
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft
File: oOoqcgysMcg3X1Vs-Uv--NERafY.mft (raw, json)
Hash identifier: Hsonvey8KFTTA9Y50LQFXfRaJOsbqrvH3K1XrV5OCpk=
Subject key identifier: D3:03:11:AF:49:2B:EE:60:F9:A1:25:54:81:BB:5D:BA:C0:06:12:22
Authority key identifier: A0:EA:2A:72:0C:AC:31:C8:37:5F:55:6C:F9:4B:FE:F8:D1:11:69:F6
Certificate issuer: /CN=A917C0F3/serialNumber=A0EA2A720CAC31C8375F556CF94BFEF8D11169F6
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft
Manifest number: 0120
Signing time: Thu 23 Jul 2026 07:28:41 +0000
Manifest this update: Thu 23 Jul 2026 07:28:40 +0000
Manifest next update: Thu 30 Jul 2026 07:28:40 +0000
Files and hashes: 1: oOoqcgysMcg3X1Vs-Uv--NERafY.crl (hash: iis1XsUxVxfxHQyFu+B8J+HXn1wLhVAKDkGxJ3tYaJE=)
2: 02F0D9DED0BA11EFA8B5A526C4F9AE02.roa (hash: 06+m6dabyyzbZGIT4hkbr4VpURLEsXpwD3ACUIi95cM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.crl
rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0F3, serialNumber=A0EA2A720CAC31C8375F556CF94BFEF8D11169F6
Validity
Not Before: Jul 23 07:28:40 2026 GMT
Not After : Jul 30 07:28:40 2026 GMT
Subject: CN=6a61c2a9-e5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:ac:11:e7:7a:20:fe:4d:02:5b:27:20:51:
a5:19:b6:59:ff:28:96:16:9a:05:08:3e:7d:16:a2:
70:b4:be:ab:55:66:60:e7:56:90:ba:b0:f2:da:28:
8c:bc:b7:b0:ac:7d:0e:90:75:2d:d8:7b:50:0f:30:
c3:42:e0:7c:71:dc:7b:18:24:8e:a0:57:e0:8e:0d:
8e:7c:07:a9:f1:7c:26:f6:4b:d0:df:47:ea:23:a5:
14:48:c8:80:be:d8:e8:b6:db:5e:e6:f5:e7:ba:12:
98:2b:19:20:14:72:ca:77:fe:65:45:67:74:01:bf:
16:0f:0b:02:b6:10:03:8f:3d:11:94:22:7b:a3:2f:
01:a7:15:9f:46:19:69:c4:2f:3a:97:00:74:88:5a:
42:a9:f2:2c:22:b5:ed:f9:8c:2e:c7:3a:cd:99:e2:
d7:15:46:5a:5b:b3:3b:5b:66:2a:b3:3c:41:2c:d8:
d9:fa:c8:b6:dc:1d:fe:06:27:6d:48:f4:40:9c:8e:
57:ef:16:98:0f:b1:2a:0d:9d:99:8e:ad:46:0e:2c:
3b:06:79:31:d6:6d:ee:dd:4a:c2:12:c4:41:71:08:
7d:92:c8:b2:c0:c5:a2:90:b0:72:34:04:2e:79:d1:
3a:c3:39:56:81:e0:d0:aa:91:d2:7b:0d:e9:dc:3f:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:03:11:AF:49:2B:EE:60:F9:A1:25:54:81:BB:5D:BA:C0:06:12:22
X509v3 Authority Key Identifier:
keyid:A0:EA:2A:72:0C:AC:31:C8:37:5F:55:6C:F9:4B:FE:F8:D1:11:69:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5a:c3:5c:18:79:94:fc:8b:e0:23:60:b1:66:87:2f:29:44:
94:d0:60:22:db:41:f7:dc:e3:18:f1:8c:e6:db:ee:48:e1:5a:
15:b7:24:9d:1d:45:e0:ab:d4:f6:a5:0f:1b:0e:d0:a8:f6:37:
7b:62:17:e7:7a:8f:e9:10:d6:7d:6c:9b:0d:9e:6e:6e:63:2e:
45:9e:c4:31:c4:b5:a1:12:eb:42:aa:75:05:3f:36:9f:86:8e:
14:de:90:38:15:2a:25:f7:82:24:8a:55:25:04:1c:46:07:f7:
5e:05:35:e8:c0:a4:6a:8a:5c:ec:73:3c:05:7b:30:c9:a9:cc:
5d:da:42:ce:57:ce:73:6e:61:c7:bb:5e:a3:40:d1:8e:93:bc:
29:08:c8:e5:f2:64:a2:2b:2a:00:48:73:f7:be:c7:25:dd:77:
53:d7:9f:49:f8:eb:9a:5c:cc:c2:4a:03:7f:6c:00:12:72:cc:
3f:8c:1d:45:16:91:d6:a1:d3:65:69:79:85:64:df:ab:ab:5a:
f6:d8:35:af:b7:77:ce:2e:52:4e:11:a4:f8:45:4d:6d:69:6e:
6b:42:b2:71:ec:38:84:c9:25:1d:aa:51:5f:a6:58:2b:5e:d9:
42:b5:09:b0:6a:23:13:8b:97:21:d2:ac:e3:71:cf:4d:a0:0f:
67:23:58:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MwRjMxMTAvBgNVBAUTKEEwRUEyQTcyMENBQzMxQzgzNzVGNTU2Q0Y5NEJGRUY4
RDExMTY5RjYwHhcNMjYwNzIzMDcyODQwWhcNMjYwNzMwMDcyODQwWjAYMRYwFAYD
VQQDEw02YTYxYzJhOS1lNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAys+sEed6IP5NAlsnIFGlGbZZ/yiWFpoFCD59FqJwtL6rVWZg51aQurDy2iiM
vLewrH0OkHUt2HtQDzDDQuB8cdx7GCSOoFfgjg2OfAep8Xwm9kvQ30fqI6UUSMiA
vtjottte5vXnuhKYKxkgFHLKd/5lRWd0Ab8WDwsCthADjz0RlCJ7oy8BpxWfRhlp
xC86lwB0iFpCqfIsIrXt+YwuxzrNmeLXFUZaW7M7W2YqszxBLNjZ+si23B3+Bidt
SPRAnI5X7xaYD7EqDZ2Zjq1GDiw7Bnkx1m3u3UrCEsRBcQh9ksiywMWikLByNAQu
edE6wzlWgeDQqpHSew3p3D8vUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMDEa9J
K+5g+aElVIG7XbrABhIiMB8GA1UdIwQYMBaAFKDqKnIMrDHIN19VbPlL/vjREWn2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGMy82MEUyMDdCQ0Qw
QjkxMUVGQTA4NDg4MjVDNEY5QUUwMi9vT29xY2d5c01jZzNYMVZzLVV2LS1ORVJh
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Pb3FjZ3lzTWNnM1gxVnMtVXYtLU5FUmFmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzBGMy82MEUyMDdCQ0QwQjkxMUVGQTA4NDg4MjVDNEY5QUUwMi9vT29xY2d5c01j
ZzNYMVZzLVV2LS1ORVJhZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAClrDXBh5lPyL4CNgsWaHLylElNBgIttB99zjGPGM5tvuSOFaFbcknR1F4KvU
9qUPGw7QqPY3e2IX53qP6RDWfWybDZ5ubmMuRZ7EMcS1oRLrQqp1BT82n4aOFN6Q
OBUqJfeCJIpVJQQcRgf3XgU16MCkaopc7HM8BXswyanMXdpCzlfOc25hx7teo0DR
jpO8KQjI5fJkoisqAEhz977HJd13U9efSfjrmlzMwkoDf2wAEnLMP4wdRRaR1qHT
ZWl5hWTfq6ta9tg1r7d3zi5SThGk+EVNbWlua0Kycew4hMklHapRX6ZYK17ZQrUJ
sGojE4uXIdKs43HPTaAPZyNYvA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:20 2026 by rpki-client