
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json)
Hash identifier: uGRTWZVaId7s3tK3ZTBkF8Wmk37LssN65o4eioyYYXE=
Subject key identifier: E6:94:97:E7:43:ED:1A:0D:E4:77:8B:E0:65:E9:39:A5:45:F9:CA:5C
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial: 02FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
Manifest number: 02E8
Signing time: Fri 23 Oct 2026 01:29:32 +0000
Manifest this update: Fri 23 Oct 2026 01:29:32 +0000
Manifest next update: Fri 30 Oct 2026 01:29:32 +0000
Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: fXBY98ZjO0rOVwgk6iVtEThSd6p25xFwpU5aeVNlkVc=)
2: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: wHMAYibew+x1AYfuE7BluYMkxk01iW8RsGQGMAVOxuw=)
3: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: 99MSdD0Bt5MeBMSX17ngnXwJ7ZzUJ4PBVC3nYuIVduQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 01:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Validity
Not Before: Oct 23 01:29:32 2026 GMT
Not After : Oct 30 01:29:32 2026 GMT
Subject: CN=6adab87c-226d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:b2:a2:c8:ac:0d:92:21:7f:9e:24:e4:ef:
51:9a:23:95:9e:f3:e3:6a:7a:22:9a:34:83:4b:0f:
60:fb:d0:ac:55:70:b0:17:f7:d5:43:59:e8:68:1f:
22:a6:7f:18:81:6c:e2:e3:1e:e3:69:dc:8b:58:5b:
e7:a0:04:38:03:15:ef:e6:0c:4f:c8:35:df:3c:1c:
23:df:11:c5:be:96:d2:25:b8:58:9d:93:41:65:c2:
91:23:b7:68:a2:2c:c4:58:88:ba:e5:e6:3f:31:ba:
18:5f:73:c4:91:30:4c:e8:91:2e:01:78:0f:9f:55:
7c:eb:67:8c:b0:bb:63:4f:08:f7:e3:19:6b:59:94:
c0:53:cd:7f:e6:23:b2:9d:16:1b:76:3b:5a:29:57:
ac:35:5f:d6:02:07:e3:9b:8d:cd:94:7e:cf:7d:fd:
ef:7a:ac:12:41:d3:97:a3:38:1c:b6:8d:72:23:dd:
d0:a8:e3:cc:63:b6:5f:f8:70:f2:ce:ba:ca:40:f8:
1f:2d:da:64:a9:f1:fe:a3:13:00:22:48:af:b9:05:
f3:90:5d:4a:70:62:99:93:8d:91:98:cf:a3:1d:c9:
54:38:37:4f:80:04:27:b6:2c:6e:b9:51:9a:8e:9b:
97:2b:0a:44:69:b0:00:e3:52:92:e1:63:00:35:7e:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:94:97:E7:43:ED:1A:0D:E4:77:8B:E0:65:E9:39:A5:45:F9:CA:5C
X509v3 Authority Key Identifier:
keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:1a:03:2a:a5:b1:68:2b:9e:6a:eb:33:3a:1d:7e:35:f3:fd:
02:07:61:90:84:07:2a:ef:f0:9f:eb:2e:79:49:fd:a3:c6:76:
cf:41:15:2e:65:96:b8:9f:ff:fb:ab:a2:ac:fc:62:12:24:bf:
b5:f8:85:5e:22:05:cc:40:bf:dd:ff:ab:bb:b6:00:d8:ff:cf:
a3:b3:20:27:df:6f:a6:1a:7e:d1:8e:51:2e:19:1d:57:b4:b4:
60:f4:3e:08:ec:01:4f:9b:41:45:2a:8f:f5:30:17:2f:b9:f8:
86:f8:5f:12:dc:bf:28:17:b4:cf:26:00:9b:0e:46:10:75:1a:
07:98:d1:63:bd:84:bf:de:3b:c0:23:a1:fb:35:50:df:43:5d:
45:f9:93:d2:04:6d:13:8f:c4:fd:74:0a:93:95:97:56:62:0b:
13:c2:26:66:35:41:79:57:bd:85:85:3c:80:8f:3c:b2:9a:ba:
27:4f:7c:a0:83:44:0a:23:be:ec:1d:9f:8c:74:f7:a7:d9:64:
5a:cc:ee:da:d2:40:78:09:09:ea:32:df:4d:bf:9e:a4:6a:9d:
69:8e:1b:56:ff:55:86:33:c8:3c:c5:86:c7:0c:65:04:bb:24:
4d:76:94:16:e3:5c:05:13:5a:f1:18:21:95:e9:f2:01:77:b1:
f5:5b:cf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 19:23:00 2026 by rpki-client