
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
File: O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json)
Hash identifier: wI9gAEjbayPIf55XySJKkxnjKBpEKooiD75eAdEzwSk=
Subject key identifier: 6A:05:D3:11:52:18:65:3B:43:98:69:74:03:1D:50:44:70:F9:0C:4C
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Certificate issuer: /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial: 0396
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
Manifest number: 038E
Signing time: Wed 19 Aug 2026 01:06:11 +0000
Manifest this update: Wed 19 Aug 2026 01:06:11 +0000
Manifest next update: Wed 26 Aug 2026 01:06:11 +0000
Files and hashes: 1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: mF3KrmSSVPvFV4cDAc7go3u8qIKCzbnr3Y320IrPxa0=)
2: C78C216A070211EDB5178252C4F9AE02.roa (hash: fyu14Jx6k1oTAKIdxEeJ8rrmDDiNJP7D4BIKAgsLJek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918 (0x396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Validity
Not Before: Aug 19 01:06:11 2026 GMT
Not After : Aug 26 01:06:11 2026 GMT
Subject: CN=6a850183-347a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:bb:d2:a3:b7:18:c2:6e:a7:82:05:c4:15:
e1:3d:ea:8c:c0:50:7e:26:34:bc:a7:7b:7f:63:cb:
ac:6c:42:78:8c:ec:07:ed:10:a7:5e:1d:59:ac:38:
de:b2:3f:c3:6a:33:b7:34:f0:fe:98:49:d4:35:3a:
1e:ee:53:39:d5:52:4b:21:ff:c0:1b:56:70:c4:55:
7e:42:45:40:5f:37:e3:fa:ae:57:ea:aa:c2:a2:03:
51:5c:c0:30:80:a2:9c:50:eb:bb:71:ff:ea:b3:8f:
c0:7a:60:99:0f:f5:7a:8e:e9:f8:24:46:e6:31:c4:
58:55:4b:d0:b9:b5:23:a5:cc:40:57:32:58:d8:f7:
e4:f6:64:fa:e4:47:48:0e:33:c5:c1:14:30:d7:bd:
74:56:67:0a:da:77:db:48:ef:2d:0a:eb:fe:0a:5f:
9b:09:20:27:63:ae:7e:f1:57:23:c4:a6:a4:50:5e:
2d:7a:b0:90:ab:ce:85:22:0f:15:d8:5f:3a:32:c4:
59:e3:0d:cb:f3:76:37:f0:98:bf:2c:b8:e0:61:19:
66:9e:d7:ac:73:65:c0:a8:1c:5a:7d:82:4f:3e:8d:
56:f1:5a:63:af:2b:26:33:e3:9c:3e:bb:ce:e2:03:
a0:f5:70:03:4c:07:b2:df:55:24:03:ad:30:f8:9e:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:D3:11:52:18:65:3B:43:98:69:74:03:1D:50:44:70:F9:0C:4C
X509v3 Authority Key Identifier:
keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2a:d0:4c:37:d6:d6:44:4c:6b:23:3d:a2:99:62:46:2e:ac:
f3:db:9b:a5:8e:8a:f9:0e:7b:e1:95:6d:7f:86:ed:ae:a0:75:
27:fb:aa:3e:58:55:ba:2c:08:d5:b5:49:8d:c5:1a:14:e4:10:
c9:6a:7b:35:51:63:64:b0:30:ae:10:f4:92:03:52:c6:bf:22:
3c:5e:37:a5:ef:22:ab:01:d9:68:55:4e:11:9b:d9:46:65:e1:
03:7c:2e:c8:44:3e:2b:d8:58:79:fb:2c:13:8a:4d:50:07:0c:
1f:ce:d8:ae:95:ba:13:0f:eb:cb:b7:09:61:57:5a:f5:ae:6c:
04:10:cb:8b:a1:35:af:94:df:e3:8b:ad:96:ff:52:93:c8:10:
43:3f:9b:1f:ea:45:ad:c0:0e:4a:f1:c7:c9:45:b3:2a:c1:cf:
ac:f5:d0:bf:aa:c0:14:4c:c2:c6:7f:f8:a0:f8:a2:27:1b:86:
3b:75:88:ee:8b:b4:28:1f:95:71:55:0f:f5:e3:c0:3a:73:2d:
e5:4a:96:04:6b:c8:5d:e1:12:f1:b4:ec:bc:62:31:03:13:cf:
a3:66:a7:4c:f1:3e:3a:95:33:2e:31:5f:72:c9:47:c2:19:d4:
13:da:63:c1:07:75:47:ca:a3:a3:14:93:2a:9b:c4:3d:55:3d:
60:5f:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:40 2026 by rpki-client