
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json)
Hash identifier: wW2Q4aS90Gmt7LzX/j9PCvpTffBbwpWPig6mdFN2PLM=
Subject key identifier: C9:1C:32:B9:75:08:F7:F6:7F:95:87:9D:C7:83:3F:9D:5F:BB:1B:7A
Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
Manifest number: 024D
Signing time: Thu 23 Jul 2026 03:58:17 +0000
Manifest this update: Thu 23 Jul 2026 03:58:17 +0000
Manifest next update: Thu 30 Jul 2026 03:58:17 +0000
Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: SHFDq7fqEb6TI/Iru3/k4RcRqy7kh1DCxmGR6Bfi8Cc=)
2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: UJfcT25TpxMsPXblHXFvDdc06o4EalWiUveKOaWphfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Validity
Not Before: Jul 23 03:58:17 2026 GMT
Not After : Jul 30 03:58:17 2026 GMT
Subject: CN=6a619159-0ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:ea:85:09:47:d6:90:58:51:15:fe:84:d0:
2e:eb:a1:d5:20:49:f4:04:bf:ed:cc:5b:52:c1:38:
20:c1:f1:dc:75:64:67:f4:60:9c:5c:83:56:c4:7c:
0a:c6:14:8f:02:28:4f:6e:91:fd:c3:09:ec:4c:65:
e9:80:f8:ee:c3:e0:ec:60:43:d8:37:a7:e3:b9:56:
4d:a1:d9:b1:93:a0:90:a6:5d:ce:14:04:c1:32:4d:
14:c1:88:1a:58:51:e0:60:08:59:ce:ec:54:cf:f5:
d9:40:ef:9d:c4:00:bb:9c:ec:e9:2b:3b:a7:06:9d:
70:2b:65:7a:10:18:8a:77:0a:ea:63:9b:be:56:66:
81:41:19:e6:22:c0:f1:d5:9e:12:d1:52:cd:91:78:
ca:25:8d:72:22:64:a3:13:d3:b5:24:38:b9:9a:57:
4e:41:bf:48:e6:be:a3:b1:6f:e2:dd:82:f9:16:c3:
f9:26:19:ae:83:94:18:41:eb:9f:59:57:5f:7f:d9:
1f:d3:47:1e:28:e9:5e:ac:56:35:09:ff:13:46:b2:
ad:94:ed:0e:50:fc:7a:f8:44:27:02:0b:57:ef:b1:
e0:9b:47:fb:09:d1:82:41:79:6c:4e:d6:cd:44:10:
1e:0a:31:a2:39:df:d7:45:19:95:2e:4d:c8:65:fc:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1C:32:B9:75:08:F7:F6:7F:95:87:9D:C7:83:3F:9D:5F:BB:1B:7A
X509v3 Authority Key Identifier:
keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:17:d4:5a:ec:cd:3d:34:4e:2f:39:01:8a:61:dd:98:df:0a:
1f:16:33:d2:d4:32:cb:72:c1:93:ea:58:5f:40:b3:fb:84:6f:
6f:38:cd:7e:08:51:72:c6:b0:b9:3a:00:af:3b:56:85:4b:55:
4d:58:9e:47:8a:6e:e8:2b:2a:50:3f:2f:7c:a3:de:86:42:24:
1e:3d:a7:47:cd:e2:d3:e2:a9:e0:54:9e:8a:5f:f0:ac:fa:de:
ba:5e:78:98:63:0a:20:7e:a4:4c:e5:30:a3:a8:86:68:07:1f:
66:36:1c:93:cb:c4:8e:4f:73:75:86:7f:42:66:90:00:0c:fd:
5a:2f:b0:c4:ad:f5:be:a8:9f:01:6b:29:f1:bc:99:55:12:3e:
54:a3:79:fc:23:eb:0e:d7:53:bc:f1:34:a0:82:4b:8e:d0:af:
6a:3d:1e:8a:0f:9c:03:e8:fa:19:05:a1:4a:3e:dc:9a:a0:0d:
6a:e1:9f:43:bd:29:89:18:c1:02:e8:93:fe:05:e4:06:94:25:
ca:06:87:58:af:57:85:c4:72:f0:d0:a8:c2:8b:a6:ff:6c:84:
56:47:e5:20:f5:ae:d7:6f:28:db:3c:63:0e:8f:db:8f:09:0e:
aa:6f:6f:86:a5:2d:0b:aa:94:16:fd:31:5a:95:15:82:ba:ce:
82:5d:e1:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0
OTMwRDNGQ0YwHhcNMjYwNzIzMDM1ODE3WhcNMjYwNzMwMDM1ODE3WjAYMRYwFAYD
VQQDEw02YTYxOTE1OS0wY2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAswLqhQlH1pBYURX+hNAu66HVIEn0BL/tzFtSwTggwfHcdWRn9GCcXINWxHwK
xhSPAihPbpH9wwnsTGXpgPjuw+DsYEPYN6fjuVZNodmxk6CQpl3OFATBMk0UwYga
WFHgYAhZzuxUz/XZQO+dxAC7nOzpKzunBp1wK2V6EBiKdwrqY5u+VmaBQRnmIsDx
1Z4S0VLNkXjKJY1yImSjE9O1JDi5mldOQb9I5r6jsW/i3YL5FsP5Jhmug5QYQeuf
WVdff9kf00ceKOlerFY1Cf8TRrKtlO0OUPx6+EQnAgtX77Hgm0f7CdGCQXlsTtbN
RBAeCjGiOd/XRRmVLk3IZfwoXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkcMrl1
CPf2f5WHnceDP51fuxt6MB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF
N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzM5MC9EMkM3RTcxNjNFN0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9Ickhp
ZkpXWDd0TG9Jb1ZKTU5QODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqRfUWuzNPTROLzkBimHdmN8KHxYz0tQyy3LBk+pYX0Cz+4RvbzjNfghRcsaw
uToArztWhUtVTVieR4pu6CsqUD8vfKPehkIkHj2nR83i0+Kp4FSeil/wrPreul54
mGMKIH6kTOUwo6iGaAcfZjYck8vEjk9zdYZ/QmaQAAz9Wi+wxK31vqifAWsp8byZ
VRI+VKN5/CPrDtdTvPE0oIJLjtCvaj0eig+cA+j6GQWhSj7cmqANauGfQ70piRjB
AuiT/gXkBpQlygaHWK9XhcRy8NCowoum/2yEVkflIPWu128o2zxjDo/bjwkOqm9v
hqUtC6qUFv0xWpUVgrrOgl3hrw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:49 2026 by rpki-client