
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json)
Hash identifier: ltrRmSgZCHAdbNAowAYR7P9OeO+zfGes8EuyThqGMIU=
Subject key identifier: EE:66:40:B5:91:67:6B:FE:FA:C1:7A:53:94:84:36:9D:7A:7E:6B:69
Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Certificate serial: 03E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
Manifest number: 03D8
Signing time: Thu 23 Jul 2026 01:07:28 +0000
Manifest this update: Thu 23 Jul 2026 01:07:28 +0000
Manifest next update: Thu 30 Jul 2026 01:07:28 +0000
Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: /8DQEcCJMCcanyGofVQS9ssaPhW+GBpFFE29S39MoIg=)
2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: zU41dHVA7lg5HqNGf7meOX/A+lf9KSiIpMkJ1tgmeCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Validity
Not Before: Jul 23 01:07:28 2026 GMT
Not After : Jul 30 01:07:28 2026 GMT
Subject: CN=6a616950-e498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6e:b1:77:f0:53:38:2c:d8:68:5b:f0:2e:04:
75:86:7d:ea:57:54:b9:28:72:11:4a:c5:65:8a:da:
1c:cc:38:11:de:22:47:4d:a7:b9:7a:71:02:91:81:
bd:21:52:6b:5a:91:6a:4c:b5:4b:c2:75:dd:7b:be:
50:75:15:3b:98:ec:09:11:7b:8d:45:5a:06:6c:b5:
57:b0:4c:74:bd:cf:19:c7:61:1a:c4:03:7d:39:72:
df:42:7f:fb:8f:6e:63:b5:1d:26:18:27:2e:da:2c:
36:88:be:c5:d0:2e:e3:6f:09:50:6e:de:79:e7:49:
69:26:20:30:08:78:01:32:d9:5f:8a:44:2e:61:3b:
5c:c1:a7:57:0d:c3:49:6c:70:14:21:31:1d:60:29:
38:ca:40:a7:ed:4b:b6:7b:f7:7e:fb:63:13:9e:0a:
fe:45:cf:da:fe:6b:31:2a:9f:8b:1b:12:22:4c:a8:
6e:37:39:3e:44:4e:50:01:ea:93:e7:f3:99:0b:ad:
6b:0f:54:77:59:3f:14:06:fc:a6:bc:21:87:87:7f:
dc:d9:74:62:a5:6e:bf:5a:8b:67:55:4a:c5:44:cf:
4f:d1:bd:6c:2b:bd:bb:1c:ab:1f:1f:62:ff:f8:b3:
1c:e7:7b:47:cb:b5:7d:5c:55:e0:39:6d:d0:09:0d:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:40:B5:91:67:6B:FE:FA:C1:7A:53:94:84:36:9D:7A:7E:6B:69
X509v3 Authority Key Identifier:
keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d5:ab:b3:23:8f:3d:89:d2:17:1f:af:fc:dc:10:2f:0d:e4:
7e:e0:57:9e:83:03:42:7f:35:8e:07:8c:60:b8:d8:70:5e:be:
72:da:ac:b6:00:2c:c0:b0:3a:7e:4c:99:76:71:d5:c3:60:a7:
96:06:7b:ba:c3:d7:7d:0d:bb:72:05:d0:71:10:af:17:74:e8:
c5:79:9f:0e:a9:0d:ff:7c:db:44:6e:19:2a:22:ec:cd:0c:e4:
ef:61:2d:ca:de:52:da:01:8f:52:5d:16:3e:e1:89:29:70:50:
1f:b6:13:89:2a:0c:33:27:77:0d:86:13:6f:14:39:2c:36:bb:
9a:bc:89:34:0c:2b:cc:1d:1e:35:b5:c5:d5:9c:e6:81:fd:83:
eb:33:0d:cc:cc:a4:74:27:ba:12:e7:85:17:47:79:e9:1b:b7:
20:83:65:9b:9c:04:34:64:2a:25:eb:5e:50:85:8c:4a:4f:c2:
c3:2e:d8:5b:44:0b:26:55:b0:bd:c3:1c:fa:73:7f:88:05:52:
29:26:2c:1a:8a:f9:2a:c1:b9:b3:a2:61:8e:b2:a6:5e:17:50:
ef:e0:7b:ca:b8:c3:47:93:d7:9d:9f:50:92:1a:88:fb:92:34:
2f:af:66:1d:05:87:ab:ff:da:d1:83:b7:80:0a:8a:ed:43:15:
a0:81:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:50 2026 by rpki-client