
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json)
Hash identifier: iFfiehzBEZI/QzHhpEJO/P3rdEcpRRipS4po35OmUaI=
Subject key identifier: EA:9E:CC:AA:8A:F8:55:4C:95:34:09:AD:8B:D8:BC:78:E6:C5:B8:A1
Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
Manifest number: 01CF
Signing time: Thu 23 Jul 2026 05:03:06 +0000
Manifest this update: Thu 23 Jul 2026 05:03:06 +0000
Manifest next update: Thu 30 Jul 2026 05:03:06 +0000
Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: HkSdf3nIQqga+Zyrn7Ez7P727Si1E9UFwEZWxNUK2MI=)
2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: Gu3gLu/Zq+fJHK0nLLCq05QCFvC/IzAtjG0pre/fGVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Validity
Not Before: Jul 23 05:03:06 2026 GMT
Not After : Jul 30 05:03:06 2026 GMT
Subject: CN=6a61a08a-84a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:a6:7b:06:c8:8a:b1:87:ee:31:93:b7:9c:
7f:ad:15:d4:c3:2d:b9:4e:7e:82:5b:85:3d:94:0c:
a6:75:01:50:07:b0:7c:e5:f6:04:68:13:ac:ec:cf:
b1:47:82:4a:0e:8f:1b:a7:06:81:6c:92:c3:8a:4f:
1c:fc:b6:a5:79:77:e0:d3:47:86:55:ad:20:c1:41:
29:94:58:fa:a2:30:30:86:54:f1:8c:2f:c8:db:de:
ec:99:56:b2:33:2d:34:c1:5f:62:92:03:8e:6e:56:
db:87:df:f9:c1:64:e8:9d:22:1e:a9:e5:dc:b0:21:
dc:cd:43:6c:02:e8:75:99:d9:6f:4b:e0:3f:41:0a:
c8:02:fa:c8:32:9e:08:6f:03:1d:ac:a6:83:e3:ef:
5d:47:2e:3f:46:d8:a4:e6:77:26:8a:fe:72:7f:0b:
c6:a6:0b:bb:0b:45:ee:32:f8:0c:3d:95:2c:ff:d3:
a2:d7:da:f8:a5:e4:9a:f3:28:06:c0:46:46:f6:06:
a0:69:6b:40:23:92:d0:d6:7d:b8:ad:6d:1a:69:a0:
b1:3f:1a:4f:f1:1b:75:ad:2c:3a:ff:4d:5f:5b:30:
11:18:17:b4:8f:44:21:08:79:3f:42:eb:b5:1e:f5:
ea:fa:c2:a6:a2:0d:34:16:9a:40:1d:20:bb:9c:3f:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9E:CC:AA:8A:F8:55:4C:95:34:09:AD:8B:D8:BC:78:E6:C5:B8:A1
X509v3 Authority Key Identifier:
keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ce:02:e5:a1:e6:ff:93:00:de:69:bc:8b:e2:e2:78:34:66:
a2:74:ed:48:fd:4c:42:b8:be:b5:6c:a0:81:6a:92:8c:89:21:
5f:28:49:85:7f:7a:15:fc:6d:eb:fe:c3:43:79:db:c9:2d:9f:
88:7d:85:f7:16:34:01:ec:42:09:cb:96:2d:91:2b:75:bc:d3:
f5:3a:07:a6:7b:1f:ad:9a:a5:eb:60:1e:2d:44:a6:6a:c2:e8:
e0:57:a7:d4:e0:58:54:f4:7e:97:f5:2f:8b:00:4d:7c:d5:3b:
cf:66:b3:89:ea:75:bf:98:45:f3:8e:5f:ef:18:b5:de:ac:f9:
87:e6:af:d8:9f:f4:f4:0e:3d:a9:17:d6:70:0a:e4:01:16:98:
bd:15:64:a0:ab:0e:e2:3f:37:b5:7b:f0:6f:3b:84:e7:00:b8:
47:19:de:15:89:8e:57:ec:ed:d5:3d:56:fa:29:ad:f9:bf:21:
bd:29:9d:93:06:50:c5:89:40:ed:58:7f:50:f4:3d:b8:56:54:
58:ed:b3:89:7c:7f:9b:f7:64:91:4e:6c:ac:f5:68:0c:c4:4d:
18:d3:80:0a:be:86:d4:0a:b6:41:25:27:78:b5:d1:e3:0f:55:
62:70:45:15:12:24:05:a7:63:7b:a4:64:7f:cd:93:2d:d1:9c:
1a:e5:37:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEEyQzExMTAvBgNVBAUTKEEzMTU0RUM3MUFGRjBDRUMzNjhDNzk2RDI1N0MzQTlD
MDU4OUEzRkYwHhcNMjYwNzIzMDUwMzA2WhcNMjYwNzMwMDUwMzA2WjAYMRYwFAYD
VQQDEw02YTYxYTA4YS04NGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvnKmewbIirGH7jGTt5x/rRXUwy25Tn6CW4U9lAymdQFQB7B85fYEaBOs7M+x
R4JKDo8bpwaBbJLDik8c/LaleXfg00eGVa0gwUEplFj6ojAwhlTxjC/I297smVay
My00wV9ikgOOblbbh9/5wWTonSIeqeXcsCHczUNsAuh1mdlvS+A/QQrIAvrIMp4I
bwMdrKaD4+9dRy4/Rtik5ncmiv5yfwvGpgu7C0XuMvgMPZUs/9Oi19r4peSa8ygG
wEZG9gagaWtAI5LQ1n24rW0aaaCxPxpP8Rt1rSw6/01fWzARGBe0j0QhCHk/Quu1
HvXq+sKmog00FppAHSC7nD+jgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqezKqK
+FVMlTQJrYvYvHjmxbihMB8GA1UdIwQYMBaAFKMVTsca/wzsNox5bSV8OpwFiaP/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDMS83RkZERkI2NEMw
OUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RPdzJqSGx0Slh3Nm5BV0pv
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9fOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTJDMS83RkZERkI2NEMwOUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RP
dzJqSGx0Slh3Nm5BV0pvXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjs4C5aHm/5MA3mm8i+LieDRmonTtSP1MQri+tWyggWqSjIkhXyhJhX96Ffxt
6/7DQ3nbyS2fiH2F9xY0AexCCcuWLZErdbzT9ToHpnsfrZql62AeLUSmasLo4Fen
1OBYVPR+l/UviwBNfNU7z2aziep1v5hF845f7xi13qz5h+av2J/09A49qRfWcArk
ARaYvRVkoKsO4j83tXvwbzuE5wC4RxneFYmOV+zt1T1W+imt+b8hvSmdkwZQxYlA
7Vh/UPQ9uFZUWO2ziXx/m/dkkU5srPVoDMRNGNOACr6G1Aq2QSUneLXR4w9VYnBF
FRIkBadje6Rkf82TLdGcGuU3ew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:36 2026 by rpki-client