
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7D17/3C2230D8C18E11F1B4C707B06611F970/OhvNurX2FEIf7TI0OsI-MVN_HnQ.mft
File: OhvNurX2FEIf7TI0OsI-MVN_HnQ.mft (raw, json)
Hash identifier: xN8h9pfrEVlOxnErNRTMre+z/dXK6UvhVDCIJMPWU5s=
Subject key identifier: 5C:EC:4B:42:48:41:C2:58:BB:9B:ED:79:6E:A0:C6:F5:9E:1B:D6:04
Authority key identifier: 3A:1B:CD:BA:B5:F6:14:42:1F:ED:32:34:3A:C2:3E:31:53:7F:1E:74
Certificate issuer: /CN=A91B7D17/serialNumber=3A1BCDBAB5F614421FED32343AC23E31537F1E74
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhvNurX2FEIf7TI0OsI-MVN_HnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D17/3C2230D8C18E11F1B4C707B06611F970/OhvNurX2FEIf7TI0OsI-MVN_HnQ.mft
Manifest number: 04
Signing time: Fri 09 Oct 2026 10:05:26 +0000
Manifest this update: Fri 09 Oct 2026 10:05:25 +0000
Manifest next update: Fri 16 Oct 2026 10:05:25 +0000
Files and hashes: 1: OhvNurX2FEIf7TI0OsI-MVN_HnQ.crl (hash: hTBO8czFOOm/T4j3KkNzVRgbyS7ryjVd/FjI+QOQLb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7D17/3C2230D8C18E11F1B4C707B06611F970/OhvNurX2FEIf7TI0OsI-MVN_HnQ.crl
rsync://rpki.apnic.net/member_repository/A91B7D17/3C2230D8C18E11F1B4C707B06611F970/OhvNurX2FEIf7TI0OsI-MVN_HnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhvNurX2FEIf7TI0OsI-MVN_HnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 10:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7D17, serialNumber=3A1BCDBAB5F614421FED32343AC23E31537F1E74
Validity
Not Before: Oct 9 10:05:25 2026 GMT
Not After : Oct 16 10:05:25 2026 GMT
Subject: CN=6ac8bc66-d115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:d1:d9:fa:12:cf:fc:9b:42:47:48:8b:49:
58:2b:47:43:bf:a6:72:74:b8:6b:5a:06:64:f9:ef:
ae:a4:79:45:87:78:4d:ad:c6:ec:52:be:e6:b8:e8:
ff:42:f1:9e:46:f7:99:27:b6:06:85:09:aa:16:07:
e4:d2:37:b4:f0:10:96:f5:36:12:a2:28:a4:20:99:
f8:5f:f3:22:f6:30:37:ee:ca:a3:da:aa:81:7e:15:
d4:ed:c1:4c:fa:8f:ec:03:90:bc:ad:d3:48:cb:49:
ed:a3:6f:17:39:f1:60:67:35:3a:fb:54:d5:bb:16:
13:a1:62:34:4e:39:24:b6:db:2f:5d:7a:1d:24:53:
8c:89:8c:d3:d4:48:08:f5:00:fa:0c:18:2b:19:34:
1d:d1:69:9c:2a:68:26:7e:23:f7:51:9f:1c:59:56:
48:0d:59:6b:c0:e9:0d:4f:0d:59:b7:64:a4:8b:95:
fa:b2:31:c5:2d:30:74:f1:3d:2b:3d:1f:63:d7:50:
a4:95:12:a2:83:c8:ae:05:67:d9:0a:78:c9:2f:d8:
60:6b:9b:d2:20:68:af:84:1a:8b:c1:30:43:a3:ee:
fc:37:7d:12:02:2e:3c:5c:04:3c:eb:30:ec:28:f2:
db:a4:f8:a7:76:c1:4c:28:d3:7d:87:85:cc:57:f3:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:4B:42:48:41:C2:58:BB:9B:ED:79:6E:A0:C6:F5:9E:1B:D6:04
X509v3 Authority Key Identifier:
keyid:3A:1B:CD:BA:B5:F6:14:42:1F:ED:32:34:3A:C2:3E:31:53:7F:1E:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7D17/3C2230D8C18E11F1B4C707B06611F970/OhvNurX2FEIf7TI0OsI-MVN_HnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhvNurX2FEIf7TI0OsI-MVN_HnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D17/3C2230D8C18E11F1B4C707B06611F970/OhvNurX2FEIf7TI0OsI-MVN_HnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:09:50:60:76:93:d2:2c:d8:ad:24:39:f7:b1:9b:ba:0d:8f:
a8:a7:3b:be:3d:25:da:53:fd:01:aa:22:11:76:44:47:49:d2:
95:81:88:22:16:b1:ea:92:6a:30:d2:1f:92:b0:a2:ac:40:c7:
80:cd:2e:af:02:e0:8c:e5:06:21:db:ec:95:86:cb:36:23:7a:
f7:fc:bf:b2:a7:17:1a:7e:f5:b6:73:21:e1:80:a5:f0:19:af:
a3:3b:58:cf:c2:1e:9f:b9:34:62:10:87:12:0b:bb:f1:99:c5:
98:bd:1d:b6:47:7a:7a:ef:8f:04:36:22:cc:21:79:84:86:6d:
55:b6:b4:c8:97:4e:73:a8:b1:dd:ff:d2:e4:6f:23:aa:1c:7c:
f3:e4:91:45:da:2f:b2:85:eb:ba:02:ca:f8:ff:38:b8:d3:9b:
2b:89:9f:9e:3a:b5:9d:6c:b8:f3:7d:da:26:c7:27:38:2a:83:
0e:09:d8:a0:bb:62:87:2f:80:14:36:d9:90:c1:4c:b0:00:59:
44:1b:80:7f:a8:96:6a:56:bb:8a:73:0d:82:ba:13:75:0a:6d:
e2:f1:1d:98:c1:67:0d:58:f7:b4:69:61:c0:89:58:51:89:f6:
cd:c0:e6:9e:e0:ea:5a:f7:a1:7d:49:e3:b5:b9:a9:2b:a4:30:
1e:e2:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:27:48 2026 by rpki-client