
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json)
Hash identifier: SNDP21pxhuORrIGPe6k3jNHtLjjcRtCuRJQbD8ESlxY=
Subject key identifier: BB:10:E9:55:32:32:C6:47:88:30:32:BB:E1:EE:3A:71:09:3E:5E:65
Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Certificate serial: 0684
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
Manifest number: 067C
Signing time: Sat 04 Apr 2026 22:18:47 +0000
Manifest this update: Sat 04 Apr 2026 22:18:47 +0000
Manifest next update: Sat 11 Apr 2026 22:18:47 +0000
Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: sZtWtv6Yr6XIiibbnQ00bKZlLKl+TdRu4sN8WmTlHro=)
2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: q1pTqOK64HYWoKgZSZ7XLFGjIcVEPgtKRHPpyD0S1+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl
rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1668 (0x684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Validity
Not Before: Apr 4 22:18:47 2026 GMT
Not After : Apr 11 22:18:47 2026 GMT
Subject: CN=69d18e47-b70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:84:08:12:c2:da:d8:26:0d:ca:89:1c:1b:
9a:0d:9b:5c:36:c2:c7:aa:95:7d:38:eb:2e:d6:42:
26:74:a8:b2:72:f1:2b:a2:71:c9:d7:5b:75:de:f3:
e0:b5:ea:95:ee:4d:49:e8:17:c1:5e:c9:bc:34:d8:
4b:dd:b3:bf:db:a8:80:43:b5:79:45:bb:34:d0:a6:
6d:57:0f:79:99:7c:f9:4c:13:97:fa:ac:a9:d7:36:
06:09:00:33:dc:c4:d0:80:be:ac:29:ec:61:c4:06:
6b:f1:1a:02:34:27:24:2a:ae:fa:73:4b:f0:13:b0:
d4:7b:89:aa:88:f2:d7:1a:73:d7:13:08:a8:4d:b8:
4d:f1:5c:23:8b:7d:57:f4:99:b2:86:8e:05:2a:b2:
c8:bb:3d:9e:00:a7:01:d2:26:03:01:5b:95:15:9c:
0d:c4:15:c4:91:7a:fe:6c:84:70:94:ff:99:2e:6f:
0f:c0:8d:78:5b:35:65:5c:42:45:45:3c:f9:2d:37:
8f:90:3f:8b:18:1f:25:85:a4:bd:7c:a9:d8:1a:04:
89:ab:88:85:a5:dc:60:a0:d5:1b:74:9d:db:db:fe:
b1:a4:cb:9d:3c:cc:56:45:16:9b:cf:f0:49:2c:5f:
3e:cb:74:d7:46:f4:27:d9:7c:8a:b5:00:70:34:52:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:E9:55:32:32:C6:47:88:30:32:BB:E1:EE:3A:71:09:3E:5E:65
X509v3 Authority Key Identifier:
keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:00:fb:ae:43:19:40:7a:48:5b:94:3e:ee:4a:cf:2d:97:71:
30:89:7a:20:78:3e:8f:f5:07:58:5b:26:14:52:2b:db:83:cc:
56:dd:66:ad:72:a3:e7:a5:72:28:a7:8e:bb:ef:8b:4d:8a:80:
f0:f5:92:b5:ad:c2:d2:01:c2:4b:b6:2a:03:b6:67:46:99:55:
9e:5d:09:5c:a4:e9:04:3c:ed:6f:5e:c8:38:e1:ab:da:4e:ca:
a8:a1:f0:60:bf:f4:09:56:db:cd:a9:fe:28:cb:f2:b6:30:f1:
58:ed:13:2e:00:48:e8:00:fb:d9:34:cd:de:32:48:97:8e:4d:
c4:89:ff:e2:c8:e3:fc:26:3a:f7:c4:4f:5a:b2:88:56:3b:23:
b7:13:c8:f3:b8:64:97:a3:e1:10:03:86:d8:dc:be:30:68:1b:
ba:9e:07:f6:a2:ad:7a:53:14:4a:41:d0:f9:ff:72:bd:56:6b:
b0:9b:af:22:2c:28:b7:22:58:ed:46:df:84:b2:f9:9e:73:c0:
79:04:ba:36:c6:eb:06:e6:b0:14:88:06:b4:53:21:8d:47:6b:
83:b5:91:d2:a6:ad:1a:2a:ab:94:a3:30:a5:f9:89:82:5d:9a:
f2:21:71:b8:6f:83:55:e8:cc:2c:f8:28:ca:da:41:c9:af:37:
80:3d:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 06:36:52 2026 by rpki-client