
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
File: O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft (raw, json)
Hash identifier: ejqJHedQ9o75SpocTiDDC361Wgu09i0dpC+yK3376wk=
Subject key identifier: 9F:52:46:AC:5B:E4:EA:BB:D8:53:B4:C0:C0:1A:54:B8:0B:70:0D:87
Authority key identifier: 3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC
Certificate issuer: /CN=A916D2D2/serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
Certificate serial: 0B8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
Manifest number: 0B84
Signing time: Tue 24 Mar 2026 18:56:08 +0000
Manifest this update: Tue 24 Mar 2026 18:56:07 +0000
Manifest next update: Tue 31 Mar 2026 18:56:07 +0000
Files and hashes: 1: O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl (hash: 67xVwqjUMeSJlWkxmjJdFwCj81FdVZ38TfM4Tsvg9XI=)
2: E174463E4BD411EAAD10A710C4F9AE02.roa (hash: Fx0k0TQfkTjEx5QYzTZXVEk1I1QDmv0PoZpDBUY4GRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl
rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2958 (0xb8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D2D2, serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
Validity
Not Before: Mar 24 18:56:07 2026 GMT
Not After : Mar 31 18:56:07 2026 GMT
Subject: CN=69c2de47-270b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cb:61:4a:89:36:f5:03:e9:1c:c9:45:5e:1d:
15:ba:a9:02:b6:83:6e:6a:27:e0:d5:fe:62:5d:a3:
73:6b:78:cd:80:cb:d0:7c:21:36:9a:cb:e7:3e:f8:
ea:1b:39:58:2c:c4:3c:71:77:38:2b:6e:f1:57:b3:
27:dd:ba:53:9e:da:72:6b:2d:26:2d:1d:34:b2:d9:
b2:f5:1a:eb:ca:63:97:c6:50:ed:f2:c0:7e:3d:33:
17:eb:d1:28:6e:79:3a:49:cf:db:9e:e3:dc:f4:b1:
da:11:5e:52:f8:dd:14:3a:7c:2a:53:7b:bb:29:f4:
94:b1:e3:fd:9c:b6:0a:58:dc:dc:91:40:69:18:bf:
94:50:ba:56:1f:99:2f:17:07:f5:55:58:af:1a:01:
2c:f4:e5:59:ff:8e:aa:7c:54:1f:83:ca:1c:e8:0f:
8f:bf:bf:2e:eb:7c:cd:c9:5e:61:13:9e:31:50:ea:
3c:48:8e:7c:de:9a:de:3f:7f:76:07:a6:86:2f:ee:
6d:d2:8a:7e:39:82:45:29:02:b2:cd:c5:fa:ac:d4:
79:32:a3:ce:3d:9d:53:5b:bf:6b:2d:87:8d:38:0d:
11:7f:8e:f1:c0:d9:aa:87:d0:75:00:43:c6:5f:d3:
a8:09:3b:df:d6:1c:45:bb:7c:cf:4e:a5:ec:41:9a:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:52:46:AC:5B:E4:EA:BB:D8:53:B4:C0:C0:1A:54:B8:0B:70:0D:87
X509v3 Authority Key Identifier:
keyid:3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7b:c9:27:07:0d:96:1e:ee:a3:69:85:04:38:75:5e:fb:69:
46:68:d0:05:1d:87:cf:97:cd:8f:98:aa:88:49:e4:18:d4:15:
6b:df:cc:26:c6:f3:c5:a2:3e:d7:b9:dd:c2:f2:ce:d6:a4:8d:
f4:ba:87:57:57:19:30:40:14:84:32:7a:ed:88:af:19:9b:9d:
46:0d:12:d3:75:80:dc:2d:8c:9f:20:d7:17:81:c3:e5:65:a9:
ef:4c:2c:c9:0a:2f:55:c1:db:3f:70:7e:6d:bc:da:16:af:fb:
44:db:22:b1:69:00:64:0e:5d:38:61:27:85:71:18:ad:08:19:
c4:b3:85:30:5e:a5:ed:5c:3a:3b:59:a4:18:5d:c1:de:98:71:
6e:77:f0:6b:cd:18:87:d5:c8:da:97:30:a0:05:22:69:8d:60:
b1:5b:37:bf:e9:43:34:c6:f1:5f:43:47:50:db:16:7d:2e:37:
3d:ad:42:39:93:85:a4:5c:41:28:65:d1:ec:00:44:9c:78:bf:
ba:e7:54:4c:51:e6:f6:98:2f:7e:69:0f:a9:24:b3:4b:01:a5:
58:9d:fe:7e:51:91:08:85:c3:2d:be:76:a8:0c:51:11:b9:51:
bd:c1:6d:1e:5c:17:9e:a6:05:91:a9:ed:8c:c1:e1:67:03:8c:
fd:c1:c7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:07 2026 by rpki-client