
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json)
Hash identifier: QVx5czLTzUnfdxy/80qgL2sH4omoCIdudc/4Rlr6aA4=
Subject key identifier: B0:47:71:F5:8D:4B:15:B5:3D:A1:52:C7:25:C8:8C:E8:F3:BE:25:DD
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 366D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
Manifest number: 35DF
Signing time: Wed 22 Jul 2026 14:26:35 +0000
Manifest this update: Wed 22 Jul 2026 14:26:34 +0000
Manifest next update: Wed 29 Jul 2026 14:26:34 +0000
Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: 9NqW8JeWCMDJR4Wuvljspb7NMZbiHkILzTfmcOTQ1k4=)
2: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: +E2YvC30N7G4XyfUFImEIGM741TQeBV6oc6cEcKy0A4=)
3: 02C97520985011F083EA2077C4F9AE02.roa (hash: elpetSZnc/cw/UNBwFiiaE6GRjUvr9tLQSkFah9iq8Y=)
4: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (hash: SDyY9CxWbpTxTv2y+7w0t15rfAMVOucoRmveZEJG2J4=)
5: 72378020EE2A11F0BE1A1CA2486F56BC.roa (hash: aKgJ5Lr0RjgCGZC/3syl2BTMU1aaDSTAss+LizAPlBc=)
6: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: GDg6tzHTkf4U+SPLrShf4CtKLD6rp4wOgPpuQzEBJ6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13933 (0x366d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Jul 22 14:26:34 2026 GMT
Not After : Jul 29 14:26:34 2026 GMT
Subject: CN=6a60d31a-a05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:6f:bb:f8:9d:e0:7f:79:43:e6:8f:f3:d9:
8a:ca:bb:b6:66:f4:c7:c9:96:28:47:52:25:e9:db:
c1:36:b1:2e:6c:57:08:e8:67:53:6a:6f:d7:84:7c:
1d:ef:1c:fd:71:c7:04:dc:06:51:85:e0:8c:16:b3:
95:f6:45:53:0c:1e:92:8d:1a:cd:2c:6f:fb:01:15:
35:0a:39:75:52:2b:91:fa:65:ba:fa:e1:ed:fe:91:
f8:c8:fb:09:16:59:83:e8:c4:3b:f4:2f:73:fd:40:
a9:cf:ef:9f:8c:41:7c:ca:29:ed:ff:21:1c:82:b2:
20:2c:d5:25:c6:08:2e:65:5f:dd:2a:11:f0:ff:2f:
91:04:d0:f5:7d:f7:f5:88:ea:e3:6b:a4:02:81:28:
11:da:47:a1:f4:f1:fb:8b:a0:07:e2:76:0a:e4:be:
65:fc:71:a5:55:90:fc:a8:ea:fd:38:0b:26:84:db:
6f:cc:a3:d1:8c:a1:80:9d:c5:e6:ed:e8:51:39:43:
51:49:01:97:7f:f2:7e:4c:15:fd:b9:f6:ff:74:bf:
5f:65:15:4d:39:19:e6:9c:dc:ef:5d:c3:6b:c1:51:
34:b1:94:06:9c:9c:1d:65:9b:7f:08:56:ef:00:71:
33:0e:4f:d8:78:a4:7b:a8:90:63:db:f8:3e:b8:f3:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:47:71:F5:8D:4B:15:B5:3D:A1:52:C7:25:C8:8C:E8:F3:BE:25:DD
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:08:9a:07:14:dc:79:83:e8:ae:ed:66:3f:27:43:a4:1b:31:
25:7d:16:4f:ee:f1:29:9c:68:a9:d9:4f:23:0f:64:2f:3e:28:
00:61:43:76:31:b5:b8:d3:0a:5e:20:d3:71:38:c6:27:15:c5:
99:c1:d4:31:b3:4e:6e:26:31:7a:a2:40:8e:9a:b3:a3:a4:69:
0d:b2:f2:7b:93:aa:b9:a9:be:d4:10:d8:e1:71:c7:f7:ff:e0:
f8:48:5d:2b:af:f5:83:b0:d0:b8:7e:43:b0:38:c9:e5:7d:05:
18:3d:fa:11:34:e1:8d:e8:90:30:c7:33:6a:cd:60:30:1e:86:
dd:d9:ac:02:03:17:be:a2:5d:b5:6e:50:1b:f2:c0:ae:0b:95:
96:91:81:8a:31:b0:1d:c7:13:94:99:f7:ec:57:70:1e:55:e0:
c4:0c:75:91:b7:20:49:72:49:01:df:46:25:e3:04:eb:6b:d6:
45:f6:22:2a:7f:89:3c:75:78:c5:e7:5b:6a:a0:a0:b0:cb:a8:
12:67:9d:7c:a5:9b:eb:02:6e:0b:a0:b8:65:85:9c:34:0f:9c:
24:ef:f2:de:70:75:fa:d8:1e:37:01:3e:fa:d9:56:69:0c:c5:
1e:3c:18:af:12:8c:03:d3:cd:77:96:b4:19:17:c6:33:fc:c0:
7c:cf:4f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:24 2026 by rpki-client