
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json)
Hash identifier: KlEOz6MwAkEr7uwmXztmckoSmCOHOYwWUZfG4zffPdI=
Subject key identifier: DE:9C:0C:55:6C:94:93:00:C3:F7:E2:D9:75:60:0B:8E:A0:3F:CA:01
Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
Manifest number: 0163
Signing time: Mon 11 May 2026 04:56:41 +0000
Manifest this update: Mon 11 May 2026 04:56:40 +0000
Manifest next update: Mon 18 May 2026 04:56:40 +0000
Files and hashes: 1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: 3cnuTGQNMpSrPJ0lS+twhc6/PuTtZaHrHF/M2og1WJc=)
2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: 2Z5IzjJNdD4kG65ZpOb5f1Ky7VDv275TeVLHGASGOqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Validity
Not Before: May 11 04:56:40 2026 GMT
Not After : May 18 04:56:40 2026 GMT
Subject: CN=6a016189-b080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:62:a6:c8:cc:36:07:3a:28:84:bd:fd:29:
b6:8b:dc:7b:8a:41:90:b0:af:47:83:78:af:43:6d:
f8:75:5c:50:a4:46:6c:d8:a8:d2:f1:d8:07:af:8b:
bd:53:a6:c0:f3:01:d2:13:c3:5e:c0:94:b0:a6:9b:
20:62:d6:8b:c1:1a:69:b7:0e:e1:cc:75:18:b6:1a:
96:7f:41:42:70:b9:a4:17:89:76:61:1c:1a:dc:71:
58:4c:37:cb:a5:36:79:82:96:18:ae:89:c0:08:bc:
58:78:2e:de:20:73:5e:0f:6b:87:b1:db:f0:2d:02:
4f:29:b9:25:67:ca:f9:1f:ea:a9:11:77:12:1d:e8:
6f:27:86:ee:e2:b3:df:27:53:9a:44:a8:6d:d4:c8:
be:ec:a0:eb:c9:90:78:3e:a8:ea:5c:d3:87:9e:d6:
f9:12:b6:16:d7:16:eb:bf:7f:95:04:fc:d5:5e:d2:
5f:56:d8:c1:48:b2:a2:30:83:30:08:f6:fe:63:1f:
3e:65:a3:69:6d:9a:61:9c:18:d8:38:7f:4a:de:82:
66:de:10:be:b5:67:27:33:c0:5f:d4:24:38:f4:ba:
53:e2:2a:80:a7:f9:f9:78:86:89:56:d7:38:fd:f2:
93:11:23:23:2d:0b:a1:f8:f8:08:ea:85:c7:82:6a:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9C:0C:55:6C:94:93:00:C3:F7:E2:D9:75:60:0B:8E:A0:3F:CA:01
X509v3 Authority Key Identifier:
keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:47:cc:d6:f5:de:ec:63:58:d4:28:74:d4:da:51:79:29:10:
35:ca:cf:33:c5:0e:75:20:b4:5e:1a:aa:2a:b2:22:b3:3b:d5:
ef:f2:98:e7:df:8c:bd:c3:b1:ed:e8:55:c9:04:6e:34:42:73:
39:54:45:fe:dd:0d:ee:54:cd:3e:8e:06:bf:cb:e1:d5:13:7e:
b5:0f:87:9f:ab:29:6c:06:a1:ec:78:4c:58:1a:ca:64:4e:1c:
06:58:ca:2f:d9:3f:8f:0d:a1:a2:85:17:66:c4:35:bb:b5:23:
c0:50:69:a3:a4:46:cf:1e:d0:4a:b4:5e:1c:64:06:3e:c9:39:
85:55:10:0a:9f:3e:9f:13:02:07:f0:81:b3:72:c1:aa:ce:cf:
14:af:2d:10:2c:72:e7:e3:f2:ef:bb:21:3f:57:e4:4f:a2:dd:
a3:e6:f8:a3:38:e0:8b:13:14:96:59:ea:fe:0c:32:50:20:8d:
a6:49:5c:28:95:8d:e7:23:fc:19:6a:b2:b3:98:c2:27:e4:18:
3e:ff:5c:a5:54:41:4e:0e:4b:4a:df:6c:72:5b:49:f7:e6:a1:
7c:f7:b0:f7:07:ca:d5:b0:97:98:f1:4e:b2:0b:6e:90:c4:69:
06:e3:91:0f:9e:1c:c0:7f:c9:f2:df:dc:b8:0c:28:cb:d2:b5:
6b:fe:de:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:40 2026 by rpki-client