
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
File: oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json)
Hash identifier: s3kFBKo68aTJBbh3U3yQRs/8um/gz77jLeF1GbOo0hw=
Subject key identifier: A0:B5:4C:FA:87:11:D2:B2:A8:DE:07:53:8B:B5:BD:09:BE:9A:5F:58
Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
Certificate issuer: /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Certificate serial: 0B61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
Manifest number: 0B53
Signing time: Wed 20 May 2026 19:15:05 +0000
Manifest this update: Wed 20 May 2026 19:15:04 +0000
Manifest next update: Wed 27 May 2026 19:15:04 +0000
Files and hashes: 1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: eyFC716c66UNdJktyRarXLrEUookUKYGJfwOjNAuPjQ=)
2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: RQ9oUS0oQbbXxdZ70QI7FGuHbVBiYm8ftlMbEKia248=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2913 (0xb61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Validity
Not Before: May 20 19:15:04 2026 GMT
Not After : May 27 19:15:04 2026 GMT
Subject: CN=6a0e0838-8890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:90:51:c3:61:94:a5:a8:c1:06:b6:24:a3:
a5:01:2a:8c:c7:2c:ed:5d:78:9f:47:43:44:64:16:
a2:65:bc:78:23:36:0c:ef:2a:87:b3:13:13:54:17:
6e:4c:1b:43:eb:06:1e:db:3f:06:16:67:1b:92:f9:
3f:72:61:00:0f:9e:b9:b7:7d:64:84:22:6f:c7:a2:
32:49:a7:4c:6f:00:15:68:02:1e:f5:98:4d:db:a0:
6b:a4:88:f3:33:4f:d8:a7:92:18:5b:5b:71:8c:b8:
1b:c0:25:8a:7c:7d:ae:94:73:cc:30:5a:8c:30:9e:
2c:c6:95:b5:7c:17:9b:63:48:74:11:a1:ce:89:46:
c9:6c:2c:57:03:79:bc:88:48:d8:0c:67:26:99:e0:
b4:96:38:20:12:e3:f9:d2:06:6e:2b:7c:3f:08:9b:
a5:e9:63:32:a8:9c:d3:7f:40:1f:ee:59:f1:54:bb:
26:4d:09:97:e6:74:63:23:bd:22:1c:5d:62:d6:38:
df:aa:76:14:26:2d:60:7f:7f:01:be:71:14:ca:06:
f5:0d:14:9d:89:0b:11:a1:71:76:35:77:cc:30:55:
71:b0:cb:99:27:78:66:95:c0:78:11:4a:07:11:be:
70:28:6d:7d:a3:f6:37:d5:bb:4e:a5:01:68:0d:a7:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:4C:FA:87:11:D2:B2:A8:DE:07:53:8B:B5:BD:09:BE:9A:5F:58
X509v3 Authority Key Identifier:
keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4c:b9:46:c2:15:5f:35:b7:de:bf:5d:ec:d0:78:85:12:07:
ef:60:17:4c:7b:1f:ef:24:c9:e7:e0:5a:77:78:04:e7:f6:32:
75:cb:fa:4a:b5:d0:ef:5f:76:b2:97:37:59:b5:2e:89:8d:6f:
bd:47:b6:16:74:9e:55:08:ab:6e:d8:4b:8b:a4:2d:4d:09:6a:
df:1a:3f:57:22:62:03:82:a9:35:37:3a:80:71:7d:b3:1a:9d:
f7:fb:1e:19:c5:61:7f:9f:e0:bf:fc:4a:3a:9d:0b:63:1d:b5:
37:b0:a6:d3:71:e8:99:17:a2:8c:98:2f:36:7a:02:32:8f:c2:
c4:a1:a6:58:b8:ad:e6:ad:45:ca:c3:3b:93:8e:ac:4a:f6:17:
94:ea:3c:ea:55:fc:ca:99:5c:df:0c:0a:a6:b3:36:10:d8:37:
2e:73:f6:26:c5:a8:ff:8e:18:0e:c5:ac:d7:55:65:d8:b8:6b:
19:f7:c3:d0:0e:57:c1:47:9f:ff:c3:8f:2e:3c:25:ad:db:73:
16:2a:ed:f4:93:82:da:62:71:0e:b8:c8:de:44:a3:b6:7e:10:
17:c4:59:4d:2e:90:e0:ff:0a:a0:e7:2b:e1:63:9e:80:72:83:
04:2c:ae:b3:15:7e:d0:72:6f:42:1d:8c:74:44:48:a1:f4:fe:
9a:f6:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:24 2026 by rpki-client