
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
File: ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft (raw, json)
Hash identifier: EXEflrQbC6r5CtSHfXzgcdxA2+jaaZ6YxanDWkRLqCE=
Subject key identifier: 46:25:12:F4:7F:D3:C3:3B:9D:01:57:65:71:77:B3:D9:06:CB:F0:28
Authority key identifier: A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2
Certificate issuer: /CN=A9196AF7/serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
Manifest number: 40
Signing time: Thu 23 Jul 2026 10:29:52 +0000
Manifest this update: Thu 23 Jul 2026 10:29:51 +0000
Manifest next update: Thu 30 Jul 2026 10:29:51 +0000
Files and hashes: 1: ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl (hash: 7zStrEmNjnbUmniBcAsgy8tgOPf0gKzA2QwauNicR3U=)
2: 7EF6CB6E24CF11F1AAA533A9A9833773.roa (hash: 8y7L9hPSTuk1LDFXpb7ShDJmE7OnOp5HbjTXee/kCzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl
rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196AF7, serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2
Validity
Not Before: Jul 23 10:29:51 2026 GMT
Not After : Jul 30 10:29:51 2026 GMT
Subject: CN=6a61ed20-c1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:10:6f:7d:ff:17:05:f3:87:0c:60:3e:f6:
57:84:d3:54:d5:fc:3f:10:41:3b:dc:87:20:0b:3c:
65:5c:7a:3c:7e:66:1c:9c:56:3f:7b:f9:c2:fd:3d:
07:56:11:76:8e:cb:d0:64:d2:f5:5b:24:f0:c8:d2:
46:b9:0e:d1:0d:08:68:53:33:97:e6:7c:93:f1:09:
fb:9b:74:11:87:41:62:dd:67:2f:4a:0e:59:3d:47:
7e:b2:ea:a9:89:54:47:70:d2:d6:f0:22:fe:0c:23:
7d:04:de:81:cb:38:d0:91:cb:08:39:15:2f:d9:5d:
42:0c:a1:6e:a5:c4:4c:7f:97:55:1e:d7:76:1a:af:
87:cc:58:93:06:66:79:41:73:96:8e:b4:0c:43:90:
2a:1c:98:69:30:a9:12:2c:f6:84:bd:e7:90:38:41:
c7:fe:75:53:fc:12:5c:42:ff:3c:e4:0e:89:b1:42:
d1:a5:18:ae:d1:89:6a:f0:e8:c1:0b:2d:1b:ef:56:
e7:56:ee:01:58:29:b6:5b:fe:ba:51:1e:98:91:b5:
73:40:d7:6a:0d:0c:bd:9a:b7:9d:b3:c7:96:8f:16:
e5:40:79:94:56:6c:d7:e0:1f:65:91:46:ed:9a:e8:
08:c7:5a:2b:d7:f9:87:e9:de:4e:82:cf:82:fd:f7:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:25:12:F4:7F:D3:C3:3B:9D:01:57:65:71:77:B3:D9:06:CB:F0:28
X509v3 Authority Key Identifier:
keyid:A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ee:5b:cc:82:bd:8a:2e:d4:3d:75:4b:75:b4:4a:b0:11:c5:
3c:d9:62:cd:b8:d6:5d:31:61:43:23:a9:5d:58:f9:20:e3:e2:
2d:de:a4:a8:cf:44:a5:fc:b7:88:f2:de:c5:24:64:e8:c2:3e:
02:9b:a1:35:9b:0b:5c:04:62:97:5c:da:e1:61:9b:1f:07:0a:
3f:bd:f4:31:86:b2:25:7f:3a:21:df:27:00:af:2a:32:2b:fc:
0a:fd:e0:15:52:2c:fb:0d:26:24:35:1e:d1:c9:ac:5f:38:d4:
82:36:3a:86:4e:6a:97:f9:94:97:00:74:23:04:b9:50:e2:ae:
c3:36:07:7a:22:79:33:80:6e:00:aa:6d:8b:c7:6c:97:e0:32:
2c:6f:e1:26:9f:50:a8:92:78:39:ff:04:4f:7f:c1:db:d9:1e:
f3:b7:3b:e1:41:b5:f6:3c:7b:f3:d5:f6:a7:a0:6d:ba:4d:2b:
6d:8b:24:c8:02:a2:eb:71:ba:7f:3c:c3:a0:91:ab:c2:a6:92:
ea:da:95:99:35:10:4b:97:c8:0e:05:0c:6a:92:7a:c1:3d:67:
c5:0b:e5:c2:1f:74:95:0f:ab:50:c5:6f:31:58:d5:cf:46:d3:
39:aa:75:44:b5:c5:60:73:ef:88:d6:e6:eb:c1:2f:a1:d4:a6:
4f:cf:c6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:05 2026 by rpki-client