
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json)
Hash identifier: FJNYdx4GTd/qNKZ6lh2rmI0Y1p1LS4yU5p+/tB4LJqQ=
Subject key identifier: E4:E6:76:19:24:D9:FC:7F:EE:D2:19:FE:6F:8F:F2:61:5E:CE:DB:63
Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
Manifest number: 0211
Signing time: Wed 25 Mar 2026 02:40:56 +0000
Manifest this update: Wed 25 Mar 2026 02:40:56 +0000
Manifest next update: Wed 01 Apr 2026 02:40:56 +0000
Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: VOZwPZBexJuoZHZCPxQvBSeZqmOSNphJqcNSHgoGjaA=)
2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: UJfcT25TpxMsPXblHXFvDdc06o4EalWiUveKOaWphfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Validity
Not Before: Mar 25 02:40:56 2026 GMT
Not After : Apr 1 02:40:56 2026 GMT
Subject: CN=69c34b38-9b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:23:2b:c9:74:72:2b:ca:b8:b4:d3:9d:37:
d9:45:d0:64:35:90:44:78:f1:f6:75:84:c5:4b:45:
5d:14:6d:ad:02:9d:0f:2c:85:35:f2:aa:24:26:8e:
44:bb:1f:82:ef:cf:06:20:64:bb:29:12:8a:8a:53:
fe:4a:4e:40:93:49:72:e3:e6:32:12:a7:7a:fb:2d:
c4:14:d9:d8:b4:71:08:f0:ac:ae:3a:e1:ef:3d:94:
22:a0:42:9a:4e:6b:b8:65:e2:4c:6f:10:f3:82:da:
ae:3b:ae:50:12:54:45:5d:01:a4:d0:18:bc:8c:1f:
ce:3c:d7:d0:c3:c1:27:32:f6:19:ff:47:76:af:2c:
c3:30:32:d0:e4:cc:ae:3d:26:29:a2:bd:e9:c1:85:
b6:23:05:e0:37:7e:b6:44:9c:54:3b:22:10:66:38:
9b:fa:34:0f:41:2e:84:89:ab:a6:50:7e:c0:77:9f:
12:b8:89:71:91:18:69:81:7c:80:53:df:c2:39:2e:
e1:2a:bc:1c:d0:86:7b:7a:8c:af:6d:c8:57:fe:c8:
2b:d6:78:0a:52:95:d9:02:1b:a7:d2:93:68:58:94:
a4:5e:b2:73:f1:d5:29:42:31:46:c6:c3:4a:f2:e9:
74:5f:74:8d:d7:04:e9:5f:70:08:7f:ec:50:00:1d:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:76:19:24:D9:FC:7F:EE:D2:19:FE:6F:8F:F2:61:5E:CE:DB:63
X509v3 Authority Key Identifier:
keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d4:42:92:9e:a8:ed:ff:8e:6c:ed:89:20:b0:e3:c4:5d:d4:
ce:f3:3b:f1:0e:4b:ea:29:0a:9e:59:f0:4f:77:b3:f5:fb:2a:
a7:3c:6d:cf:65:ac:12:fd:df:3c:ef:90:f5:91:09:18:5a:03:
fa:40:7b:d4:00:02:29:8f:95:5a:b1:28:3f:60:41:ce:e9:15:
db:24:25:fd:8e:94:ad:1c:5e:d7:6d:6a:5e:bb:30:ff:80:34:
f7:4d:b8:4a:a5:0f:e7:7b:5b:a5:d9:32:37:5b:26:04:c9:a0:
da:a8:0f:6c:26:1c:a7:72:a3:0e:77:b5:45:50:10:80:43:9d:
5e:36:88:66:af:d2:b3:3f:e5:1b:33:d2:e2:0f:22:93:42:40:
08:f3:23:d7:36:37:4f:57:50:62:93:2c:66:af:96:54:46:fa:
c6:88:33:0a:ec:7f:9a:7c:ef:d5:bb:1c:66:bb:94:c5:5c:7b:
89:33:19:83:21:2d:81:2f:48:87:bc:0d:4e:eb:d1:cb:50:35:
ed:37:63:0a:bf:70:bb:ef:03:e3:1d:c5:67:b6:97:ec:4c:9d:
47:dc:16:1e:a3:46:64:d8:ed:75:1e:d6:98:b4:33:a4:81:c2:
34:33:5a:d1:01:40:21:c3:1d:9f:10:00:8c:25:2d:91:7a:a6:
ed:a9:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:23 2026 by rpki-client