
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
File: oL8weU5q5J7AaNUDjPmv9UNdHdI.mft (raw, json)
Hash identifier: QxhIvNHxcg+twdY/x2HidpNcZAudz5UjdrYUvbhqZhY=
Subject key identifier: 44:07:79:27:42:33:58:1A:A2:3D:FD:ED:BB:3F:CA:F9:1D:3F:20:E0
Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
Certificate issuer: /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
Manifest number: 42
Signing time: Tue 03 Mar 2026 08:04:29 +0000
Manifest this update: Tue 03 Mar 2026 08:04:29 +0000
Manifest next update: Tue 10 Mar 2026 08:04:29 +0000
Files and hashes: 1: oL8weU5q5J7AaNUDjPmv9UNdHdI.crl (hash: WcBLAOyMmP2U083kLbUxPYxsiTiBdaj+12Ldd1TtNZg=)
2: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (hash: aZcuk92cPHBLPT7kL0kkLxHikI+2JffenZZL+WJEXRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Validity
Not Before: Mar 3 08:04:29 2026 GMT
Not After : Mar 10 08:04:29 2026 GMT
Subject: CN=69a6960d-a9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:02:1f:4b:b4:9d:f8:dd:ee:86:78:dc:32:
f2:fb:f8:76:03:44:13:1b:be:ab:4a:26:47:93:2b:
1f:9f:f8:c2:c1:74:6f:64:fa:0d:5d:3b:17:b9:6b:
a6:d5:8f:04:d4:ea:82:ec:b5:86:3f:8c:90:7e:9c:
a4:ad:f1:5f:26:f5:86:5f:06:0d:f5:c8:ca:5e:b8:
96:c7:14:8f:5f:aa:a3:86:32:fb:03:26:f0:09:aa:
25:5b:d0:af:2a:f3:90:50:f0:f7:bf:7a:81:30:7c:
14:50:f9:64:dc:49:c6:d4:8b:0c:1c:99:7d:3c:66:
81:f2:5c:4c:e0:b5:dd:8d:82:ee:28:8b:04:8d:1d:
91:f6:c8:dd:7b:ab:f0:62:04:37:d1:de:bc:6a:da:
7d:7b:33:ff:62:bc:ff:ec:5d:60:50:01:39:7f:3c:
26:16:0e:3e:b1:3f:11:4f:1b:5b:ac:ef:74:76:7a:
c5:d8:2a:8b:76:1f:9d:0d:ed:17:8d:0d:cf:dd:09:
13:61:a7:18:b0:dc:7d:93:e5:fb:d5:ba:b5:00:3e:
69:1d:9e:6c:66:48:38:8e:3a:24:40:74:40:21:ab:
d7:98:7b:86:f2:7d:8c:a1:fb:60:5e:6a:17:78:19:
49:c9:ff:d0:95:97:5e:ed:1d:78:52:bf:b9:81:95:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:07:79:27:42:33:58:1A:A2:3D:FD:ED:BB:3F:CA:F9:1D:3F:20:E0
X509v3 Authority Key Identifier:
keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7f:fc:1b:88:7c:70:41:4b:51:69:bb:dc:b2:38:11:47:62:
73:e0:42:21:e4:da:51:db:4b:b5:c4:86:08:34:d6:d1:ab:cf:
39:0d:b0:6c:16:b5:00:d9:31:4f:76:64:e9:06:f0:ae:9f:f7:
19:4d:79:49:4c:0e:7c:83:dd:a1:c5:32:89:ca:d2:d0:fe:5e:
f8:a1:13:6a:6f:66:5b:2c:be:bb:32:14:db:89:30:33:e8:40:
0a:d7:f9:59:89:0e:b5:fa:c3:c8:ef:c7:51:8e:77:9a:90:54:
2b:1f:17:71:03:56:91:89:3e:88:7c:73:5f:ee:89:84:76:4d:
3b:d0:1b:e4:c7:e9:af:8a:20:af:eb:29:8c:e5:5e:91:ad:69:
10:fc:8b:bc:20:36:3f:21:68:4f:90:3c:48:c2:45:68:49:6a:
10:db:d2:e6:b2:2d:de:04:aa:e3:22:27:93:40:27:89:52:5d:
5b:91:e3:97:60:a2:ca:f7:f9:cf:43:a3:57:5c:2f:3e:02:8e:
b1:db:1f:51:e5:68:1e:55:05:58:98:67:2d:cd:ee:10:79:cc:
65:3f:bf:3e:70:db:bf:3d:d5:2c:a9:82:7f:eb:8a:45:ce:56:
68:df:d0:61:37:a6:46:e5:b9:99:7e:44:f0:2c:db:c0:4e:c5:
41:04:21:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:29 2026 by rpki-client