
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json)
Hash identifier: c5UCT0rg04GtANArnbXcW6Rb8S1TDGWm9AelPzJyX0U=
Subject key identifier: 51:F3:AE:4B:31:C1:94:91:60:32:3B:06:94:27:8B:50:38:04:62:AF
Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Certificate serial: 0672
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
Manifest number: 066B
Signing time: Thu 26 Mar 2026 22:25:36 +0000
Manifest this update: Thu 26 Mar 2026 22:25:35 +0000
Manifest next update: Thu 02 Apr 2026 22:25:35 +0000
Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: 8fGrxXhUkFFl4gKzBSp8nV/2p9GWWi+/hI4s/Z73li4=)
2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: LkWBUiZRF9C2VJ1E3RZPIAtHdVr7r2jvAKoSLz3FinE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1650 (0x672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Validity
Not Before: Mar 26 22:25:35 2026 GMT
Not After : Apr 2 22:25:35 2026 GMT
Subject: CN=69c5b260-b987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:38:2c:8e:81:0f:96:01:ff:8e:14:4c:e4:
30:4a:2c:d2:ae:5c:cb:4c:c4:7d:6b:65:16:29:89:
1d:0a:d1:2e:dd:e5:e1:91:21:f2:5b:79:a4:7b:8d:
de:d7:a0:39:f1:e2:d8:63:42:16:0d:e1:7e:91:cb:
c3:42:11:87:6a:02:8a:77:5f:b3:b5:ac:68:c9:8d:
02:09:a4:51:7a:9f:85:75:30:f7:56:a4:0e:bf:25:
8d:06:f9:a6:1c:36:e9:18:be:d4:84:dd:51:fd:78:
54:78:1a:1f:60:40:ee:6e:af:56:25:14:f9:74:92:
ac:85:b3:21:ab:3f:20:ab:45:ab:e9:cd:73:01:8d:
eb:ee:fc:85:2c:24:64:5a:f7:cc:bb:6c:3d:23:7e:
de:9a:ef:20:8d:78:b2:c3:ad:c7:d4:fa:0b:7c:4d:
3d:b2:b7:e4:63:49:2b:f6:1f:6d:62:f2:b5:cc:20:
d1:0d:e4:a9:c1:5b:8b:2b:94:d0:0f:da:f7:95:ec:
0f:8b:1d:a6:93:ba:45:9d:9f:d4:85:d6:84:91:08:
35:56:f5:8b:26:bf:32:f8:68:7e:50:7a:99:ca:ba:
d7:bb:6d:2e:aa:41:6f:8d:b5:f4:b5:67:58:16:38:
c0:1d:3d:8b:cd:5c:7b:5d:3c:d6:ab:6f:96:09:ca:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F3:AE:4B:31:C1:94:91:60:32:3B:06:94:27:8B:50:38:04:62:AF
X509v3 Authority Key Identifier:
keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9c:a5:34:8c:e9:70:6b:76:ba:b0:ed:ab:6e:fa:a3:8f:fa:
23:2d:ab:2b:ff:e2:a0:ca:f6:4f:93:f0:bd:11:f0:d8:00:bc:
08:e4:9b:e6:a1:58:e7:6c:05:ed:a2:a5:dd:b3:3f:da:e9:74:
10:aa:c4:71:f2:0b:96:85:de:09:5b:a6:a0:6e:d7:da:b8:35:
4e:89:61:45:a7:fa:f6:e2:92:9f:32:71:5d:b3:49:9d:22:d4:
01:d1:e2:cf:0d:b7:d4:6f:d9:ce:3c:fb:a7:29:d6:ba:fc:fb:
c3:81:77:8a:8a:77:04:f9:29:ba:b4:03:45:44:d3:49:27:c1:
35:2e:47:3d:51:5b:91:68:3f:5e:2f:42:56:ad:a5:5b:f9:84:
8a:71:fe:8c:2c:c7:6e:3d:91:b2:ca:ca:9a:83:ad:52:8a:fb:
a1:96:30:a9:24:c8:b9:83:7b:9c:de:d7:63:d5:d6:34:38:2c:
1a:8c:29:38:02:2f:53:1e:73:e9:e4:15:30:b0:80:3d:13:e6:
31:9d:86:58:e7:ab:f4:06:06:4a:0f:30:9f:ec:e3:b2:ed:d0:
9b:39:ae:bb:6a:98:93:68:eb:6f:d0:bb:a9:48:1a:67:f1:00:
a6:e7:b2:06:43:69:85:04:af:23:73:fd:bb:1b:6b:f5:6a:c4:
9d:a3:5d:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC
RDNDMzg2NUUwHhcNMjYwMzI2MjIyNTM1WhcNMjYwNDAyMjIyNTM1WjAYMRYwFAYD
VQQDEw02OWM1YjI2MC1iOTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsQ4LI6BD5YB/44UTOQwSizSrlzLTMR9a2UWKYkdCtEu3eXhkSHyW3mke43e
16A58eLYY0IWDeF+kcvDQhGHagKKd1+ztaxoyY0CCaRRep+FdTD3VqQOvyWNBvmm
HDbpGL7UhN1R/XhUeBofYEDubq9WJRT5dJKshbMhqz8gq0Wr6c1zAY3r7vyFLCRk
WvfMu2w9I37emu8gjXiyw63H1PoLfE09srfkY0kr9h9tYvK1zCDRDeSpwVuLK5TQ
D9r3lewPix2mk7pFnZ/UhdaEkQg1VvWLJr8y+Gh+UHqZyrrXu20uqkFvjbX0tWdY
FjjAHT2LzVx7XTzWq2+WCcq4nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHzrksx
wZSRYDI7BpQni1A4BGKvMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD
OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo
bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh
UnJacVotdVRTcWU5UERobDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS5ylNIzpcGt2urDtq276o4/6Iy2rK//ioMr2T5PwvRHw2AC8COSb5qFY52wF
7aKl3bM/2ul0EKrEcfILloXeCVumoG7X2rg1TolhRaf69uKSnzJxXbNJnSLUAdHi
zw231G/Zzjz7pynWuvz7w4F3iop3BPkpurQDRUTTSSfBNS5HPVFbkWg/Xi9CVq2l
W/mEinH+jCzHbj2RssrKmoOtUor7oZYwqSTIuYN7nN7XY9XWNDgsGowpOAIvUx5z
6eQVMLCAPRPmMZ2GWOer9AYGSg8wn+zjsu3Qmzmuu2qYk2jrb9C7qUgaZ/EApuey
BkNphQSvI3P9uxtr9WrEnaNdlQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:11:19 2026 by rpki-client