
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier: 7Ii9y81O8QL9DJzDDWPBCHlFFFEntnrCye1Ja9XNyQY=
Subject key identifier: AF:56:CE:84:EE:C4:3C:B2:21:22:86:74:65:73:D6:AB:98:6A:1A:26
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number: 0253
Signing time: Sun 05 Apr 2026 01:54:09 +0000
Manifest this update: Sun 05 Apr 2026 01:54:08 +0000
Manifest next update: Sun 12 Apr 2026 01:54:08 +0000
Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: PmJ11bAJYMT0HTBIFzEAzuX75UuZ35zCYjDJ1owmOfE=)
2: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: tNl21coa/EGZ4GFdwnMPQbUa31C+8/iiCs/PaUbI1YA=)
3: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: I6Sbyec9ZcJ6A7q7pEgIDEKokkMMztzY/bH/OFuVx6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Validity
Not Before: Apr 5 01:54:08 2026 GMT
Not After : Apr 12 01:54:08 2026 GMT
Subject: CN=69d1c0c1-7cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:52:37:dd:e2:67:b9:a5:fd:72:19:c1:bc:
94:7d:8b:67:02:09:3b:41:d6:ba:46:57:65:23:ec:
17:e7:fb:31:a4:ae:f9:e2:b9:bf:3f:79:2e:3b:52:
36:c7:91:d1:6c:bb:36:b8:d8:d3:cb:d1:a2:c2:d1:
43:f2:f7:fe:22:bd:ff:62:94:84:fe:bc:61:cf:4c:
00:64:b2:5b:be:31:e5:6c:34:9f:72:bb:f8:11:b8:
06:62:31:dd:b9:71:be:46:5e:4a:9c:88:98:ef:79:
f7:93:5e:e4:89:5b:b6:93:55:7c:7e:38:cc:27:ea:
79:96:f4:f8:9a:b8:3d:e0:f4:ad:10:ed:b1:dd:71:
8d:5f:7f:72:0c:79:81:b3:fd:8a:4c:39:d7:b6:d7:
13:64:ac:8e:42:d6:a8:34:d5:90:3c:df:94:c8:c6:
70:af:05:d0:5a:e5:7a:a8:7a:5d:17:ba:1e:77:24:
84:cd:f1:cf:8a:7f:26:36:a9:87:d4:9b:5e:db:9c:
9d:14:2c:dc:b3:b7:5f:05:34:59:95:c6:aa:62:5a:
75:37:a7:18:6f:42:ce:89:28:6a:ec:79:dc:78:50:
e3:30:e7:1e:1a:52:5e:4f:dd:e9:4a:f0:2a:d7:7b:
86:4a:a2:99:3f:bd:bc:a3:ba:78:df:bc:78:0a:0a:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:56:CE:84:EE:C4:3C:B2:21:22:86:74:65:73:D6:AB:98:6A:1A:26
X509v3 Authority Key Identifier:
keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:81:90:fe:b9:ed:28:b5:40:9c:ad:f8:92:66:6b:44:f4:4c:
b7:67:c2:1f:b5:2b:0f:e6:51:e9:85:ff:4a:ea:6b:78:e9:c3:
ef:e6:ff:3c:ee:eb:25:42:7a:72:ba:72:96:8c:b0:1d:21:d9:
5b:69:3f:c1:4c:7d:48:05:82:74:c8:ce:66:23:c3:6f:51:8e:
90:22:60:65:4e:f7:c7:af:a1:2c:08:0f:48:08:79:2c:a6:79:
41:7a:0d:de:9c:d6:aa:be:01:25:78:e9:bb:b4:61:07:4e:fb:
4e:bd:c8:26:3a:3c:3a:2f:51:dd:1b:96:15:36:bf:51:b3:ff:
66:9e:41:40:fc:c7:30:2f:23:1e:db:3d:00:29:ec:d9:d8:e7:
5c:95:be:bb:21:41:37:3c:5b:c8:a6:a6:9e:7c:0c:32:ad:f7:
38:f6:f8:8b:5e:e8:d3:24:ab:42:c4:06:d7:f6:6b:8e:98:7f:
99:c1:a0:a7:75:d0:96:16:4b:0e:fe:b0:d2:80:27:19:2d:27:
1b:1b:12:37:d8:40:c7:53:34:15:dc:da:31:d0:b5:35:54:96:
f4:a6:d9:50:5a:1d:70:da:45:87:cb:d2:f0:af:8a:11:51:f0:
f7:8d:00:25:a1:c6:e7:81:3f:65:58:d8:a6:f7:ed:07:6d:0d:
a6:43:54:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:58:54 2026 by rpki-client