
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json)
Hash identifier: uzCabtlKtshoVPGXGfXnBsYuqql9ub4fnuok+C4SUHk=
Subject key identifier: 5C:51:41:0E:3E:53:AB:3C:C6:BF:11:AE:F2:3A:BD:3D:A4:4A:C1:21
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 363E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
Manifest number: 35B6
Signing time: Tue 12 May 2026 14:26:18 +0000
Manifest this update: Tue 12 May 2026 14:26:17 +0000
Manifest next update: Tue 19 May 2026 14:26:17 +0000
Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: L9ztfKU9PyNqCNYqJvO0ssvP9q+zvvVm753AZbQJbrA=)
2: 02C97520985011F083EA2077C4F9AE02.roa (hash: yaT3E5Jwb6SOPRE/zc1jGw25lKy2464cuUmJv/l28Bs=)
3: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: YESGPScKdeqm6JUMvHI6MDffPNS9ojoSYCUIFN6JUNQ=)
4: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: 0zazze3bx11N53QYC29gvswb8iXwUt0H+vCU2B2AtJw=)
5: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (hash: thg12ZzEBgMuI/QMazCIjvAj3z0Vs1wd8yWbe5birCk=)
6: 72378020EE2A11F0BE1A1CA2486F56BC.roa (hash: F533zLdXfqsdCW7ceEEa1GEWGavXYNK88VyQBzpq5/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13886 (0x363e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: May 12 14:26:17 2026 GMT
Not After : May 19 14:26:17 2026 GMT
Subject: CN=6a033889-31e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:cd:f0:37:56:74:f9:08:5d:1b:24:86:75:
fb:2b:80:62:b8:fd:30:10:68:06:84:51:0e:67:93:
22:ff:38:7d:df:2b:08:fe:82:97:80:27:77:aa:bb:
55:d8:43:f5:b6:5e:c9:12:c4:98:ef:38:2b:01:34:
b0:81:b0:15:a6:c6:6f:ca:e5:3b:6d:ff:e5:f2:e0:
ca:58:64:b5:f4:4a:34:7d:96:7d:6b:4f:6d:ed:7b:
29:7c:59:53:08:7f:b7:be:53:44:6c:eb:e9:8c:b5:
a1:62:a1:c0:43:b1:c2:70:d8:75:06:14:e4:10:95:
45:59:02:34:0e:46:a2:e8:c1:f4:70:92:b5:60:38:
2b:69:e3:54:41:8c:c4:1f:f2:16:93:b1:c0:ce:a4:
f8:bb:1f:b7:ea:55:d6:62:e8:7d:b8:52:2a:b6:99:
ff:51:fd:ed:48:dc:74:e5:53:02:30:35:83:92:31:
ac:20:99:1d:b9:cb:b7:bd:29:85:e8:04:37:05:96:
53:fe:7b:bf:b3:a9:ed:c8:c0:46:6a:8d:2e:4c:1d:
16:00:90:4f:49:57:07:36:52:97:86:11:72:b7:19:
f9:a7:51:94:53:48:fa:04:3f:e9:4f:ae:90:aa:84:
41:53:46:a2:dc:92:fa:75:b3:2c:71:df:24:80:95:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:51:41:0E:3E:53:AB:3C:C6:BF:11:AE:F2:3A:BD:3D:A4:4A:C1:21
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:37:5b:3f:87:cd:78:c5:65:3e:97:6f:31:fc:f0:ec:95:7f:
ab:88:99:f9:87:7d:20:b9:e8:9d:b0:f9:4f:8b:0c:92:f9:f3:
1b:6f:95:e3:d5:99:4e:bb:fc:65:33:49:7f:e5:f4:0f:e3:7c:
a5:1f:de:5c:b1:0b:71:da:92:64:0d:cd:2b:92:17:cb:31:3b:
49:10:c6:b6:39:cc:36:b5:7c:23:d9:c4:b0:87:37:8f:21:f5:
c7:1f:06:54:07:d2:6c:c3:e1:8f:e0:29:4f:19:26:02:9e:bd:
4f:7b:95:45:26:1e:17:b7:a0:35:00:45:f1:6f:71:80:2b:9b:
c8:19:cf:31:c1:13:1d:e2:38:e4:c2:d0:38:1e:19:e3:bd:72:
25:53:99:0f:0d:3f:45:3f:54:c8:27:97:3c:35:14:98:4a:1b:
41:9e:fe:97:98:e1:51:2e:79:d8:36:23:d6:0b:8c:f6:59:e8:
98:9b:d2:a3:06:e1:7b:22:ae:38:4a:72:fb:f1:53:d7:a6:71:
c4:56:93:4a:e8:d0:1a:61:ea:af:8c:a7:25:81:2d:7a:ba:82:
f4:56:5c:b5:4f:d5:6e:16:b4:43:8b:8c:9e:08:cb:a2:b1:19:
b1:07:c4:0d:ff:cb:63:d0:35:39:c9:30:19:2c:54:41:55:f7:
ab:2d:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:54 2026 by rpki-client