQA1/QQtL32u4Q=)
2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl
rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Validity
Not Before: May 11 08:33:46 2026 GMT
Not After : May 18 08:33:46 2026 GMT
Subject: CN=6a01946b-f484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:01:e3:a3:32:82:7b:7c:51:4b:27:03:20:b2:
cb:4d:01:7e:5f:b3:e0:ea:75:ea:83:01:41:bb:5a:
82:77:ad:b0:7e:ef:2e:61:d3:d4:80:7b:70:f4:cd:
13:ae:14:7f:89:d0:46:fe:b5:b0:46:05:46:c6:4c:
13:7c:16:94:64:60:f4:65:1d:70:06:de:21:ab:13:
42:c7:51:ec:bb:a1:e0:53:06:a6:af:a8:79:42:d9:
b6:f0:e5:88:af:9d:b1:9a:a5:ed:5a:3b:df:0c:d4:
57:2d:ce:9e:a3:20:af:2e:3d:d4:b2:56:67:a9:72:
f8:41:db:1c:ca:88:31:06:46:32:89:a0:4b:d2:56:
85:f3:bd:41:f9:7d:9e:04:8b:15:95:5c:77:c0:e8:
d7:b3:73:07:47:1b:5b:59:90:a7:8c:8a:4c:de:89:
01:9d:1f:53:56:2a:38:b5:90:eb:f6:fa:31:f0:5e:
9a:e9:39:1d:75:e3:b1:ac:96:e5:bf:c5:8f:7f:c9:
65:85:8b:21:ac:b7:72:ba:6e:7d:28:fa:36:41:07:
ef:13:5b:07:dc:c5:98:f3:24:eb:f0:cc:d7:11:15:
6a:ea:f1:41:94:b1:21:74:32:f8:4d:06:e9:49:00:
13:af:89:b9:aa:07:2c:85:00:aa:1a:18:2a:25:14:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8E:09:21:D3:80:41:C8:A7:14:15:FB:FD:97:DA:F8:50:D4:18:B4
X509v3 Authority Key Identifier:
keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2f:3c:0e:fa:04:d2:b8:33:7d:e3:1e:f5:28:15:81:70:9b:
40:b7:bf:b9:6f:cd:77:98:d4:1c:fd:0a:a9:ec:8e:54:c2:2e:
4b:44:78:7d:54:aa:06:e9:d5:0f:6a:b4:21:b9:b0:c6:14:5c:
2d:74:6b:7e:57:cf:36:be:fb:e3:2d:21:56:4f:e6:c1:d1:c4:
40:2b:ab:cd:d8:98:d9:f2:62:80:83:3b:e7:c4:d7:5c:2d:7d:
08:69:f3:87:86:a4:74:8b:e1:e1:f6:08:02:33:0f:d3:84:f0:
f1:69:f8:07:ec:b0:ee:5f:d2:ab:95:eb:09:3c:2c:bc:48:4f:
91:a4:e5:e2:3f:e2:35:02:71:51:56:da:b3:11:96:ad:4b:18:
5d:41:7f:df:0d:85:2b:ac:ff:59:b4:ba:b8:3c:8c:09:c0:59:
11:76:a9:d0:10:ca:c7:50:2b:88:64:f7:c4:56:7f:1b:bb:66:
ab:3a:e1:d5:3a:d5:f6:c5:81:c5:4c:fb:4d:22:72:e2:da:89:
ab:bf:43:b7:b1:dc:5b:fe:e5:7b:81:46:22:36:94:47:a7:6d:
39:52:96:17:2e:d6:f5:6d:cd:f7:b0:ee:a6:eb:21:3f:38:ad:
64:c5:73:e2:0e:35:97:7f:b3:72:68:95:cb:a8:3b:19:5c:ad:
80:12:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:50 2026 by rpki-client