
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json)
Hash identifier: rwR1ujKa2RHzYrYbW6gsgGaZeUBWJpEOC2ts7uI3JQ0=
Subject key identifier: 2B:AC:3A:4C:D1:33:5D:48:BD:A5:18:86:6C:AB:9B:31:6A:DB:93:86
Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Certificate serial: 071A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
Manifest number: 070B
Signing time: Mon 12 Oct 2026 22:16:24 +0000
Manifest this update: Mon 12 Oct 2026 22:16:23 +0000
Manifest next update: Mon 19 Oct 2026 22:16:23 +0000
Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: DAxgz0+Fhvl1LDJ51RAH0NainPljCNn+Gw5rTu8YxOc=)
2: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: XhJX3NfcbvmnSUAkmSliLE4bj9pTRieX/8IuPGpMoeg=)
3: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: VCL+P+tlT04cGlwm1f1o27ry1Et64gaCgM2IBSbvp04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 22:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Validity
Not Before: Oct 12 22:16:23 2026 GMT
Not After : Oct 19 22:16:23 2026 GMT
Subject: CN=6acd5c38-01d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:e2:ef:7d:60:13:9b:52:c6:b3:5d:84:fa:
6a:a4:a0:5f:6b:ad:0f:2b:8f:20:37:17:95:cc:68:
bc:f3:92:5f:f1:77:54:7d:24:7e:37:50:fa:40:bc:
db:ba:0b:9f:7c:c7:73:e9:97:6b:ec:53:e6:d5:86:
62:13:4f:95:d5:2e:0f:fc:2d:8d:3c:ad:9e:b6:1e:
9b:db:3f:62:36:3f:4b:0b:b7:b5:c3:f2:23:fa:4d:
c4:62:a0:2a:de:e4:2c:db:ff:e4:46:e3:42:30:b7:
f1:dd:76:65:e9:21:c0:19:37:86:0d:ac:c4:e1:6c:
69:3a:46:0d:e2:06:d0:67:53:aa:99:c0:7d:12:2f:
d7:f5:24:e5:a6:cf:e8:84:8f:df:79:93:a1:1f:49:
e4:f6:88:35:d9:e9:2e:b0:18:64:cd:b2:bf:0e:4e:
1e:25:b1:cb:55:75:03:c6:b5:8d:c8:bf:79:f5:e6:
6a:26:6b:e8:5e:a4:81:0f:11:56:00:2f:85:a3:63:
db:88:cd:1e:62:48:f0:ad:cd:5f:95:e5:8c:56:df:
94:59:a2:5e:d5:d5:19:b4:7e:f3:f4:34:98:ea:e7:
ca:98:fe:70:30:f1:e3:c3:72:d4:97:c6:f8:b5:b3:
fb:d5:a7:b0:21:20:9c:a4:82:51:c8:75:42:4f:7b:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AC:3A:4C:D1:33:5D:48:BD:A5:18:86:6C:AB:9B:31:6A:DB:93:86
X509v3 Authority Key Identifier:
keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9d:a6:4e:5c:db:b0:4a:95:c8:33:2d:bb:f2:78:7b:20:41:
e0:41:74:56:86:7a:b9:9e:24:16:ca:29:e9:fc:2c:b5:32:77:
50:90:12:33:4c:79:b1:92:8e:ab:d5:60:14:64:24:60:19:44:
52:4b:7e:6c:4e:e5:e7:c5:b2:6b:49:1d:26:cb:d1:45:0b:c1:
6d:98:e3:f0:fc:b8:1d:51:48:5d:bc:59:9f:64:ae:48:1b:69:
ce:28:e7:69:3a:50:fc:9b:15:f5:41:fa:74:6d:92:77:96:8f:
5f:dc:a6:95:3d:82:10:80:ed:31:f0:c1:70:ab:71:5f:88:64:
30:20:51:0e:26:58:17:68:3e:e8:27:0d:34:49:17:55:6d:1b:
fa:92:33:de:f6:89:31:2c:4c:36:a3:bd:dd:86:c9:20:c4:82:
9d:40:9f:55:16:11:29:9c:80:a9:5d:5c:d0:d4:52:fc:21:13:
fe:2e:f4:38:2e:26:fd:c9:54:97:eb:dd:c4:01:7e:c2:10:f3:
43:d6:62:b6:33:99:34:ab:f5:76:d4:5f:b6:25:b2:bc:c1:24:
0d:d4:39:5a:0b:77:20:04:b6:0e:5b:70:56:0c:18:51:35:61:
a5:c4:83:a8:ab:1f:22:48:ea:7d:72:4a:3e:80:47:ac:83:51:
fe:5f:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:13:59 2026 by rpki-client