
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json)
Hash identifier: nFgvft+8OV6lqj9MEyXNJimcSH4/RiAlbIKlOi5+xWw=
Subject key identifier: F9:8E:DB:7F:B8:1D:38:F7:EA:D5:95:0E:ED:FA:53:FC:5B:0A:ED:DE
Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F
Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
Certificate serial: 077E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
Manifest number: 076C
Signing time: Sat 04 Apr 2026 21:26:35 +0000
Manifest this update: Sat 04 Apr 2026 21:26:35 +0000
Manifest next update: Sat 11 Apr 2026 21:26:35 +0000
Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: sbJSLCtkhPQP1BBDa6tNwcF3RPDSEKjoj0h+DbCZ4vg=)
2: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: NHvUGTdmuwIhXvGpasqL3enB4HKIbc5EZnmgVQdvyDA=)
3: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 4tQkVgaEfrNeT5ZxKwsq/6JwQwooD/KUZ+m6cfHLrN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl
rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
Validity
Not Before: Apr 4 21:26:35 2026 GMT
Not After : Apr 11 21:26:35 2026 GMT
Subject: CN=69d1820b-41bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:03:be:f0:66:01:ad:88:a0:48:2a:ac:46:
48:d7:38:db:ac:7b:88:6b:64:2c:f9:c9:1c:07:59:
f1:11:86:c7:39:5c:b2:cf:2d:cd:29:35:50:90:91:
dd:19:32:77:2e:6f:34:1a:4d:e7:27:ab:70:12:74:
9e:b3:12:e3:30:f3:45:50:41:c9:ff:3a:b7:50:b8:
07:18:26:9b:89:c6:d9:e1:e5:b7:6f:48:19:04:fa:
d1:35:de:a6:7c:36:bf:6f:7d:02:88:5e:f8:0c:b6:
71:d1:27:ba:5a:12:64:25:11:f7:bb:21:7e:36:e8:
5f:7f:ac:fe:99:ca:0b:89:17:aa:ee:a0:88:cd:f2:
9d:44:48:7c:47:fb:e9:c5:a5:48:e8:8c:ed:1a:bf:
75:c1:b5:88:6f:77:6d:85:f7:80:89:a2:08:09:91:
9f:dc:3d:6c:c7:20:ca:ba:b9:7b:89:61:51:4f:63:
bc:ad:bd:d0:58:b1:34:67:ca:18:70:77:1d:6e:4c:
2a:89:6a:9d:b5:53:b2:49:c0:a3:35:13:2b:12:ca:
16:41:6b:10:69:49:d6:07:f0:b5:15:b2:6c:49:09:
1b:b3:64:f4:7e:62:17:ca:bf:10:da:6b:bc:cd:41:
3b:b6:51:11:ef:db:96:11:0a:cd:6c:35:d4:0a:0f:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:DB:7F:B8:1D:38:F7:EA:D5:95:0E:ED:FA:53:FC:5B:0A:ED:DE
X509v3 Authority Key Identifier:
keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:2c:8c:65:ae:2e:dd:a2:d7:a0:05:09:99:61:6e:9d:e9:76:
28:19:69:3d:d9:82:e7:06:cd:05:f1:32:46:b2:d1:96:53:d7:
c4:b3:b2:33:65:49:b7:ea:48:08:44:dc:5a:ba:bb:c2:08:89:
f8:98:38:57:a7:78:a9:2f:b0:fd:55:22:ea:8b:92:c4:17:d9:
ac:24:2b:60:c7:8f:40:c7:59:b1:89:59:1c:2a:9d:05:8d:85:
86:07:e5:f0:8e:47:30:54:ff:5f:32:38:c6:83:82:e8:62:13:
46:b1:b7:86:de:7c:10:1f:3c:2e:eb:fa:28:fc:87:31:a6:b1:
92:2b:60:44:73:36:84:6b:c4:65:ae:b3:31:07:0c:2b:6e:24:
f7:16:90:1d:a2:13:a3:4e:d3:20:26:ae:c3:d3:d2:15:13:22:
a9:4c:36:c9:3b:f2:50:49:e8:f0:05:cf:5a:cb:71:b0:22:66:
a2:cc:5d:e7:f5:db:e2:d3:f1:d7:31:85:dd:e4:92:ac:1c:18:
7f:62:f8:c9:d8:13:6f:4d:3a:8f:79:c8:36:57:50:e0:55:bf:
93:5d:ab:f8:c9:d7:9c:15:cb:6d:f9:ac:c9:47:13:9d:67:49:
8e:fc:02:a1:51:5d:c4:5c:8a:ea:cc:b3:55:23:c1:64:d9:60:
46:ad:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:08 2026 by rpki-client