
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
File: OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json)
Hash identifier: ojnbBXr4XrUtzA7ulA1WMHwdXtya89m7zlck/6rTaRw=
Subject key identifier: 36:9C:AE:40:82:5C:DE:9F:1D:9D:73:8F:8D:E7:07:42:D7:EF:56:AF
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Certificate issuer: /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
Manifest number: 8C
Signing time: Thu 23 Jul 2026 09:49:35 +0000
Manifest this update: Thu 23 Jul 2026 09:49:35 +0000
Manifest next update: Thu 30 Jul 2026 09:49:35 +0000
Files and hashes: 1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: 1LBBAIhSK4KAXHJo65a4wXE48CXAWxNHKIfAsqk7pQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Validity
Not Before: Jul 23 09:49:35 2026 GMT
Not After : Jul 30 09:49:35 2026 GMT
Subject: CN=6a61e3af-7b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:e1:18:46:9a:fd:a6:0d:53:26:b0:50:48:
ed:86:30:65:82:0f:44:da:d1:3d:95:9f:76:f8:db:
3c:71:b6:f1:77:79:f0:bc:96:b8:0a:ae:d4:37:ef:
64:da:b5:ac:4f:1e:26:4f:95:b3:38:14:81:77:04:
9c:bc:68:a2:83:0b:fb:21:d9:7e:42:51:25:2d:b0:
28:c7:43:e3:f7:1b:78:e2:b3:1e:49:00:54:ab:c7:
56:e5:72:d6:ff:b2:65:61:4b:ea:80:b5:7e:ef:6f:
a3:2c:46:98:52:ef:70:a5:f5:5e:7c:4f:98:0e:85:
62:f0:7d:b0:6c:a9:92:2c:67:9a:88:f3:c4:83:fc:
66:7c:62:a2:13:63:9b:d7:3b:b7:b7:9d:9c:f2:68:
7d:c1:aa:dd:a9:d3:6b:a6:f0:a5:6f:2a:e4:21:d4:
b2:94:72:34:2b:e7:b7:f9:15:9e:2f:62:fa:0b:af:
68:95:48:07:43:ef:c5:9c:02:0a:1f:8c:43:bd:6d:
f8:07:be:94:51:cc:71:d9:57:2e:06:7e:a8:6c:a0:
c1:f8:ff:a8:a3:2d:5a:4c:cc:06:bc:e5:11:1f:b6:
23:0b:50:f4:45:8c:ce:3e:3a:16:60:38:be:57:08:
da:1f:07:c6:fe:a3:f9:92:17:a9:d2:de:0e:ac:72:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9C:AE:40:82:5C:DE:9F:1D:9D:73:8F:8D:E7:07:42:D7:EF:56:AF
X509v3 Authority Key Identifier:
keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:ac:dd:04:a0:f0:50:d6:d9:d9:33:8f:8c:d1:61:c7:10:c0:
a1:0e:1c:45:29:65:a1:51:56:5d:63:a7:57:e7:96:ff:69:00:
aa:af:42:42:6a:29:36:9f:cb:8f:8f:89:8e:c9:5c:5b:ec:33:
e8:e5:62:7c:dc:66:58:02:8e:f4:1b:23:b0:18:e0:8c:56:5e:
19:48:bd:c9:9d:f5:64:e6:c8:7c:a9:d1:df:79:7d:fa:d3:80:
1e:4a:78:49:07:e3:c4:10:aa:9c:ff:ec:df:1e:43:a3:58:8d:
ee:f5:e5:07:f9:c8:3f:96:e8:7d:8a:ec:0c:f4:12:cf:32:12:
18:37:bc:29:c8:33:45:4a:40:e1:c8:07:d0:81:54:ab:cc:cf:
53:8c:37:43:9a:f0:40:3e:d5:26:55:8a:e6:a4:2c:d5:aa:f8:
b5:9f:f0:d2:79:fb:b5:5b:89:37:5d:b5:06:21:2a:17:9f:f3:
5c:80:5f:fc:48:f8:73:80:b4:cd:0d:b9:f1:21:61:49:0b:1f:
ec:c0:a3:be:78:66:23:38:83:fa:11:54:7a:66:90:f8:d0:db:
d2:10:92:bd:d2:19:44:20:5d:c2:34:47:34:93:24:79:45:9d:
99:32:de:e8:d4:b9:32:aa:9e:4c:ea:ef:f8:c4:53:cd:09:fe:
40:5b:8d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:48 2026 by rpki-client