
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
File: OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json)
Hash identifier: qW1JRU8CV4cNmyVSyiDSD9GEhycm/pJz7U9j1cCjH8k=
Subject key identifier: BC:31:BB:6D:1C:91:C6:9E:74:26:82:2A:6A:72:13:C2:6B:BB:12:C7
Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8
Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
Manifest number: 010E
Signing time: Sun 05 Apr 2026 05:26:06 +0000
Manifest this update: Sun 05 Apr 2026 05:26:06 +0000
Manifest next update: Sun 12 Apr 2026 05:26:06 +0000
Files and hashes: 1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: n9cZM5f1uPDPvvBknEGt61AUr1iJpA/YBohRpzVVmNk=)
2: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: /TeFmAq6WUrTiuCuPlwLIq4bJylbmUbGhfodPgyaENY=)
3: 03FFD61EEF8A11F09F678C04616F56BC.roa (hash: Vq7WOAaGyHrEANMuaydXxs4oGlSE1GWybP72WD+YuWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl
rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8
Validity
Not Before: Apr 5 05:26:06 2026 GMT
Not After : Apr 12 05:26:06 2026 GMT
Subject: CN=69d1f26e-2c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:24:f3:38:1a:c5:8c:11:00:8c:86:0d:fc:
89:b3:2b:ba:53:ef:d1:af:cc:5a:a3:63:07:39:33:
40:45:37:32:7c:40:88:ec:f4:47:0d:d5:a8:a8:6c:
0d:c7:eb:a6:39:33:de:6d:91:ed:d2:8f:29:76:dd:
b2:d8:68:5c:17:a6:76:73:91:4c:5a:c5:3e:8f:71:
40:0d:bd:3f:8d:0f:32:6d:08:31:bf:77:72:90:e4:
03:fc:bc:81:08:98:08:61:ed:91:e8:66:a5:6f:51:
ed:c4:63:12:c9:12:1d:83:cb:e6:31:8c:e5:91:93:
54:a6:70:7b:f7:b3:23:f2:67:bf:60:b2:2b:09:61:
25:15:42:2a:bc:5f:9a:d4:94:0a:37:19:57:ba:f8:
42:e7:b0:3e:13:92:5b:6b:d7:ff:fe:5d:9c:c8:02:
e0:2f:33:36:b1:79:5a:ea:75:cd:85:2a:cb:cb:ba:
62:f6:eb:d1:2c:9c:6d:05:32:46:e2:64:db:7a:fd:
dc:fd:67:3a:2d:72:8d:de:9a:29:1a:ee:32:34:eb:
1a:08:7a:50:d1:d6:27:65:03:fc:80:6e:d8:70:22:
b4:65:50:7f:be:16:4f:9a:39:e9:32:a1:79:52:2f:
c8:f2:34:d2:c0:ea:ca:78:fb:93:66:8f:cd:30:f2:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:BB:6D:1C:91:C6:9E:74:26:82:2A:6A:72:13:C2:6B:BB:12:C7
X509v3 Authority Key Identifier:
keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:f6:e5:b2:f3:96:f1:37:19:8e:8a:5a:08:46:25:fa:79:32:
c5:5a:a5:0a:0e:f0:5f:e6:99:17:c4:d6:92:d4:ab:e4:5f:9c:
83:18:19:c9:a2:75:fa:df:70:54:43:53:7c:69:23:1f:14:07:
5f:cc:d3:d6:fd:e2:65:19:a2:c5:aa:15:8d:01:45:cd:3c:c2:
63:cc:22:f2:15:23:a4:16:c8:dc:79:a7:3e:68:d4:9b:e1:6c:
b8:00:49:7d:72:75:b2:c9:f4:d1:59:80:10:d4:3e:7d:21:9c:
03:32:4f:94:95:e0:21:bc:2d:ee:1b:96:d7:47:a9:72:f6:1e:
36:aa:a6:2c:89:f6:d3:c1:e4:69:a2:a2:5b:e3:59:f3:55:3f:
23:24:ad:27:48:7e:e5:da:d6:87:22:5d:6b:55:fd:d5:3f:ca:
4b:c4:40:17:94:85:20:ac:8f:f0:a9:44:82:da:59:a7:3a:b9:
94:3a:ef:22:50:57:64:da:21:77:46:72:c6:be:a0:36:14:22:
08:dc:6c:15:9f:4f:7d:41:19:33:d0:94:61:6c:02:a5:d9:96:
fb:1d:ad:62:1b:f4:27:e3:26:f8:51:a7:f0:5a:ae:12:a3:b8:
6b:a6:bf:77:aa:7c:1c:43:3b:1c:59:b9:4c:df:28:87:85:55:
51:d7:3e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:16:50 2026 by rpki-client