
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json)
Hash identifier: JgB4rV/3i9Tdo5bvuqm/buKW3y5BDb5OKdaWypzS8V4=
Subject key identifier: 47:6C:E2:0A:C2:2C:23:90:98:A2:BC:BC:67:45:CD:D2:DF:25:8D:AC
Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66
Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
Manifest number: 0729
Signing time: Mon 26 Oct 2026 23:23:08 +0000
Manifest this update: Mon 26 Oct 2026 23:23:08 +0000
Manifest next update: Mon 02 Nov 2026 23:23:08 +0000
Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: nUvkDn5BnPwx8uaFteQ9kPs+Fx3WCN9Xjx7MfrBZ5kg=)
2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: rUV9zu+LXsEi7mN7osCEnUxo/cr8mt6t5o12W9CPPBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl
rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 23:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
Validity
Not Before: Oct 26 23:23:08 2026 GMT
Not After : Nov 2 23:23:08 2026 GMT
Subject: CN=6adfe0dc-ae1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:6d:34:4b:db:40:4a:19:44:57:42:5a:2c:
aa:c1:25:6a:9d:30:b9:cf:e8:fe:25:af:ee:81:b6:
99:4d:5c:ba:b2:9b:4d:4a:da:ce:d4:99:4d:0c:03:
1d:a6:fd:66:5a:53:cc:2d:be:f2:2f:e7:f3:99:95:
04:bf:b7:ca:4d:95:dc:9b:51:dc:7b:74:67:fe:8d:
a7:a8:41:ad:b6:2d:ec:14:47:98:31:3b:08:54:24:
ad:ec:e8:39:af:56:7e:cf:48:1d:b6:4f:c4:88:53:
59:cc:42:32:da:6b:d4:c7:9e:a3:bf:63:4e:5f:80:
92:80:20:0b:5a:2f:34:c5:d0:70:14:ad:50:79:4c:
8b:fd:dc:e5:fd:eb:3a:49:0f:82:59:e5:b4:af:79:
b7:d1:66:09:6a:69:a6:9e:00:49:8f:11:8c:39:d1:
06:6b:35:3d:b7:5a:95:1c:eb:54:f0:b1:e4:24:d1:
81:eb:f0:70:6a:a2:72:8e:d3:54:59:58:09:f3:69:
94:f8:1b:34:7a:d1:3f:e9:67:33:13:62:aa:cb:ca:
85:b7:00:ec:14:f3:b3:62:ad:0c:47:75:ce:48:de:
05:25:a9:0e:d6:16:7d:0e:e5:5e:b0:05:fe:9c:cd:
92:6f:ec:bb:e4:ac:84:29:0a:03:17:da:74:b1:f0:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6C:E2:0A:C2:2C:23:90:98:A2:BC:BC:67:45:CD:D2:DF:25:8D:AC
X509v3 Authority Key Identifier:
keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:43:9a:44:65:b1:8e:b7:aa:40:c6:ec:1b:0e:a0:12:14:5b:
8b:9b:0c:5c:63:98:14:f7:18:7b:a9:c2:dd:07:5f:0a:79:ab:
9e:3d:86:cc:2e:a0:dd:2d:64:83:1a:1c:be:82:a1:8c:4f:51:
ff:1c:0a:17:bf:45:b1:b1:b0:03:c2:e5:71:68:d5:9d:bc:d1:
ae:f8:61:37:dc:51:ed:d5:13:4c:cd:6a:ba:67:37:71:aa:2b:
05:c3:18:a8:00:35:28:79:2c:8c:8f:d1:84:53:41:5b:b6:77:
75:e5:d7:12:17:9b:d0:8e:02:9c:39:15:5d:f2:ff:51:d8:0b:
ec:bc:fe:26:ed:c5:68:0c:8e:e8:ad:b3:47:84:86:ce:a0:b2:
9d:5a:11:90:6f:68:29:0a:a8:f4:3b:ca:b5:b0:15:60:a6:e8:
69:d2:89:61:01:f1:93:c1:e0:39:16:1a:77:28:b2:c8:3a:af:
8a:2f:0f:07:49:6b:41:d9:22:e3:34:9c:63:92:b4:d5:6f:33:
d2:de:df:da:82:ef:34:04:64:09:2f:b2:21:e9:ba:f1:0e:3e:
ce:8b:18:cc:02:84:69:5f:66:02:87:54:59:a1:36:76:81:12:
69:1d:61:9e:a9:b8:17:5b:01:b8:5e:35:f1:c5:3c:ec:37:93:
e6:37:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:44:49 2026 by rpki-client