
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft
File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json)
Hash identifier: Ap7fbOAHiTup5BqtvsMk1eDwf53Stb5AVLiryMsFTO8=
Subject key identifier: 70:78:35:62:AB:27:A3:C7:97:75:CE:37:CD:D2:13:2C:10:6C:43:19
Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86
Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft
Manifest number: 01ED
Signing time: Thu 23 Jul 2026 04:39:58 +0000
Manifest this update: Thu 23 Jul 2026 04:39:57 +0000
Manifest next update: Thu 30 Jul 2026 04:39:57 +0000
Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: ZKp2TY/Mi4spzblYPvzQmhB6jCQQpeUDZJH0/HkL7vQ=)
2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: GM/TYAUFUCny0Saz92cbiRCqbmb1aqzepH4OiX/MKnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl
rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386
Validity
Not Before: Jul 23 04:39:57 2026 GMT
Not After : Jul 30 04:39:57 2026 GMT
Subject: CN=6a619b1d-847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:e0:fa:63:c8:80:f6:f4:13:87:93:b6:93:
b4:b0:be:cd:b0:8a:86:b1:47:19:a5:0d:0d:29:b7:
e2:b4:15:bd:b2:2a:2f:da:98:25:69:63:96:b8:42:
67:01:f2:d3:fa:a1:0a:d7:7e:84:06:41:10:71:55:
c4:3c:e0:34:63:b6:82:32:3c:f9:10:c3:4f:14:27:
12:3d:b3:79:c6:62:fb:f0:3e:9d:d0:7b:6b:34:9b:
a5:60:49:3a:a5:dd:9f:2f:85:a0:b6:51:13:6f:a0:
e9:36:15:01:66:96:c1:02:de:77:b8:1d:f7:92:a5:
3a:39:1d:55:60:c7:eb:db:35:e3:45:39:fa:3f:65:
6a:27:2c:83:96:a2:27:93:32:62:08:4c:99:49:62:
24:ba:9a:25:98:e3:6e:43:f8:6f:52:75:7b:85:49:
b4:a1:ff:60:43:98:8f:38:49:4a:a7:46:6c:7b:fe:
f2:7d:c4:9a:62:f4:6d:f2:49:0c:f6:05:f5:2a:2f:
0e:19:c8:1f:5b:5e:75:8d:85:59:0c:84:60:4a:b1:
c8:7e:ad:ed:cb:2e:c3:af:90:38:83:ef:e9:b9:e4:
63:da:b5:0d:6c:e2:bf:a5:9f:e7:f5:07:7c:22:ef:
7d:38:ae:09:53:a1:89:8f:66:5e:c3:e2:8e:dc:8c:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:35:62:AB:27:A3:C7:97:75:CE:37:CD:D2:13:2C:10:6C:43:19
X509v3 Authority Key Identifier:
keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8a:5a:e3:5c:6a:c4:1c:97:a2:c8:01:f2:38:c9:c8:9f:fd:
d3:b6:76:75:e5:88:60:d0:12:13:f3:0c:47:56:0f:49:83:dc:
e3:4e:87:57:c3:eb:d3:37:f0:45:5f:85:f2:c6:d4:22:8b:07:
52:89:fe:94:6f:ef:06:1f:98:3c:80:65:ed:b4:76:a3:2d:63:
d7:48:2b:bb:4d:61:14:d4:bc:62:86:e6:6a:58:10:d0:12:75:
c5:ec:00:34:fa:d4:84:5a:b6:14:2a:78:68:11:2f:a3:8f:85:
5b:c7:51:e0:b0:4a:a1:65:fc:56:25:bf:d9:39:29:7c:01:b1:
87:04:f7:eb:de:cc:09:8a:e7:67:13:64:69:63:c7:a2:73:6c:
6a:59:bb:bd:c3:89:60:07:9a:7d:f2:16:f9:c7:3b:de:18:fa:
c7:c2:7f:ed:ff:94:5e:af:47:8b:8a:53:54:60:90:78:d0:26:
fa:21:de:14:1a:05:92:52:a7:b1:3b:b3:68:fe:ec:b8:61:6b:
e4:af:56:8d:2f:f8:a7:55:79:d1:c0:9a:c7:67:64:20:1e:b3:
6c:00:7a:10:45:a0:cd:91:89:13:e4:77:54:fc:42:e2:2d:5e:
53:06:a1:cd:b5:bd:29:9c:21:ec:05:14:09:67:63:2d:3a:c5:
c8:55:22:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB
MzM5RTczODYwHhcNMjYwNzIzMDQzOTU3WhcNMjYwNzMwMDQzOTU3WjAYMRYwFAYD
VQQDEw02YTYxOWIxZC04NDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAws/g+mPIgPb0E4eTtpO0sL7NsIqGsUcZpQ0NKbfitBW9siov2pglaWOWuEJn
AfLT+qEK136EBkEQcVXEPOA0Y7aCMjz5EMNPFCcSPbN5xmL78D6d0HtrNJulYEk6
pd2fL4WgtlETb6DpNhUBZpbBAt53uB33kqU6OR1VYMfr2zXjRTn6P2VqJyyDlqIn
kzJiCEyZSWIkupolmONuQ/hvUnV7hUm0of9gQ5iPOElKp0Zse/7yfcSaYvRt8kkM
9gX1Ki8OGcgfW151jYVZDIRgSrHIfq3tyy7Dr5A4g+/pueRj2rUNbOK/pZ/n9Qd8
Iu99OK4JU6GJj2Zew+KO3IzTowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHB4NWKr
J6PHl3XON83SEywQbEMZMB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky
QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p
T29VdWxSVUdYSVdqT2VjNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqYpa41xqxByXosgB8jjJyJ/907Z2deWIYNASE/MMR1YPSYPc406HV8Pr0zfw
RV+F8sbUIosHUon+lG/vBh+YPIBl7bR2oy1j10gru01hFNS8YobmalgQ0BJ1xewA
NPrUhFq2FCp4aBEvo4+FW8dR4LBKoWX8ViW/2TkpfAGxhwT3697MCYrnZxNkaWPH
onNsalm7vcOJYAeaffIW+cc73hj6x8J/7f+UXq9Hi4pTVGCQeNAm+iHeFBoFklKn
sTuzaP7suGFr5K9WjS/4p1V50cCax2dkIB6zbAB6EEWgzZGJE+R3VPxC4i1eUwah
zbW9KZwh7AUUCWdjLTrFyFUi3g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:38 2026 by rpki-client