
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
File: OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json)
Hash identifier: tcnXk10WBS/s3aiNPbOL/cVFdlbOd20kayGxGsFdVAs=
Subject key identifier: F2:64:4F:5A:A5:F9:57:1E:9D:00:EC:2D:D8:5D:E3:39:02:F8:D1:B8
Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
Certificate issuer: /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
Certificate serial: 0ADD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
Manifest number: 0BD7
Signing time: Wed 22 Jul 2026 19:53:00 +0000
Manifest this update: Wed 22 Jul 2026 19:52:59 +0000
Manifest next update: Wed 29 Jul 2026 19:52:59 +0000
Files and hashes: 1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: UfwOAjQ7l637uF/zWl1iACzoZWaCPjk5rsGrR+J/2is=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl
rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2781 (0xadd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
Validity
Not Before: Jul 22 19:52:59 2026 GMT
Not After : Jul 29 19:52:59 2026 GMT
Subject: CN=6a611f9b-33dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:67:2a:1b:6b:34:68:ab:56:c1:14:31:1c:63:
45:3e:d0:cc:f0:1a:54:6b:eb:0b:8e:23:1f:a3:77:
6b:c6:45:66:c6:ad:c2:f8:c9:8b:72:1c:59:9a:2a:
aa:f6:e5:62:64:fa:9d:ae:53:32:b6:66:75:1c:1f:
4b:7a:98:2c:a9:95:2e:83:83:7e:74:fe:c5:ad:f9:
f4:25:b6:c1:0b:17:2c:ac:d2:3e:8a:5a:17:df:dd:
f8:10:4b:69:eb:d7:e9:88:93:71:a4:eb:86:af:2f:
3a:68:eb:73:53:9e:6b:e5:c0:84:33:93:72:63:09:
64:c6:bf:76:53:07:6c:35:00:c1:5a:6b:74:34:45:
0f:e9:32:ce:52:ae:ad:0a:6a:75:ee:2b:cd:e3:7d:
d5:f3:fc:46:98:6d:3b:fd:c0:ee:af:e1:a3:eb:1d:
50:c1:eb:ff:d3:b0:0c:ba:ae:7c:c8:05:72:8a:e5:
13:b6:37:17:30:0a:0c:94:2b:75:f5:0f:bc:10:26:
47:20:85:6a:62:54:1b:d5:9f:b8:73:65:43:ce:67:
3f:81:85:3b:20:73:81:87:98:53:52:0b:e7:da:0e:
bb:80:0b:44:68:70:5b:f7:64:97:54:cf:c3:ec:53:
05:b0:a2:f7:f1:24:bf:a0:c4:01:7c:75:8c:ee:04:
57:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:64:4F:5A:A5:F9:57:1E:9D:00:EC:2D:D8:5D:E3:39:02:F8:D1:B8
X509v3 Authority Key Identifier:
keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:bb:87:a6:63:82:3b:07:b6:54:0c:2c:73:18:91:89:29:8c:
21:9d:54:10:6a:2c:47:2d:6b:72:10:09:52:2e:71:27:09:db:
33:a4:41:38:ce:ec:b6:cf:6f:6f:64:01:1d:25:4a:87:44:4e:
25:8b:46:86:de:5b:32:8a:32:9a:40:68:88:bf:f2:c1:c3:75:
a2:6c:1f:e4:e3:c8:b7:2d:20:56:ff:6e:cf:76:67:4f:95:98:
1b:27:e2:bf:1f:54:95:54:87:6b:cb:7f:3d:f9:a4:be:23:54:
73:aa:9e:59:1e:25:b9:3d:11:39:8e:e2:0c:1e:d8:cc:8a:78:
b8:fb:d2:c7:af:1b:21:16:8c:ad:ef:c1:bc:a7:9e:37:c1:d3:
a1:33:a2:9a:11:29:0c:71:d2:0e:01:44:cd:51:2e:d4:69:ce:
0e:74:34:fa:73:74:e4:22:1b:3b:53:9a:97:de:8d:49:4f:59:
fa:6d:3e:e4:16:da:4e:6b:d3:0e:35:00:dd:7e:a4:29:e5:6b:
ec:30:67:3e:b4:fe:93:2e:8d:22:1d:53:e0:a7:56:56:6b:8b:
37:d1:df:00:83:6f:b6:d6:93:0a:c2:b6:bb:b7:2f:cd:87:cd:
07:ba:76:1d:0a:29:e3:57:d7:ab:ee:9f:0b:5d:1e:09:82:43:
f5:81:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:25 2026 by rpki-client