
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File: OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier: zX9s0GTOJ1JGlWaCfHorUWKErlr5PfdGhtUzqEaFWSU=
Subject key identifier: 49:31:17:44:A5:3C:C4:A1:B6:D0:F0:C0:7B:82:C3:4B:E1:DF:19:BF
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial: 1112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number: 10E6
Signing time: Wed 22 Jul 2026 17:26:51 +0000
Manifest this update: Wed 22 Jul 2026 17:26:51 +0000
Manifest next update: Wed 29 Jul 2026 17:26:51 +0000
Files and hashes: 1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: hT4iJW1oAhnRm1HHFsZkO5jbrRITxBKvFahSRQcVhGs=)
2: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: +oZqqbSfF7y4PvnGsPCA1za/Eu6HGAUVAMjzcBgpEOY=)
3: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: kQR2rJRw7cibG4+VWuepJmVVMALBPz98kkD/QBlTqb4=)
4: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: gYUYL+Jd8BqYDcq6w9aABSq0jEzKxGSrRN4Kct2Vn7c=)
5: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: Ii/gO0OKf8bIzXuRcAmTcbAZrOkECJjXAFuEdJBjwE8=)
6: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: L+cBg8DZ8MWiGD4ABrUtf99Xn9LyTrz132AQjeQ8FK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4370 (0x1112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Validity
Not Before: Jul 22 17:26:51 2026 GMT
Not After : Jul 29 17:26:51 2026 GMT
Subject: CN=6a60fd5b-ad55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:dd:ab:80:2e:e1:ad:96:fb:be:cb:39:0b:
ee:90:95:76:cd:1d:3d:f4:43:47:4d:cb:60:ab:be:
42:0f:91:54:90:52:75:a0:9e:65:74:d8:dd:a4:a0:
0e:c6:53:f6:35:ae:04:61:d9:29:5c:40:21:5d:05:
be:69:97:65:47:63:c0:8f:0e:fa:4c:ce:62:07:bc:
8d:2b:85:b9:e6:4e:05:cf:18:af:11:92:c4:c0:8e:
e1:9a:d3:a1:46:a9:2d:81:2b:78:8c:f0:b0:9e:94:
5a:ce:5d:53:6c:ef:a7:3f:b9:94:f5:bf:c4:e0:e1:
b0:79:84:a4:f4:be:58:83:62:70:a2:76:5e:60:2a:
f2:33:7e:38:3c:7c:64:82:a7:22:49:fc:f1:81:13:
83:1d:c3:c4:b7:59:81:71:d1:3d:13:a1:14:94:27:
19:30:c1:08:32:35:57:d0:ed:42:e7:1c:36:0e:84:
ca:5d:a6:cb:74:5a:25:bc:1d:50:0f:53:36:4f:05:
8d:d3:d3:6c:06:f7:0e:ec:01:4c:20:91:50:bc:8e:
76:64:bd:74:dc:d3:c0:bb:b2:90:bd:ed:5c:35:60:
88:51:00:a4:4b:1c:29:f4:45:f4:d1:5c:ea:89:5e:
64:41:a5:13:c8:cc:75:da:32:dc:7c:5d:76:5b:b1:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:31:17:44:A5:3C:C4:A1:B6:D0:F0:C0:7B:82:C3:4B:E1:DF:19:BF
X509v3 Authority Key Identifier:
keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:cb:19:fb:5f:a2:88:ab:88:3d:5d:be:58:a1:f4:9a:ee:6e:
2c:e8:d0:ad:67:6f:9d:fb:d2:7e:af:42:bc:97:5e:55:bf:a8:
47:0f:bb:9d:8c:60:de:0e:60:fe:d0:3f:ba:2c:d3:a0:04:19:
c7:b9:92:5a:bf:e1:67:e8:b1:43:da:27:8c:7d:25:70:1b:bd:
9a:37:bd:d8:3f:a3:89:6c:10:69:93:32:44:71:38:5a:3a:d5:
34:b2:39:e5:dc:d3:9b:21:3e:c7:e7:15:3f:18:4d:f0:ae:66:
78:be:8b:7e:2f:ab:1d:2e:75:63:ce:8f:fa:ed:7f:37:5a:47:
1a:d6:03:8f:6c:37:13:ed:3e:37:cd:e7:b1:6f:df:b0:0a:1e:
56:12:e1:1a:b8:e2:7d:a7:59:1a:63:9a:ff:b2:ef:0e:36:05:
cf:10:e3:0b:23:b0:16:c7:3a:b8:af:8e:53:07:ea:8f:e8:60:
dd:9f:d9:d8:28:5e:ca:a4:5f:18:9a:27:78:4f:86:d2:da:62:
e2:7e:f8:87:30:33:b7:ed:84:f4:d3:5e:f8:19:e2:4d:c1:17:
d3:9c:d3:c8:fe:58:3e:62:23:90:83:29:a0:d8:77:9c:a8:ab:
61:e2:f7:78:92:1f:c8:bf:5b:32:f4:6d:71:ba:1f:7c:bb:c8:
3c:3d:49:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICERIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM3OTgxMTAvBgNVBAUTKDNBMDJFRkY3Q0M5QzhCQUExMkQ3Qzg1MkI2RkZDNjlG
QjA2MDk4OUIwHhcNMjYwNzIyMTcyNjUxWhcNMjYwNzI5MTcyNjUxWjAYMRYwFAYD
VQQDEw02YTYwZmQ1Yi1hZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnpDdq4Au4a2W+77LOQvukJV2zR099ENHTctgq75CD5FUkFJ1oJ5ldNjdpKAO
xlP2Na4EYdkpXEAhXQW+aZdlR2PAjw76TM5iB7yNK4W55k4FzxivEZLEwI7hmtOh
RqktgSt4jPCwnpRazl1TbO+nP7mU9b/E4OGweYSk9L5Yg2JwonZeYCryM344PHxk
gqciSfzxgRODHcPEt1mBcdE9E6EUlCcZMMEIMjVX0O1C5xw2DoTKXabLdFolvB1Q
D1M2TwWN09NsBvcO7AFMIJFQvI52ZL103NPAu7KQve1cNWCIUQCkSxwp9EX00Vzq
iV5kQaUTyMx12jLcfF12W7FS+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkxF0Sl
PMShttDwwHuCw0vh3xm/MB8GA1UdIwQYMBaAFDoC7/fMnIuqEtfIUrb/xp+wYJib
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5OC85MDE3QjUwQTRB
MjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2b1MxOGhTdHZfR243Qmdt
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09nTHY5OHljaTZvUzE4aFN0dl9HbjdCZ21Kcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzc5OC85MDE3QjUwQTRBMjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2
b1MxOGhTdHZfR243QmdtSnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkMsZ+1+iiKuIPV2+WKH0mu5uLOjQrWdvnfvSfq9CvJdeVb+oRw+7nYxg3g5g
/tA/uizToAQZx7mSWr/hZ+ixQ9onjH0lcBu9mje92D+jiWwQaZMyRHE4WjrVNLI5
5dzTmyE+x+cVPxhN8K5meL6Lfi+rHS51Y86P+u1/N1pHGtYDj2w3E+0+N83nsW/f
sAoeVhLhGrjifadZGmOa/7LvDjYFzxDjCyOwFsc6uK+OUwfqj+hg3Z/Z2CheyqRf
GJoneE+G0tpi4n74hzAzt+2E9NNe+BniTcEX05zTyP5YPmIjkIMpoNh3nKirYeL3
eJIfyL9bMvRtcboffLvIPD1J9g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:44 2026 by rpki-client