
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File: OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier: H9HGXMyqBfulyawNnq168oeTNHjJKlzyU2oTwaAJ6zM=
Subject key identifier: 38:9B:8E:1C:A6:C2:F9:B3:83:19:68:D0:15:FD:C3:34:A8:ED:08:5B
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial: 10CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number: 10A7
Signing time: Tue 24 Mar 2026 17:14:07 +0000
Manifest this update: Tue 24 Mar 2026 17:14:07 +0000
Manifest next update: Tue 31 Mar 2026 17:14:07 +0000
Files and hashes: 1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: /jzM03xLO05H+RTQEamC73DD50uh3S4vgwfbSHG9Tzg=)
2: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: vsbMMm0tX7oQPTtDdBLrO3G0fbHEKxHcy+EakKZCXvk=)
3: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: ytrXwHDwgf5zRqPoFHCYqQMoZALpJPSEoIv4sspoZXM=)
4: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: BlKhGG0JgDgeMunFnt+JOtTeCrACML/7Bv6i3I2TnD4=)
5: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: 5uzOMDxVQG6o2wJsSwgOydC+9oz2b76Yz5g0H0UYCJg=)
6: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: xtUD4kX8wiwHjf7rbPAI7RcOfukxUOvAvuX9YW6zjQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4302 (0x10ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Validity
Not Before: Mar 24 17:14:07 2026 GMT
Not After : Mar 31 17:14:07 2026 GMT
Subject: CN=69c2c65f-56c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:52:bc:04:fe:e5:9d:17:29:d3:c0:16:5d:
df:46:b4:53:36:cb:02:67:ae:09:e3:b3:b0:6c:b5:
66:ce:af:90:a0:b6:0c:96:86:93:20:78:61:5c:6e:
fc:fe:84:7a:0e:aa:8c:f1:7c:04:6d:31:e8:a9:d4:
ce:ab:06:15:7a:0c:95:cb:88:24:14:32:ac:e7:8d:
41:a3:81:30:27:5d:1b:65:dd:3b:d2:e7:bd:d0:82:
2f:8d:5d:e1:aa:a1:7f:bc:d1:04:b6:6f:8a:93:f5:
a9:e1:23:d4:ea:08:ad:ba:4a:c4:ab:f5:79:96:ac:
a2:7f:bd:1b:f7:f5:03:d0:e6:dd:9e:9a:42:d9:17:
d6:07:fb:78:8f:ab:94:88:22:a4:91:11:ee:21:cd:
94:8a:32:7c:3f:d8:a5:37:24:c7:9d:29:1f:8a:4c:
92:f0:2b:04:b5:d0:a3:99:66:f9:cd:07:2e:83:48:
b5:d3:27:13:bb:ae:ef:2b:f4:cf:53:79:dc:44:85:
67:b6:81:8b:b7:e0:33:75:c6:14:13:71:30:d5:f5:
9c:b0:a9:8e:50:63:ce:e9:fe:d5:21:06:a5:b7:e8:
0b:ad:9f:5f:d9:e3:a0:34:6b:fc:e8:18:a3:05:cf:
90:82:10:67:ad:42:ae:7a:53:54:45:df:d3:b8:15:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:8E:1C:A6:C2:F9:B3:83:19:68:D0:15:FD:C3:34:A8:ED:08:5B
X509v3 Authority Key Identifier:
keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:7c:b6:b6:79:10:27:9d:88:46:0f:0e:b6:db:eb:f2:42:d1:
b2:92:bd:c1:53:32:41:8d:bd:8e:b0:ce:60:b9:ef:0e:ea:8a:
49:80:0d:25:44:c6:1a:97:80:9a:be:4f:52:54:98:d5:fd:84:
d0:e4:c7:4d:9d:2c:f2:d8:b1:ee:a8:f9:f0:d2:20:b0:55:ca:
97:98:18:c5:a1:ea:1a:a4:a1:5d:69:72:44:9d:a8:85:18:b7:
03:26:10:ae:33:58:90:54:8d:b0:e3:c1:f8:d1:74:bd:d6:90:
7f:20:4a:4e:b3:73:8d:17:e7:a7:3c:d5:9f:aa:d8:2f:a7:34:
f9:b8:c3:d8:cb:cd:61:ab:81:f4:3e:09:2c:5d:f1:7f:52:91:
ce:dc:0a:b1:aa:b1:fc:4e:64:71:e8:4f:ce:38:25:63:f9:75:
5c:ea:03:cf:36:76:ad:99:3d:4c:6f:c5:a0:56:d3:5c:b0:b1:
e8:79:f9:68:2b:1c:98:1b:7b:24:d7:52:5d:83:24:ec:8b:58:
6a:c7:c9:d8:f0:95:ff:6b:d2:a9:52:70:d9:f5:ba:8f:85:b6:
34:4d:c3:af:aa:58:02:5b:6f:c3:43:5c:da:07:23:8d:c6:06:
8f:24:71:d8:13:b2:0d:23:6b:3f:23:bf:87:85:b5:f4:82:8a:
5e:5f:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:17 2026 by rpki-client