
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
File: o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json)
Hash identifier: IEvZTNk3uVGfJYDBW4R8PzynJkM4x1BDlF3ym99Nzgo=
Subject key identifier: DF:25:B8:08:36:19:15:25:D9:30:E4:0C:E2:16:32:68:BE:47:B0:9C
Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
Certificate issuer: /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Certificate serial: 03D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
Manifest number: 03CC
Signing time: Sun 05 Apr 2026 00:23:08 +0000
Manifest this update: Sun 05 Apr 2026 00:23:07 +0000
Manifest next update: Sun 12 Apr 2026 00:23:07 +0000
Files and hashes: 1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: 9Mv6Xm4jHf3aehk8iGr1OU6PhrdEWZ9C25fkz044sO4=)
2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: omBdwTJjBpYLM0wYV64/jRWywyvUBhT0d+jsji8w+eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979 (0x3d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Validity
Not Before: Apr 5 00:23:07 2026 GMT
Not After : Apr 12 00:23:07 2026 GMT
Subject: CN=69d1ab6c-d4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e6:c2:02:01:3d:2b:3f:62:6e:3a:39:f5:5f:
0a:85:10:5b:ab:a4:aa:06:fa:ec:0f:a8:49:c6:76:
30:c4:10:63:61:a8:7a:6c:26:29:99:76:a4:bf:4a:
ce:bd:2a:85:b9:14:92:7b:a6:32:73:e1:85:06:c5:
ad:01:30:87:ab:26:78:da:02:71:0b:f9:3f:07:af:
d0:1a:2a:8b:94:f6:27:43:5b:1e:64:f1:08:6e:18:
f1:a7:f0:f8:92:94:bf:8b:2c:7b:66:f3:e9:87:36:
4e:e0:61:18:67:02:df:bb:15:85:d9:c0:61:3a:c5:
fb:fe:85:91:bb:2c:9e:ac:1a:cd:8d:a0:e1:a4:05:
cc:44:6d:47:ec:79:0e:4c:db:56:3b:0e:c0:21:1e:
8b:2a:bc:08:0f:01:13:f2:84:a3:11:fe:b0:63:6d:
e1:6c:53:de:b1:72:52:fd:87:8e:f9:8f:a0:20:f6:
b4:fd:b4:f5:bc:19:c6:a7:38:de:86:75:3d:6d:08:
bc:89:0f:13:9c:59:e6:dd:63:b3:be:96:7b:85:3b:
68:1c:02:75:15:a3:48:58:02:a1:b0:cd:3a:5c:9b:
9a:19:30:c2:44:07:9a:b7:4b:15:bb:1c:68:64:51:
0d:f0:36:d1:fd:45:d1:72:f6:0b:f4:80:92:a1:74:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:25:B8:08:36:19:15:25:D9:30:E4:0C:E2:16:32:68:BE:47:B0:9C
X509v3 Authority Key Identifier:
keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:af:3f:f1:fe:58:4f:ad:fd:09:c4:18:26:73:61:46:7c:44:
7f:d4:30:27:b8:72:13:5a:f3:ad:c2:09:79:32:4a:a0:e6:8d:
88:07:9d:c1:f7:59:4e:57:82:8b:c9:f7:ef:d0:b8:be:89:1a:
b7:ac:63:cb:8f:95:7d:7c:c6:da:1a:ce:d5:5b:7c:f1:d8:66:
5a:a1:2a:f6:70:b5:fd:d5:43:2c:63:30:98:b9:cb:37:35:35:
31:f1:be:58:1a:00:4e:3e:78:7d:55:bb:20:9a:4f:6e:ef:24:
e8:d5:0c:97:2c:4a:36:9a:e8:f0:c0:ab:8b:d0:75:31:ad:ea:
8f:a9:6f:c6:cd:54:b2:f7:74:3c:22:e9:75:b0:78:d6:3f:51:
a3:ce:65:82:3a:d6:49:33:b6:b1:d3:21:dd:48:13:1d:42:98:
7a:fc:01:37:c2:ac:03:ed:9a:94:87:a9:0b:c8:6b:40:ea:d2:
ff:75:7e:25:a2:0d:30:81:fa:6a:aa:da:26:25:b0:75:6f:86:
6e:a6:66:8d:6d:79:37:59:3d:86:5a:be:35:c8:05:6a:36:68:
8c:2e:4e:c5:1a:e5:a0:b4:58:ac:c4:76:cd:4a:17:02:e3:7d:
59:6c:f5:af:c8:28:33:d7:10:67:2b:c6:0c:37:a9:0a:2e:68:
5a:cf:bb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:10 2026 by rpki-client