
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
File: OwpEPFCYZClPtL5HkFNmGAPxr-E.mft (raw, json)
Hash identifier: NJuYeh9QS8ifcTkQuTiy5JM7FpVjhubudeQU8sBJptQ=
Subject key identifier: CD:72:22:63:09:CC:38:1A:B0:DC:F1:FA:F6:89:F3:18:8F:11:49:B7
Authority key identifier: 3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1
Certificate issuer: /CN=A91AEEAA/serialNumber=3B0A443C509864294FB4BE479053661803F1AFE1
Certificate serial: 03
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
Manifest number: 02
Signing time: Tue 07 Apr 2026 07:26:39 +0000
Manifest this update: Tue 07 Apr 2026 07:26:38 +0000
Manifest next update: Tue 14 Apr 2026 07:26:38 +0000
Files and hashes: 1: OwpEPFCYZClPtL5HkFNmGAPxr-E.crl (hash: 5NoHVylxXWBmHX/KXl84/salSPP3vLCPZfRg8YXddp8=)
2: 19AEF54C325311F1B8BE6AD8B5833773.roa (hash: lCkPkFA3UUCrYfR4r1c6dZNvdAQ4vk4LL6fKr16h7jU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.crl
rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEEAA, serialNumber=3B0A443C509864294FB4BE479053661803F1AFE1
Validity
Not Before: Apr 7 07:26:38 2026 GMT
Not After : Apr 14 07:26:38 2026 GMT
Subject: CN=69d4b1af-a58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:46:42:e6:df:36:05:77:06:86:db:a3:c8:
91:ad:50:3d:59:88:49:ba:19:b2:c0:08:e5:b7:fb:
c7:db:a2:fe:bd:88:11:4d:16:40:6e:62:4b:c7:0f:
95:58:54:e3:95:35:43:93:93:14:c1:52:c0:1d:66:
95:e7:53:36:52:0b:21:14:85:8f:ff:0c:2c:97:fd:
0e:5a:e4:6b:79:98:0c:a5:e5:b7:86:e8:47:dc:d8:
d2:a0:d2:55:85:69:fb:ea:cc:0d:4f:57:a6:72:86:
5e:8d:d9:e9:4d:91:74:97:c7:b8:25:62:be:1f:a5:
81:27:41:ec:8c:31:b1:d1:9c:93:aa:00:74:2a:e4:
83:32:01:3e:07:5a:16:bf:2c:38:0e:78:d0:57:cd:
8a:70:08:d6:20:b0:26:7a:dc:3a:98:fc:a7:69:3f:
6f:5a:10:2c:d3:16:b7:aa:9d:27:f3:5e:30:22:e8:
5d:99:d5:16:5d:0f:cc:1c:92:cc:d1:8f:20:d2:d8:
fa:f5:f8:62:7a:95:b5:d9:e1:ba:51:b1:eb:ee:68:
c7:25:a4:f6:0b:38:5b:33:1e:4a:f0:20:c9:d6:c6:
d5:0a:fc:75:3d:c5:54:58:5c:f6:0e:c6:8d:00:6a:
b4:15:0d:da:f6:05:0b:d3:c7:07:9b:c1:84:a7:8a:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:72:22:63:09:CC:38:1A:B0:DC:F1:FA:F6:89:F3:18:8F:11:49:B7
X509v3 Authority Key Identifier:
keyid:3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a5:a2:dc:96:61:57:39:b6:59:d0:48:16:a2:56:b7:b7:45:
0b:7a:8d:3b:ed:1e:3e:79:2b:f5:ee:2d:cc:37:b9:b1:a3:ef:
88:6d:e0:10:36:a7:f0:7b:c0:5f:52:bb:35:4d:f1:80:3a:ac:
0a:f1:9e:63:82:44:9f:0d:12:dc:fe:1f:2e:b3:76:64:fd:f6:
70:c6:b9:ae:88:99:14:07:6a:a7:7b:45:17:81:42:eb:c4:88:
ae:cb:bf:e8:0b:3e:b3:2e:ba:e3:c5:ee:d0:e6:94:8c:1c:72:
29:ca:0d:0a:75:a7:d1:ed:0f:1e:07:30:73:49:96:3c:5f:03:
c5:3b:db:22:81:f9:b0:9e:ef:ed:45:d1:75:61:f8:56:cb:4b:
7a:33:e0:47:4d:76:cf:44:ee:d9:00:7e:00:5e:1b:e5:a2:c6:
02:8d:09:82:f6:91:58:9c:36:53:e2:ee:a9:7f:da:60:f6:a1:
19:38:a8:95:b4:32:25:e8:6f:47:b0:ed:fb:f0:04:58:0b:ea:
e6:6c:1e:fc:fb:e4:b3:6b:2c:53:8f:88:8d:cf:30:31:fc:fe:
80:14:ba:9c:0a:50:fd:86:56:48:5f:9c:2b:ec:0a:b9:61:51:
f7:be:ef:f7:1c:bb:6a:2e:45:cb:da:bb:46:88:52:08:49:44:
6d:46:41:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:13:27 2026 by rpki-client