
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
File: o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json)
Hash identifier: HSVY09jixCKnmp27fwp4rAV6CB7/NKfXvAXu+Sbl8cI=
Subject key identifier: B0:EA:09:98:BF:84:C4:E8:C2:5D:FF:D0:DE:56:09:E5:A7:A4:EE:38
Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
Certificate issuer: /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Certificate serial: 0421
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
Manifest number: 041A
Signing time: Sat 05 Sep 2026 00:03:50 +0000
Manifest this update: Sat 05 Sep 2026 00:03:50 +0000
Manifest next update: Sat 12 Sep 2026 00:03:50 +0000
Files and hashes: 1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: 2dDRUT2rB/Ndi+RPRGDTASxzj3DbvMoD/feLZugr2sA=)
2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: omBdwTJjBpYLM0wYV64/jRWywyvUBhT0d+jsji8w+eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Validity
Not Before: Sep 5 00:03:50 2026 GMT
Not After : Sep 12 00:03:50 2026 GMT
Subject: CN=6a9b5c66-f33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:50:fd:66:74:9a:d9:ae:f3:af:90:90:31:
d0:fd:62:f3:92:10:49:1a:21:20:b5:fd:8b:58:0c:
39:31:fe:1f:75:55:ab:33:36:cd:3a:e5:2c:63:e3:
e9:65:6f:3e:b9:70:51:a5:d1:b1:cf:95:c5:0c:90:
06:15:9a:a4:a4:56:f4:fb:d9:8a:d0:9b:26:8c:04:
f8:fe:b0:4c:3e:6e:f9:83:23:3f:65:15:ca:e6:e9:
c4:ca:bd:40:ff:0b:e5:dd:7b:c6:93:9c:12:9f:73:
3b:e0:7d:90:af:5f:02:b4:70:39:d5:3d:87:7c:6f:
4b:ca:3a:a0:23:c8:cb:8e:b4:15:4d:9f:44:e0:2d:
9f:a4:75:e5:9c:0c:b4:e4:36:ab:ac:b7:60:17:0d:
2b:53:99:0d:00:ba:9a:60:b7:ab:59:65:c5:07:63:
a5:8f:cd:cb:8c:7e:01:a8:df:c9:d5:22:f6:2b:40:
d5:a9:68:bc:eb:6b:b0:5f:ae:56:41:e8:1a:aa:26:
8d:f8:1a:39:1a:e6:9c:d9:b8:59:51:e0:32:ab:7e:
c0:8b:ec:b9:f5:54:ce:7f:74:40:3c:8f:40:33:8b:
31:af:1a:2a:e1:0d:67:0e:0c:74:bd:8e:81:b7:34:
f7:ab:98:24:a8:14:d5:bd:25:e4:8f:d6:13:e8:38:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:09:98:BF:84:C4:E8:C2:5D:FF:D0:DE:56:09:E5:A7:A4:EE:38
X509v3 Authority Key Identifier:
keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0d:30:31:88:67:ea:73:71:b3:1f:42:70:5f:fe:01:fb:b3:
aa:98:71:47:d6:c0:28:8f:1d:22:04:b4:a9:7a:21:92:e8:30:
a9:8c:fb:16:a6:78:9c:52:26:cc:33:40:2a:28:b7:61:10:6a:
6f:04:f3:c3:3c:25:9f:a9:bb:71:41:f6:b5:76:12:92:17:e4:
9c:c3:92:e5:90:4f:88:20:10:a9:b3:8a:ef:ad:0a:17:11:a7:
94:b6:88:8d:1b:2f:c2:99:31:e1:4c:bf:dc:f8:a4:95:07:2b:
75:65:88:09:c7:84:40:d3:eb:b5:b1:48:a3:89:8f:4f:03:6a:
d0:a3:85:f5:3e:5c:86:1d:84:01:05:e9:c3:59:5a:52:80:5e:
43:14:ac:ba:f4:5b:4b:dc:3a:33:8c:33:ea:05:f8:c9:67:b6:
16:08:be:cb:2d:ed:1c:54:e1:14:eb:48:59:8c:cc:e9:f0:2e:
be:a5:34:37:22:39:3d:25:97:4e:17:3b:8f:86:39:a7:96:91:
37:38:1b:15:3f:b3:7f:36:41:23:4e:92:3a:d5:1f:6c:b1:c8:
0c:2f:ea:2e:3c:df:98:8f:9b:d8:25:ee:6f:c9:15:cf:8d:c1:
d3:e0:c6:26:7b:83:06:86:fb:7e:9b:2a:ca:4d:a6:48:b5:25:
08:64:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:04:02 2026 by rpki-client