
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
File: OwpEPFCYZClPtL5HkFNmGAPxr-E.mft (raw, json)
Hash identifier: oUiWtrRVRXPVHI40HAGiWDDdqLsqCkcl9hHrKl8GlXo=
Subject key identifier: 7D:E7:3B:BA:B3:53:0E:D8:DD:CF:47:1D:B3:FF:72:DF:C0:C7:D6:82
Authority key identifier: 3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1
Certificate issuer: /CN=A91AEEAA/serialNumber=3B0A443C509864294FB4BE479053661803F1AFE1
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
Manifest number: 66
Signing time: Fri 23 Oct 2026 08:35:54 +0000
Manifest this update: Fri 23 Oct 2026 08:35:53 +0000
Manifest next update: Fri 30 Oct 2026 08:35:53 +0000
Files and hashes: 1: OwpEPFCYZClPtL5HkFNmGAPxr-E.crl (hash: 4ESlPG+3Zy7TnrjzUytOmlZUnn7csdDkyccsfggU6GA=)
2: 19AEF54C325311F1B8BE6AD8B5833773.roa (hash: lCkPkFA3UUCrYfR4r1c6dZNvdAQ4vk4LL6fKr16h7jU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.crl
rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEEAA, serialNumber=3B0A443C509864294FB4BE479053661803F1AFE1
Validity
Not Before: Oct 23 08:35:53 2026 GMT
Not After : Oct 30 08:35:53 2026 GMT
Subject: CN=6adb1c6a-a665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:da:81:54:e1:73:b3:27:99:9f:2d:33:a5:
35:6d:e7:8c:6c:ea:4a:65:ec:62:58:73:68:e5:75:
e4:60:80:8d:85:27:9d:41:a7:3c:42:ad:3e:97:0f:
20:16:e5:54:91:b5:17:7a:50:6f:0f:ea:2f:da:1b:
f6:d2:f4:e8:50:60:ea:5c:7a:81:0e:86:f6:de:be:
f1:e4:f4:87:97:81:9f:a7:4d:60:bd:ae:cf:db:92:
70:c8:08:55:e0:0e:95:bd:f8:25:51:77:8a:6f:bf:
d5:f1:45:76:1b:d3:a8:b6:18:ef:36:c7:73:2b:05:
d9:7a:d5:88:95:2e:b2:b5:61:eb:04:e8:25:ec:89:
02:cb:60:10:b7:04:01:b7:48:de:a3:8b:a2:bf:16:
2b:e0:67:61:0a:4b:40:0a:eb:e7:80:77:a3:2e:7f:
42:73:f8:d1:d4:a7:e5:b4:92:5f:5b:18:b0:ce:76:
0b:32:42:d5:56:23:41:57:ca:17:8a:14:2f:b7:3f:
07:e9:8c:ec:b5:96:69:26:04:3a:e3:43:59:7f:92:
6e:a4:5b:cb:bc:46:eb:1c:2a:dc:5a:43:9e:db:c5:
49:f1:d0:1e:b3:69:8b:9e:80:0c:00:73:fa:5d:5f:
03:9b:11:33:94:86:4b:18:02:34:b3:9b:06:75:38:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E7:3B:BA:B3:53:0E:D8:DD:CF:47:1D:B3:FF:72:DF:C0:C7:D6:82
X509v3 Authority Key Identifier:
keyid:3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:2d:f9:7d:d8:6e:64:3f:e0:03:97:f2:d1:6e:2b:20:3c:c2:
de:88:95:8d:00:30:3e:7e:44:5e:16:e7:db:89:3f:9c:33:50:
3d:7d:63:5a:fa:06:2a:f2:7e:fb:4f:f6:e6:9c:97:83:f3:fc:
81:4d:01:2e:fa:f7:4b:a2:c2:b2:01:c0:7c:1f:f1:3e:18:55:
e1:fb:9d:ad:43:d8:63:bf:f2:94:92:20:6f:5d:ab:ab:36:60:
df:19:a5:1f:86:fe:8d:2b:23:e0:a4:fd:52:ad:12:6a:26:88:
db:92:77:32:75:70:2d:ce:f3:1e:0d:82:f0:47:03:d5:22:19:
ca:85:a5:d3:06:27:cf:a0:a3:ca:b1:8e:fc:b3:18:ba:fa:a0:
3b:8d:b3:10:a4:72:72:12:90:82:cb:4d:e4:92:05:b6:5d:62:
4e:2e:8f:b9:dc:21:a8:65:8e:bc:ac:08:2b:ab:54:ef:f0:e6:
a8:1a:e8:a3:c0:b8:af:78:30:1e:fc:a0:25:e4:7d:33:00:e8:
1d:58:93:8f:f5:a2:e1:55:cd:77:ea:03:3e:67:40:93:ac:ad:
64:0e:b1:e2:24:90:d1:97:49:0c:53:2b:6e:62:4e:26:85:4a:
c6:37:4b:be:76:85:e1:56:db:64:59:8a:89:3d:c5:e5:07:7f:
0f:0f:d1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 13:12:24 2026 by rpki-client