
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier: XnTTFGQAT0OOXDgMuwlr6IvekVQ5SI0Kw/yODIfJFro=
Subject key identifier: B9:3E:FB:78:E7:32:7E:21:F7:B0:A4:B9:5B:81:9F:5E:1D:6D:45:95
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial: 0CA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number: 0C93
Signing time: Sat 04 Apr 2026 18:23:35 +0000
Manifest this update: Sat 04 Apr 2026 18:23:34 +0000
Manifest next update: Sat 11 Apr 2026 18:23:34 +0000
Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: nDE/c/LoEbCF3pPx4EVKGH6uwguPd2qyRInGxBGLHm0=)
2: B49D829014F411EA96EC5874C4F9AE02.roa (hash: jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=)
3: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: 0ylwtp+Xde2oLtmDBX2li5EHhsIVUZ6el50n4zuRj9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3237 (0xca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Validity
Not Before: Apr 4 18:23:34 2026 GMT
Not After : Apr 11 18:23:34 2026 GMT
Subject: CN=69d15726-ae17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:04:9b:59:d8:9b:ac:2d:18:60:96:84:d3:
84:e7:be:c5:ee:14:e1:0c:db:27:31:e8:28:0b:94:
7a:99:9d:1b:bf:7e:95:f4:a5:70:ba:11:00:ef:b7:
43:08:50:86:53:e0:4a:fb:8c:ef:5c:9f:7b:8c:01:
d7:c8:f4:4f:5d:a6:61:b0:56:80:ff:8b:3e:09:80:
7a:4d:7f:00:2a:f9:ea:a5:65:66:d5:2d:7a:a0:15:
33:87:9e:3a:29:73:22:9b:d1:a1:8a:65:97:a4:f2:
c8:0a:13:b0:2e:bf:36:a5:4b:24:3f:1f:69:e9:76:
05:cb:32:68:58:60:6e:66:47:d4:d0:63:6d:21:83:
8f:3b:8e:22:86:25:ca:5d:78:98:6a:b7:15:a3:48:
82:6b:0e:20:80:aa:4e:cb:bb:64:9d:ac:a3:d3:7b:
21:27:bf:c4:d9:b4:19:5e:61:63:c6:bc:89:ca:95:
a4:ab:b9:35:6d:7b:2d:4b:e9:0e:99:d0:1a:9b:fe:
a7:f7:74:bf:17:f2:fe:78:d5:89:42:fc:05:9b:76:
e3:fc:2e:a8:6d:54:b1:b5:ab:99:db:66:4c:0a:17:
68:3d:9f:0d:f9:b5:fb:7f:12:7c:fb:03:18:fb:89:
50:65:b6:20:39:f1:75:fd:90:43:ba:bd:3e:73:b0:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3E:FB:78:E7:32:7E:21:F7:B0:A4:B9:5B:81:9F:5E:1D:6D:45:95
X509v3 Authority Key Identifier:
keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:3c:bf:bb:14:b5:10:db:83:ee:be:9d:6b:e4:ef:72:be:ea:
83:e8:ef:89:4a:9f:8e:54:86:a2:54:05:3e:e9:6e:cf:cd:5e:
fc:e5:dd:f5:50:3b:ee:90:9b:19:02:02:a6:bb:61:ac:5c:3f:
f6:39:76:3f:94:45:5d:47:0f:9b:7d:cc:21:6f:51:fa:27:b3:
98:e8:bb:5c:19:ed:9e:a7:e1:34:8e:81:55:3c:63:d6:c6:5f:
ab:e4:1e:ba:6b:b0:67:32:aa:0f:41:1e:30:50:9c:f0:8d:53:
43:d2:a3:8e:c6:5a:23:2f:81:57:96:22:e9:99:04:91:a8:55:
64:c4:b6:3a:1d:42:54:f2:5d:b7:69:4e:5f:56:ed:41:d7:6f:
f1:b8:b2:da:8f:2d:8d:40:f7:e1:39:3c:0a:b7:45:4f:b2:25:
47:4c:87:91:50:a8:ff:8c:d3:74:fd:e8:82:bd:84:25:1a:95:
cd:57:31:c3:75:4c:29:97:b4:96:41:71:af:df:6a:05:12:ae:
7c:ba:f2:4a:88:6b:ae:9e:46:a2:b7:9f:ef:c2:42:64:e6:1c:
a6:35:c2:80:1b:1f:03:42:5c:f7:ed:cf:80:32:bd:7f:19:d2:
32:78:6c:06:78:9b:ca:6d:f5:96:16:fe:ed:ed:09:27:cb:5f:
26:b1:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:48:29 2026 by rpki-client