
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json)
Hash identifier: pzfOZycp+Qmf8pwuz0O1UMPade6y8eeebhLompHw7dI=
Subject key identifier: ED:DA:DF:EF:4B:F9:D9:D0:B4:E7:91:68:CF:A4:31:EC:17:22:1F:06
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
Manifest number: DB
Signing time: Tue 21 Jul 2026 08:35:48 +0000
Manifest this update: Tue 21 Jul 2026 08:35:48 +0000
Manifest next update: Tue 28 Jul 2026 08:35:48 +0000
Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: 65wuHtcoLM2YGMz6QAHN3MfU+3NOmNZM8bqSkXpWy00=)
2: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: XNKmAaFf5HoukGTwreoWJabf3NdToWkx6WrL3K+h2cI=)
3: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: zRRASQfNY/IUyP28hDWRYbCWpGy8GvNHBf7/Zg6e0kQ=)
4: C24679DC741211F0808A8240C4F9AE02.roa (hash: N7HLFHANn01+NhgR1Pjfm0vM2oOkPaw9sH4Q3c5dgnI=)
5: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: 61YOBpN768smaHlb7VNUU/OIP9xDMKXDWqFb5RlTs1U=)
6: CA9147E64AD811F1881BEE7FC5833773.roa (hash: tJvZEShvl0XSM24iAjhyNDnXr1neGghFyUscgQfBVUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Validity
Not Before: Jul 21 08:35:48 2026 GMT
Not After : Jul 28 08:35:48 2026 GMT
Subject: CN=6a5f2f64-43ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f4:57:91:e9:49:57:6f:0e:fb:90:6b:c9:b5:
15:63:3b:67:92:47:11:fa:fe:9d:a5:df:e2:f6:a6:
73:51:80:0d:74:da:7f:ff:fe:ed:e0:f8:b3:b6:b1:
07:2b:e2:85:2e:75:0e:9f:86:26:85:54:03:21:6e:
d8:5e:46:b7:b2:22:d4:09:81:fa:52:8a:86:4d:23:
54:82:38:b6:8f:1c:8b:56:8d:f2:6d:5e:e2:f5:41:
89:e1:93:96:8c:ef:b2:73:c2:cc:83:45:2d:38:4f:
5b:5c:cf:d5:45:3f:86:5b:ee:69:d6:11:0f:cf:d8:
2a:5e:4e:69:0c:c2:e3:12:e3:18:02:48:39:b6:15:
47:3a:7c:b4:6e:45:f5:48:98:34:08:28:cc:cf:3e:
19:c0:b9:98:59:1e:0e:4d:e2:8b:e2:0d:94:47:69:
ad:98:52:ab:5d:b4:d8:0a:98:53:b2:c1:0c:6d:00:
1d:a1:15:f2:27:a9:c6:9b:a8:90:0e:64:90:86:ad:
01:e6:87:44:09:bf:ba:bb:43:20:2b:f9:47:7c:72:
46:12:97:2c:13:37:13:9e:b7:91:94:7e:09:57:5d:
74:5f:27:bc:16:70:70:aa:38:99:59:c6:ab:99:d5:
30:4c:df:3d:1d:38:3e:1a:a0:95:ad:d5:9a:1b:e7:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DA:DF:EF:4B:F9:D9:D0:B4:E7:91:68:CF:A4:31:EC:17:22:1F:06
X509v3 Authority Key Identifier:
keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a6:3c:d3:c3:5f:2a:f9:8a:dc:10:6b:1b:99:ab:78:a8:e2:
21:d9:4f:aa:9e:fe:83:80:62:88:6e:56:1e:61:21:d1:ec:8f:
04:2a:98:eb:cf:3b:15:17:5c:a7:4a:d3:21:02:75:cd:62:f2:
4f:cc:c4:61:0a:79:03:cc:18:2b:b7:33:1f:21:7e:c1:89:3c:
b4:92:33:7d:d5:f5:00:82:dd:72:57:6e:25:ab:61:6c:b2:04:
aa:59:d6:d9:86:0b:e8:50:ca:d5:cc:0c:ce:69:e9:46:0b:81:
d9:c1:de:d5:01:19:e5:18:ff:9b:bb:b8:b8:67:38:a7:1a:d1:
e1:47:77:2c:7b:fa:01:d8:8c:f4:57:5e:91:ce:58:ee:64:dc:
ff:f7:98:18:67:bf:be:bc:14:34:22:b6:f9:d5:3e:ab:d7:7c:
f4:5a:da:f5:99:cf:d4:d4:31:47:fc:83:38:43:e1:b1:df:59:
bc:34:03:f6:8b:ec:c5:30:1d:ac:f7:59:98:b4:81:b8:56:a1:
36:7c:ed:d0:3b:38:27:8e:bd:0a:28:41:1b:e8:e5:1a:68:a7:
6d:56:75:1a:3e:e7:0e:b1:fa:de:30:6b:1a:6c:c4:11:b5:4d:
8d:85:66:90:f0:8b:6c:68:ff:0c:bc:18:21:b3:e6:82:16:2a:
49:df:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:15:16 2026 by rpki-client