
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
File: OYN8tL7K9qYmyRaulgJBtgnmsgo.mft (raw, json)
Hash identifier: jdm3qHbfrbeUm9eSXbZ/0eJRpQMoVU/RiWzuYkm/xmI=
Subject key identifier: 7B:2B:84:48:81:18:D5:92:40:5C:F4:2F:46:D8:2F:A3:5F:9B:B3:3D
Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
Certificate issuer: /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
Manifest number: 01F0
Signing time: Thu 23 Jul 2026 04:40:36 +0000
Manifest this update: Thu 23 Jul 2026 04:40:36 +0000
Manifest next update: Thu 30 Jul 2026 04:40:36 +0000
Files and hashes: 1: OYN8tL7K9qYmyRaulgJBtgnmsgo.crl (hash: bZorQSHklTVYpOlfs73XOKE7XCuwj39eKmW/1istZ8A=)
2: C635D41E611411EF9B00D029C4F9AE02.roa (hash: 8EuCC6GeDURLjyKUH1rweshuZkTUvieZrlzCd35Hwu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C3B7, serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Validity
Not Before: Jul 23 04:40:36 2026 GMT
Not After : Jul 30 04:40:36 2026 GMT
Subject: CN=6a619b44-d26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:6d:da:a3:d9:ba:db:3a:65:c2:cd:63:67:
74:e8:48:c6:d2:78:e4:de:8e:83:98:05:29:87:a5:
e5:3c:ff:b4:f7:5f:d9:67:9c:04:8d:44:32:5a:3f:
59:a4:4b:76:d3:63:00:e4:6e:b5:fb:42:3e:32:44:
c1:ea:e6:de:55:73:59:a9:9e:9b:78:52:45:8d:14:
74:74:f9:d6:49:56:2f:29:75:de:2b:f7:6f:57:e3:
b3:d8:14:15:68:43:69:6e:92:39:5e:50:b8:a2:7e:
02:13:96:63:63:a2:b8:1d:8f:54:26:9c:22:04:cb:
be:92:7e:21:ad:41:60:b4:7d:bb:2e:0b:b2:46:de:
ac:6b:8b:6b:54:07:44:0a:e6:fb:f2:3e:e0:6c:d1:
e1:34:35:93:6d:ac:ef:e4:8f:5c:7e:cd:51:e9:e4:
7d:0b:2c:45:c1:83:e1:68:a4:91:9c:73:16:a2:76:
37:98:be:80:ba:41:6a:9f:3b:fb:3f:13:48:d7:f8:
9f:a9:81:6f:43:ea:6b:af:b0:bc:8d:b7:ad:57:06:
58:58:65:80:a8:cf:72:ac:89:e9:6b:e2:88:8e:e4:
61:16:f9:33:b8:17:e6:38:31:23:cb:31:21:ed:b0:
22:50:27:7c:1c:8c:83:01:99:a6:29:38:6c:08:07:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:84:48:81:18:D5:92:40:5C:F4:2F:46:D8:2F:A3:5F:9B:B3:3D
X509v3 Authority Key Identifier:
keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c7:a4:e5:d1:a6:c0:eb:74:a4:f8:90:c0:e2:9b:38:82:e8:
b7:42:5c:c0:1b:17:45:be:42:c1:a2:5c:d5:8d:0c:5e:4f:31:
b4:99:21:ba:67:72:b5:61:f8:f3:df:0a:0e:23:2d:f6:1f:f4:
09:ef:a8:88:5a:80:d8:5c:e4:f4:59:2c:c8:7d:06:96:1b:f9:
c9:46:c7:64:56:08:01:7b:70:0f:45:23:ef:dc:a1:4c:a4:21:
02:d5:68:73:f8:58:85:cd:7f:25:32:92:d9:0b:d7:79:01:72:
bb:60:33:68:99:11:eb:a3:2e:1a:a2:70:d1:f6:cf:ce:34:d7:
a8:38:d0:66:bb:f2:dd:fc:f6:82:3e:37:3f:e6:58:86:a4:53:
02:46:02:e9:e6:4b:1a:25:d5:62:c4:eb:db:c5:ee:22:c5:29:
96:78:82:30:0f:1a:b4:82:a1:41:84:e1:40:69:37:f6:df:a2:
a9:b1:3c:a5:11:c8:87:ef:5b:53:79:98:c0:9b:9f:24:25:08:
4f:5c:98:8b:47:43:ce:fb:d0:2b:62:6b:11:37:53:03:bf:72:
cb:48:49:49:7b:0f:ad:95:02:5b:8e:26:4c:6e:54:08:63:49:
02:3c:91:b0:22:83:6b:49:e3:ea:de:25:34:8d:2d:7b:e4:60:
bf:26:96:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:05:03 2026 by rpki-client