
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json)
Hash identifier: 1loV4K6WAvVPNXhPJtEvv+h3Z41JGPhrGHFfmZSMknA=
Subject key identifier: D0:2A:F2:4F:23:02:9F:DF:8B:68:5B:C7:29:77:E8:0C:5C:34:7B:C7
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
Manifest number: 8E
Signing time: Thu 05 Mar 2026 06:33:34 +0000
Manifest this update: Thu 05 Mar 2026 06:33:33 +0000
Manifest next update: Thu 12 Mar 2026 06:33:33 +0000
Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: EO4IiYSnIkQ3JNKQu6d9x4GsSfUAbqWS3lBy+807Ylw=)
2: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: M8odrWp11xwPayPr1xVWIoKWwAfvrI8IVkAjTpLwwzk=)
3: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: 2iUKMhz07cGysLco5d1V7oMpfZkixvqFHBDyH/7WAK4=)
4: C24679DC741211F0808A8240C4F9AE02.roa (hash: mnmEShTfHHr8jkJu+tgWkb3qWqXauPwn9ZXxFrRpLlE=)
5: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: V0mFWyb8wDT9djSAbQ4T53u6v/WrYdwA1bskEFmhhp4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 06:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Validity
Not Before: Mar 5 06:33:33 2026 GMT
Not After : Mar 12 06:33:33 2026 GMT
Subject: CN=69a923be-cdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:27:18:27:a6:db:0d:fd:98:80:9f:a0:d2:
d0:ef:e6:f3:ef:c6:97:4e:8c:bb:d0:12:3b:0b:7b:
18:d6:01:c5:4e:54:f7:14:f2:2e:79:8f:c7:02:98:
11:fc:ee:fa:9d:0a:45:5e:47:fc:8f:ce:16:42:c1:
9b:d6:e9:ab:34:53:77:db:eb:51:38:d2:7f:46:17:
c1:ba:8b:5e:b5:b4:29:d1:12:c9:ae:fb:00:5f:5e:
c1:f9:f6:0f:11:76:93:2a:f5:c4:26:94:0d:ab:fe:
34:7d:c9:ca:21:37:b4:fb:01:6a:1b:2e:c3:a3:54:
93:a2:e2:c4:72:c0:ef:9d:e2:5c:c5:c9:25:5e:d6:
e1:65:7c:04:53:de:c8:32:8e:e0:40:07:94:f2:ae:
ad:f0:ce:71:f5:be:48:5f:ad:a4:29:bb:bb:cc:34:
39:9f:cb:6d:3a:1c:7c:67:e8:43:77:d5:66:fe:6d:
dc:8b:2b:7b:a3:6e:d3:95:f9:f4:77:6f:86:09:9a:
be:5b:3f:81:5e:22:a8:f5:26:89:7a:a1:50:2b:2e:
a4:a3:0d:2d:89:a6:d2:4b:22:ef:9f:80:a2:f9:b5:
74:41:5c:36:84:33:6e:98:89:a5:54:f7:ca:50:ef:
19:75:a3:7d:c1:de:44:d1:1b:b4:17:51:94:47:f4:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2A:F2:4F:23:02:9F:DF:8B:68:5B:C7:29:77:E8:0C:5C:34:7B:C7
X509v3 Authority Key Identifier:
keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ee:18:99:6f:05:ca:a5:d6:20:8b:64:1e:55:31:fd:5e:db:
a0:17:0d:19:fd:a4:62:48:2a:4e:30:ee:a7:59:56:af:0c:38:
7c:35:02:d9:23:64:3e:b9:e8:a4:1f:5d:da:b4:93:ef:3a:af:
f7:9f:cd:e3:2a:eb:d7:10:44:a2:57:09:ca:4e:d3:2e:9c:f9:
18:b6:33:9b:1c:6f:f3:d7:23:98:0e:10:ef:59:fb:17:b8:b3:
2f:78:5d:44:d1:fb:69:c2:79:7f:b8:f2:dd:02:74:40:ed:7b:
50:f9:a7:d0:13:32:a7:f1:20:20:6d:1e:e1:dd:38:57:51:9f:
94:12:18:e0:63:b5:83:68:73:d4:17:65:ca:15:44:47:36:dd:
de:8a:af:05:a2:ba:92:c3:f5:43:24:52:8c:15:82:55:6e:12:
5a:ac:f0:07:eb:a2:6b:7a:26:c7:b6:e3:4a:1f:fe:ed:fe:39:
a3:64:b6:02:92:55:9a:6e:94:5d:16:53:19:34:0f:78:52:87:
47:a4:f4:d5:2d:ea:b5:1e:a7:22:47:65:02:4b:e1:14:6a:3a:
17:46:90:67:32:7d:bd:55:86:aa:7c:26:db:87:20:a8:99:49:
ca:98:c6:79:0d:22:ce:7a:ed:a1:13:27:21:45:21:3e:1b:34:
4b:7f:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 04:38:47 2026 by rpki-client