
$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
File: OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json)
Hash identifier: 8gFRXQCQ13MA96lC1NOpoo+/8RmMeXna6HmRwSm3g4g=
Subject key identifier: 40:96:D0:65:E3:8F:78:A6:45:C5:EA:3E:C5:B6:0D:61:63:27:4F:3C
Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07
Certificate issuer: /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
Certificate serial: 13F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
Manifest number: 2587
Signing time: Wed 22 Jul 2026 17:01:40 +0000
Manifest this update: Wed 22 Jul 2026 17:01:40 +0000
Manifest next update: Wed 29 Jul 2026 17:01:40 +0000
Files and hashes: 1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: qdcntQeZUECexLf9aeZnfWfiD44yDkV0MguMZzo3TIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl
rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5111 (0x13f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
Validity
Not Before: Jul 22 17:01:40 2026 GMT
Not After : Jul 29 17:01:40 2026 GMT
Subject: CN=6a60f774-1302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:93:25:e5:f6:0f:a0:a0:8b:09:ba:c6:96:
36:f9:29:e3:6f:cd:4f:48:6d:93:34:ee:6a:c9:5b:
0d:5a:cb:47:72:a3:cd:f2:fa:27:5f:c8:3d:72:8c:
91:a4:05:05:8d:90:86:8b:82:89:e2:11:c5:ab:96:
2c:86:1d:70:63:72:4b:2f:34:47:8d:a1:46:2c:b0:
f8:0d:f7:69:ed:5b:de:51:59:cd:66:74:4e:6d:c5:
4d:bc:b0:b4:1b:7c:e9:32:04:16:27:d2:37:20:e1:
bf:b7:69:04:33:cd:54:f1:86:00:1e:30:90:0c:a5:
42:cf:97:3b:bd:b0:0a:0d:50:1b:d2:cb:69:86:13:
94:53:04:45:6a:f4:db:0e:95:7c:33:8a:f8:b6:0d:
4e:90:01:df:55:08:4b:ff:f0:d1:88:67:08:c6:30:
56:b4:e5:e1:24:23:46:0e:b9:9d:87:29:fc:7f:af:
36:3e:67:0a:b7:78:72:d2:69:6e:5c:d1:d3:30:c8:
79:90:6f:fc:db:d1:72:0e:9a:3b:15:77:76:28:9c:
a3:99:9e:44:0a:66:c9:61:2c:8e:42:cf:08:21:59:
3f:04:86:f0:1d:09:1c:a6:97:c3:3d:39:49:04:3a:
e9:0d:2f:58:68:6c:65:02:d2:03:dd:18:e4:a5:04:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:96:D0:65:E3:8F:78:A6:45:C5:EA:3E:C5:B6:0D:61:63:27:4F:3C
X509v3 Authority Key Identifier:
keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:15:18:20:c0:e4:88:43:b1:47:90:1e:2c:b2:c6:22:26:b1:
7c:50:6a:fd:1d:33:fb:4d:43:9e:46:02:8d:bf:20:4f:63:c1:
50:4d:0a:ad:3a:c1:e1:e9:f9:ff:3d:83:dd:85:6e:3d:7a:44:
8c:af:f3:24:0f:c5:7c:a2:1e:d9:b7:75:5a:3a:d7:27:a2:27:
39:66:74:15:21:a6:6b:14:ed:0f:70:32:bf:b6:68:bb:f8:f7:
9d:8c:dd:17:17:8a:cf:d1:16:cb:d5:6e:34:53:c6:7a:44:36:
1c:3c:0f:6d:55:4b:1c:33:a2:cb:5a:2c:ad:fd:dd:20:f7:b7:
78:24:4d:37:76:26:7d:5c:ee:33:dc:66:9e:64:39:e8:0d:19:
eb:12:bc:dc:f7:3c:35:58:ae:79:d1:66:d8:bc:13:06:ed:c8:
16:3c:dc:88:57:96:84:a3:41:98:fc:85:10:ed:d6:a5:b4:4d:
f0:55:69:d7:a2:5b:05:35:ed:f5:b5:41:0c:f9:10:fc:0f:82:
b2:09:c7:bf:94:2f:b1:90:c5:7b:7c:d3:ad:50:9c:77:b6:0c:
ae:ae:c6:a1:93:7b:5a:3a:1c:0a:f8:17:6d:ca:87:32:b1:67:
b3:55:c9:72:cb:d6:60:40:b7:49:23:a5:1c:f2:b0:b6:51:b0:
80:a5:0a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:47 2026 by rpki-client