
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
File: oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json)
Hash identifier: d3cIuWKRogShyfPJOao9GXgGaIflHVk0wICcdVonf2Y=
Subject key identifier: 51:91:20:7B:FF:9C:2D:61:55:AA:CC:0A:FF:BD:06:EF:2E:64:4F:43
Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
Certificate issuer: /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
Manifest number: E3
Signing time: Thu 23 Jul 2026 08:16:53 +0000
Manifest this update: Thu 23 Jul 2026 08:16:53 +0000
Manifest next update: Thu 30 Jul 2026 08:16:53 +0000
Files and hashes: 1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: U3pJr44+8DDFo5DEPBAHKtWEWNF/JEK+SuD6K/eOdrA=)
2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: Q6hGObTtAZVZ1hsWC5VBV1zlub8rHOzpBaXMIZTV03s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Validity
Not Before: Jul 23 08:16:53 2026 GMT
Not After : Jul 30 08:16:53 2026 GMT
Subject: CN=6a61cdf5-7783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:c5:4d:dc:36:a4:62:f5:fc:10:fb:e4:de:
74:54:dc:d1:c3:f6:14:67:54:86:45:29:95:62:7b:
08:f3:21:2c:94:db:27:ec:0d:be:2b:49:95:0d:c7:
7e:84:4b:58:3c:6d:36:57:94:a1:4e:21:03:96:ea:
ea:9e:a0:19:a5:b7:2c:d5:52:3c:df:1c:4a:fc:85:
e1:c8:ff:c1:5d:b8:e2:e5:a4:f9:36:ef:3c:2b:1a:
2e:91:1e:2a:e5:86:15:48:15:12:78:69:2c:ae:44:
50:1d:53:4e:89:9e:71:89:9c:49:9a:29:ad:c9:4b:
3c:87:06:95:92:2d:0b:98:3d:a8:97:01:1a:19:34:
97:a2:af:d1:26:47:6f:9d:ad:0e:e9:e0:f7:ae:8a:
91:30:6a:12:35:74:98:96:bd:0c:26:26:83:ca:b2:
de:09:1a:97:68:a6:a6:ec:2e:d0:52:19:b4:fc:47:
d9:7f:75:f4:00:ec:6b:ef:67:be:3d:ba:a0:16:47:
0a:a0:fd:b3:62:3e:19:88:7f:62:94:f5:dd:6c:11:
76:5d:2c:7d:17:43:01:c9:2e:22:e8:5b:3a:e0:51:
1b:2e:39:34:c6:7e:26:95:67:ea:ac:64:f1:d7:c5:
8e:c3:1b:de:d4:73:c7:f4:d2:b1:6b:31:0b:f2:2c:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:20:7B:FF:9C:2D:61:55:AA:CC:0A:FF:BD:06:EF:2E:64:4F:43
X509v3 Authority Key Identifier:
keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:aa:4f:a0:14:f3:1f:02:56:41:21:81:29:8d:5b:13:e2:18:
0d:14:e3:e7:02:7c:17:b1:e5:b2:16:5e:4b:44:1d:be:4b:df:
af:53:2b:93:5f:29:b5:6b:e6:1f:51:82:1b:53:cc:b1:e0:60:
65:78:a9:ed:96:1e:70:d9:b4:d9:06:f9:fe:5f:3d:16:c8:35:
6e:2d:6c:5a:1d:18:5e:36:38:8f:45:98:69:b2:27:9f:f4:82:
ae:f7:88:b2:49:51:d3:e9:be:a3:dd:80:b5:2e:63:d8:90:ee:
69:33:00:a6:cb:eb:b5:08:40:3e:17:84:8d:d6:84:d3:c0:9d:
bc:b3:12:67:f5:52:fc:da:27:7b:4b:5d:21:d6:c4:8b:b9:b5:
bf:3f:01:2c:2c:14:c8:0a:5d:f8:16:b9:65:27:94:5e:88:06:
51:8e:73:e3:42:49:92:08:54:ce:3e:4f:43:84:e3:e6:2b:7c:
2e:b1:4f:32:06:cb:6d:13:54:61:21:ee:40:74:a9:7f:d0:a7:
30:dd:a9:d6:d5:4e:d6:55:a9:82:96:a8:f0:79:9f:20:e0:a5:
6e:f6:ef:9f:f7:f9:9c:1c:03:84:75:6f:40:da:71:2f:06:82:
95:a3:42:90:01:44:18:25:42:ef:64:41:2b:dd:20:1e:21:3b:
ac:ae:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:02 2026 by rpki-client