
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft
File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json)
Hash identifier: DKwLz14BJTcuPydp6ouoI/KcKEeGELMetBKdCpTJCT8=
Subject key identifier: 86:4A:CE:B9:60:F7:7B:48:6F:61:4A:4E:CD:EF:D6:37:57:6A:41:9B
Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99
Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft
Manifest number: 01F1
Signing time: Sun 05 Apr 2026 02:47:41 +0000
Manifest this update: Sun 05 Apr 2026 02:47:40 +0000
Manifest next update: Sun 12 Apr 2026 02:47:40 +0000
Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: 7AuPFdyNxXgCTsSCzrpwIaQZuwrAeNJYsXbnvhNHDGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl
rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399
Validity
Not Before: Apr 5 02:47:40 2026 GMT
Not After : Apr 12 02:47:40 2026 GMT
Subject: CN=69d1cd4c-f044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:61:ce:5a:4a:d1:2a:b9:3a:fb:c2:41:a0:
3c:94:0f:d4:30:ac:73:64:02:91:cb:21:ec:73:ae:
3e:ca:05:b4:5a:0a:0f:52:38:59:88:85:23:b1:9a:
03:7f:db:9f:45:ec:8e:fe:71:36:22:02:10:76:8a:
07:41:90:bc:6b:1d:39:ed:a3:6e:a8:5e:80:18:8d:
4e:0e:74:48:2a:77:45:0b:86:38:02:80:37:00:a9:
cd:da:ca:a3:9f:bf:1f:ef:d9:3c:ae:b9:b9:1d:30:
bd:57:3e:2e:93:db:2f:60:61:61:b3:f6:84:f9:a6:
27:26:e5:5b:68:17:10:a8:2b:7e:04:9c:2f:e1:dc:
a2:d8:f0:4b:45:2a:7d:0c:65:9a:c2:c3:d4:00:ad:
e0:24:9b:6f:52:6f:fe:2f:3f:9d:5f:af:67:7a:85:
15:e5:c6:f5:8a:7e:47:47:59:28:f0:7f:6b:d8:be:
e7:eb:80:d8:bc:d7:dd:7b:1a:54:03:ac:5b:5a:a8:
10:e3:1d:98:ab:db:9c:ec:97:d6:36:8a:f7:42:c7:
92:4a:a3:44:e8:7a:5a:c0:3f:c5:53:3f:b4:1f:4f:
58:bc:8e:e7:52:5f:d4:16:e5:bf:37:83:b8:39:41:
3b:75:f6:3a:b4:6b:14:fd:90:b7:8d:70:c6:fc:d8:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4A:CE:B9:60:F7:7B:48:6F:61:4A:4E:CD:EF:D6:37:57:6A:41:9B
X509v3 Authority Key Identifier:
keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:92:e6:1f:e0:c3:2b:b3:c1:6e:ee:0e:35:de:32:c0:90:51:
a5:69:e2:49:1d:43:bf:01:88:b0:cd:02:9a:96:45:65:3e:c2:
a2:6c:d2:72:17:a1:b3:44:15:a1:39:5a:95:dc:d7:c8:13:bf:
5b:ed:d0:9c:14:ce:5d:15:34:ac:a9:34:55:09:00:c1:f5:73:
97:b3:9e:5b:e0:6b:3c:6b:1e:19:be:bd:56:b2:79:8a:bd:e9:
d2:c0:4a:d8:04:9c:d7:9d:9d:8d:f8:18:60:62:32:7c:53:17:
e7:01:41:9a:10:7e:8c:f8:cb:8d:94:67:dd:c9:48:15:ec:6b:
2c:ea:43:a3:e0:39:dc:da:f6:35:d9:8d:d4:71:26:e9:cc:35:
df:42:41:8a:cb:8f:57:c6:37:f4:12:f7:de:a0:2e:a7:d6:3b:
57:24:38:14:ca:f9:c3:d3:b2:ca:62:f4:8b:0a:01:c3:15:f2:
7e:9b:27:3d:6e:fc:ca:aa:cc:db:64:15:e7:94:b6:b5:78:48:
ff:58:80:f5:50:bd:3c:17:99:e5:2b:b4:01:6f:10:0f:68:f5:
e1:b2:5e:34:2f:e9:b4:90:df:a1:0f:15:64:66:f7:b9:fc:54:
bd:04:1d:c8:0a:85:5c:1f:b7:bd:7d:c5:8d:6e:a4:7f:45:e2:
49:e6:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:15 2026 by rpki-client