
$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json)
Hash identifier: 4wBiSFViCKnc0H3HANo1TP6Ah+BSCETvLaDlhp7sVtI=
Subject key identifier: A1:EC:49:5E:A2:44:12:FD:C7:28:2F:E7:CF:01:9E:CD:5B:65:9E:58
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial: 02B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
Manifest number: 029D
Signing time: Wed 27 May 2026 01:52:33 +0000
Manifest this update: Wed 27 May 2026 01:52:32 +0000
Manifest next update: Wed 03 Jun 2026 01:52:32 +0000
Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: Y7p32M0Zw2IQVInEB5INbCLXdy6p54ikG5vd/2xbn/M=)
2: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: wHMAYibew+x1AYfuE7BluYMkxk01iW8RsGQGMAVOxuw=)
3: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: 99MSdD0Bt5MeBMSX17ngnXwJ7ZzUJ4PBVC3nYuIVduQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 01:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Validity
Not Before: May 27 01:52:32 2026 GMT
Not After : Jun 3 01:52:32 2026 GMT
Subject: CN=6a164e61-e525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:47:cc:6e:be:65:54:6b:e4:85:75:8e:fb:
63:0f:3b:c2:1a:e1:4b:d1:c9:e0:c9:f3:b7:2e:c7:
b1:b3:79:f3:bd:dd:d1:3a:ac:d1:04:5a:86:88:58:
3f:cc:9d:0c:d9:ab:9d:db:b4:a1:4d:e3:fd:81:3f:
66:b6:58:c3:22:12:52:7e:2f:d5:6a:4a:6e:9a:3b:
5c:e5:48:f7:da:a8:b6:b0:0b:43:8f:a3:30:e5:12:
0f:95:04:4c:ed:14:af:05:a9:ac:ec:cd:11:9d:ef:
d2:80:a3:79:4b:32:0f:7c:1d:40:29:ed:0e:b7:01:
de:d4:f3:65:2d:75:4f:d7:4c:5e:50:43:89:ae:89:
90:f4:67:0f:3f:bb:29:78:a9:98:d0:8a:4b:80:bc:
5c:9f:ee:19:ec:fc:ae:1e:47:12:64:5a:88:02:66:
da:1d:1c:57:6b:99:a0:7b:17:e2:80:94:94:9f:22:
37:ec:27:bb:c4:ad:ea:86:90:bb:bf:fd:04:ba:b9:
9d:e9:96:0f:cb:07:bf:1e:cc:9b:6e:92:67:f8:22:
58:2e:29:3c:02:6f:af:bb:a3:ab:07:60:e0:b3:fe:
a1:37:9d:69:1f:26:99:40:40:0e:9f:fa:65:8d:7f:
60:38:21:79:74:16:14:9a:ad:99:93:1b:01:ba:88:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EC:49:5E:A2:44:12:FD:C7:28:2F:E7:CF:01:9E:CD:5B:65:9E:58
X509v3 Authority Key Identifier:
keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:31:6d:9a:ce:60:21:2d:54:87:88:1c:c0:9a:2e:6a:3e:f3:
71:69:14:bd:10:9b:33:59:52:9d:4b:96:46:86:57:35:c3:1f:
d5:37:f1:99:96:7c:d9:4a:c8:fc:b8:d5:35:38:6a:dc:73:ff:
31:0e:e2:07:8f:e8:6e:bf:fc:bd:fa:fc:6e:cc:88:d1:b0:d1:
5c:5e:d6:ac:69:3f:8c:73:a8:ed:3d:65:97:e0:4b:50:9a:53:
06:8e:6c:41:c4:6d:a6:5f:63:08:70:40:82:ef:17:fd:aa:7a:
12:9a:ca:04:1f:ba:2c:9c:f5:48:56:ae:a3:f4:91:87:20:15:
5d:ff:ec:a7:ee:ae:67:d8:54:d1:a2:d9:fa:ec:2f:e0:81:07:
38:71:56:1f:85:79:9c:42:9f:7b:74:8b:d4:e9:34:e8:97:2a:
3a:73:6c:86:06:58:4a:3a:d7:4f:84:04:92:d9:4d:8b:10:3a:
30:87:11:e6:be:53:f3:a8:8e:dc:8f:8d:c7:d5:9a:d8:8e:64:
77:9f:f5:df:d2:9a:2c:9e:32:70:c3:68:d6:6b:38:48:f3:af:
92:d3:3a:89:58:71:96:88:47:9e:d6:c0:a7:dc:b2:c4:f3:96:
0f:a0:e9:2d:86:e6:e3:91:ea:37:3c:58:5b:06:8f:a0:2e:4d:
42:04:08:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 19:21:00 2026 by rpki-client