
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
File: O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json)
Hash identifier: 8tfhxD8zhltUBNVTJ/nJyHlYDkuJ/blShFHoZnXSmqI=
Subject key identifier: 80:54:A6:E7:ED:9F:FA:17:BC:1C:05:C0:0F:32:13:F5:8C:27:9E:98
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Certificate issuer: /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial: 0365
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
Manifest number: 035D
Signing time: Fri 15 May 2026 01:02:11 +0000
Manifest this update: Fri 15 May 2026 01:02:11 +0000
Manifest next update: Fri 22 May 2026 01:02:11 +0000
Files and hashes: 1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: XukCUe4mREGWZE6HqsWOfjoH8Vv/p0lJ/KbyZtWxzQA=)
2: C78C216A070211EDB5178252C4F9AE02.roa (hash: fyu14Jx6k1oTAKIdxEeJ8rrmDDiNJP7D4BIKAgsLJek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869 (0x365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Validity
Not Before: May 15 01:02:11 2026 GMT
Not After : May 22 01:02:11 2026 GMT
Subject: CN=6a067093-5a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:1f:57:1a:a6:fe:43:7e:ae:80:73:35:7c:
fb:20:21:a6:d4:77:f7:ad:3e:29:ca:7c:db:46:0b:
94:b4:82:c5:0d:f8:45:94:13:dc:0d:67:25:0a:74:
d9:7d:7d:09:f6:56:b6:c6:9e:d0:b0:93:73:6b:b8:
97:93:21:a7:bf:3a:37:3f:e2:20:9a:06:db:54:22:
33:39:49:71:05:02:34:cc:a0:f5:38:97:60:fe:1f:
a0:3b:9c:c5:fc:5f:79:fc:d1:e1:bd:78:cf:8b:49:
3a:0d:c6:5d:2d:37:72:a8:40:8e:50:35:24:fa:dc:
3f:e4:c7:f2:97:84:cf:fc:b5:bc:44:69:88:8e:b4:
b0:a2:6f:76:20:e0:c2:5d:2e:0e:b1:d0:ed:77:e8:
0b:4f:45:5c:1d:e0:78:d9:67:05:51:5e:10:37:a5:
32:59:e2:fc:3c:81:67:69:ba:f4:07:bb:49:dd:9e:
e7:39:62:9a:43:b6:bf:b3:a4:26:2e:76:28:25:97:
c7:1a:98:9b:e4:3b:73:49:d2:13:7b:8e:c3:98:21:
c6:79:d9:a1:da:ba:60:c7:42:94:24:d4:3d:21:02:
52:0d:ad:e0:b5:43:ff:ac:86:20:b7:c0:4d:ea:65:
64:2d:1e:f2:70:8f:21:b0:e1:4a:44:fb:54:00:4c:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:54:A6:E7:ED:9F:FA:17:BC:1C:05:C0:0F:32:13:F5:8C:27:9E:98
X509v3 Authority Key Identifier:
keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:ef:80:47:4f:7e:e6:bf:5c:7d:12:c0:46:d7:e9:c3:cb:38:
de:8e:e5:23:77:67:9a:b9:a3:c6:6c:70:c6:64:81:0e:e4:af:
a4:75:e2:0a:05:fb:a6:36:3b:5a:45:38:ce:bd:b6:14:ed:f8:
cb:e5:21:e4:67:09:0a:14:26:9b:31:ad:3d:ba:da:b9:e0:af:
b8:4e:35:47:3e:49:7e:91:2f:52:ce:1f:ef:9e:07:81:78:52:
66:50:73:11:6d:86:06:7f:28:d2:74:70:b5:ce:2d:f4:f1:f4:
8f:e4:62:be:bc:45:bb:3e:bb:c1:c8:19:09:3e:54:d2:af:72:
a7:d4:85:a9:7e:ca:e5:c7:36:dc:e3:60:0f:60:90:1d:82:db:
9d:87:55:81:d2:03:1d:c4:da:70:69:54:53:ca:a3:2a:7f:e3:
bf:27:f5:56:55:89:33:2a:fa:cb:18:a5:e5:e7:31:c3:19:b4:
84:72:8e:58:fe:68:8c:1f:e3:3a:56:18:37:13:c2:9b:04:1b:
c4:f5:6d:90:00:2c:27:e3:61:39:9f:f7:68:36:09:7a:16:b5:
3e:c0:6b:73:6f:4b:bf:93:fe:9a:c7:28:64:e1:74:3a:08:22:
a5:b2:b0:02:35:bf:92:dc:8d:a2:37:c7:5d:82:ea:60:39:9c:
54:96:d8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:54:14 2026 by rpki-client