
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft
File: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft (raw, json)
Hash identifier: Mki/I5mlFcmsciJpU7KYQdMi69DR8ZAwfHXsZLbtnhQ=
Subject key identifier: 7A:8E:20:5A:5B:47:A7:9E:E2:F1:87:7A:4C:BB:69:2B:1A:BE:9F:D8
Authority key identifier: A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED
Certificate issuer: /CN=A918EF94/serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft
Manifest number: 01D6
Signing time: Wed 13 May 2026 00:01:21 +0000
Manifest this update: Wed 13 May 2026 00:01:20 +0000
Manifest next update: Wed 20 May 2026 00:01:20 +0000
Files and hashes: 1: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl (hash: 92aI6Hk8s07e92vykQ/6wvEEtiEGHC3W0FJT3fWLBTk=)
2: AAFE712C4E5E11F1A8639900A5833773.roa (hash: N1yaqV64zUHhOkz1nhK93ER7DQv3tI8EHWsAAQ8NeWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl
rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF94, serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED
Validity
Not Before: May 13 00:01:20 2026 GMT
Not After : May 20 00:01:20 2026 GMT
Subject: CN=6a03bf51-486c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:a3:05:91:8a:d4:38:3c:08:7f:53:eb:22:
46:78:16:e8:c9:46:d2:a0:6b:e1:2f:43:26:1b:88:
5f:f6:79:74:39:38:0c:ca:fd:d8:f3:df:eb:ef:a0:
7a:27:20:3e:79:ce:53:24:3b:62:48:02:94:6b:20:
c0:74:fb:e7:ab:99:58:7d:50:5d:3b:65:8f:b7:6b:
3a:c6:f6:a1:a0:bb:62:9e:23:c0:0b:a0:17:fa:f2:
7e:fa:bc:ca:07:47:83:ec:dd:63:13:2e:d7:b5:9c:
23:cd:d3:9b:ca:98:d7:4d:f5:74:bb:05:2c:ef:7b:
15:77:5b:11:44:c6:9f:08:8f:41:4a:ac:da:9c:c1:
48:86:92:6d:d1:82:a2:f2:e9:4d:88:87:5e:fc:5d:
b7:ff:ad:0b:c9:f7:1d:02:26:aa:ac:8d:56:54:e6:
ea:c5:c7:ad:86:b5:e5:13:bb:2c:eb:c6:6f:c0:14:
83:b5:87:e7:63:fa:8b:e7:38:0d:35:30:d4:28:73:
cc:e9:69:ba:e9:ed:17:21:db:b3:47:e4:e5:e4:e9:
c6:1a:8f:09:ca:6a:9f:ed:59:bb:38:2b:cc:c6:bf:
3f:1e:0a:eb:ff:13:2c:e8:5b:83:f9:b8:75:1f:0c:
2d:7b:f9:6c:01:04:9a:0d:32:63:2d:f2:c9:6e:32:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:20:5A:5B:47:A7:9E:E2:F1:87:7A:4C:BB:69:2B:1A:BE:9F:D8
X509v3 Authority Key Identifier:
keyid:A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:c6:41:3e:a7:ab:08:9e:0c:fc:9c:00:d3:35:f0:01:c1:c0:
5f:a2:a8:3a:ac:76:13:10:9c:39:80:76:c9:3a:82:b2:b9:bb:
44:41:16:ee:43:cc:ad:85:54:61:62:dd:59:95:99:ed:4d:85:
06:af:48:71:c3:4a:7e:45:b5:5d:ce:e3:08:96:6d:ca:1c:8c:
4b:fd:b1:e1:4a:f9:a8:6d:6b:a8:67:44:ee:96:d3:4e:98:aa:
bf:f0:86:6e:d6:a4:af:3b:c6:4e:15:5a:d1:ce:9f:15:f6:6e:
f4:07:5c:97:c6:bc:7c:82:f9:ad:3d:dc:4b:4a:46:ec:3f:b3:
54:9e:1b:d3:b3:42:33:bc:da:2e:9c:f8:4e:08:6d:be:b0:97:
2e:20:d1:55:9a:38:63:96:94:9f:a2:bd:60:9e:7c:80:cd:33:
da:bf:ba:24:92:9d:d5:34:61:5d:5b:d1:1a:b0:d3:5c:60:0d:
92:12:01:43:6a:f5:36:89:21:f1:7c:cb:5b:5c:f0:ae:6c:43:
65:62:7e:10:43:ef:29:77:e7:65:ee:26:c5:4d:33:e4:18:2d:
fa:2e:d3:27:d9:64:75:6a:b1:97:22:c6:d2:99:48:67:e7:7a:
f1:67:98:ac:d8:a7:7b:d9:cb:d7:38:49:6c:7f:61:d1:dd:de:
b0:a6:1f:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVGOTQxMTAvBgNVBAUTKEExRTRGMDlEMkY0NzA3ODY3Q0ZBRTI3RThGMTMyMzY5
RkI5N0QwRUQwHhcNMjYwNTEzMDAwMTIwWhcNMjYwNTIwMDAwMTIwWjAYMRYwFAYD
VQQDEw02YTAzYmY1MS00ODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoOOjBZGK1Dg8CH9T6yJGeBboyUbSoGvhL0MmG4hf9nl0OTgMyv3Y89/r76B6
JyA+ec5TJDtiSAKUayDAdPvnq5lYfVBdO2WPt2s6xvahoLtiniPAC6AX+vJ++rzK
B0eD7N1jEy7XtZwjzdObypjXTfV0uwUs73sVd1sRRMafCI9BSqzanMFIhpJt0YKi
8ulNiIde/F23/60LyfcdAiaqrI1WVObqxcethrXlE7ss68ZvwBSDtYfnY/qL5zgN
NTDUKHPM6Wm66e0XIduzR+Tl5OnGGo8Jymqf7Vm7OCvMxr8/Hgrr/xMs6FuD+bh1
Hwwte/lsAQSaDTJjLfLJbjLZPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqOIFpb
R6ee4vGHeky7aSsavp/YMB8GA1UdIwQYMBaAFKHk8J0vRweGfPrifo8TI2n7l9Dt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81MDI5NTU0QzhB
NzkxMUVFODU0NDE5MThDNEY5QUUwMi9vZVR3blM5SEI0WjgtdUotanhNamFmdVgw
TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29lVHduUzlIQjRaOC11Si1qeE1qYWZ1WDBPMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUY5NC81MDI5NTU0QzhBNzkxMUVFODU0NDE5MThDNEY5QUUwMi9vZVR3blM5SEI0
WjgtdUotanhNamFmdVgwTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ8ZBPqerCJ4M/JwA0zXwAcHAX6KoOqx2ExCcOYB2yTqCsrm7REEW7kPMrYVU
YWLdWZWZ7U2FBq9IccNKfkW1Xc7jCJZtyhyMS/2x4Ur5qG1rqGdE7pbTTpiqv/CG
btakrzvGThVa0c6fFfZu9Adcl8a8fIL5rT3cS0pG7D+zVJ4b07NCM7zaLpz4Tght
vrCXLiDRVZo4Y5aUn6K9YJ58gM0z2r+6JJKd1TRhXVvRGrDTXGANkhIBQ2r1Nokh
8XzLW1zwrmxDZWJ+EEPvKXfnZe4mxU0z5Bgt+i7TJ9lkdWqxlyLG0plIZ+d68WeY
rNine9nL1zhJbH9h0d3esKYffQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:37:26 2026 by rpki-client