
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
File: oRHoHEs-J72m4nEkl_bbugz7CCY.mft (raw, json)
Hash identifier: F3jiiHE0+bzCwodPiPeEUavs52T2MKIvScJi1RiASX0=
Subject key identifier: A0:EA:4C:E8:34:0F:51:50:B8:FA:60:22:EC:D4:62:0A:9F:85:E3:D3
Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
Certificate issuer: /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Certificate serial: 146B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
Manifest number: 145C
Signing time: Tue 06 Oct 2026 16:55:34 +0000
Manifest this update: Tue 06 Oct 2026 16:55:33 +0000
Manifest next update: Tue 13 Oct 2026 16:55:33 +0000
Files and hashes: 1: oRHoHEs-J72m4nEkl_bbugz7CCY.crl (hash: 0xmKhBFv82sgItrqQ6zTK/JlOI2sSrxoNlab8tytuqI=)
2: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (hash: 2PmqHELB1hwleGl17N3DUTadd9q9hQXwA/8mpl3xfuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5227 (0x146b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DB8, serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Validity
Not Before: Oct 6 16:55:33 2026 GMT
Not After : Oct 13 16:55:33 2026 GMT
Subject: CN=6ac52805-b0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:da:ef:fa:7e:ce:6f:b4:4a:1a:7d:8b:07:
a9:2a:1d:b1:4a:44:51:36:22:1e:68:f1:dd:28:61:
a8:cf:25:a4:7e:ec:fa:23:18:83:1e:f1:2b:f3:89:
7c:65:06:bf:ac:c4:ce:89:51:ad:81:22:13:b5:76:
9f:cb:54:bf:09:a1:2c:db:27:7f:d6:2f:f0:61:47:
40:16:d8:80:5c:3b:98:a5:04:b9:ef:d2:87:63:0a:
2e:b3:ef:a0:09:8d:9e:3c:1d:58:d1:c3:e8:b7:f7:
a6:fa:06:fd:2c:49:28:51:59:34:ec:37:cf:21:03:
39:c8:3e:cb:e6:0c:e4:71:85:4a:4a:cd:2c:ae:13:
2b:7b:0d:5d:67:25:00:cb:3a:a6:f9:50:bc:9f:69:
c8:2e:02:e7:44:04:38:9b:a3:0d:a5:cd:37:4b:c6:
57:c7:f7:75:65:ed:32:80:2f:8c:77:23:1a:07:7e:
e4:d3:84:24:14:01:c8:d4:d6:11:39:cd:25:dc:df:
ef:96:66:b8:8b:48:8f:e8:9e:1d:f0:66:e4:5c:ac:
6b:05:57:ca:fa:34:02:e0:30:05:67:15:5e:37:72:
0f:37:d1:91:ad:c4:e7:ac:09:14:4f:11:e1:e8:af:
d9:60:47:43:33:7e:09:bb:7b:4b:4d:85:d1:11:0b:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EA:4C:E8:34:0F:51:50:B8:FA:60:22:EC:D4:62:0A:9F:85:E3:D3
X509v3 Authority Key Identifier:
keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d3:3a:2e:6a:57:98:a9:c1:80:9c:0a:18:99:ce:d9:84:36:
11:9d:b8:9c:e3:d3:5b:3c:78:9d:9e:11:3a:d6:5e:55:2a:99:
28:3c:3d:43:00:e2:53:01:8b:00:0b:62:21:4c:5a:a0:4b:f9:
77:60:16:0f:9d:bc:74:9d:50:64:21:57:d3:58:26:4c:82:28:
8f:39:e5:54:9b:42:97:84:cb:ed:dc:3b:f7:56:91:a6:e2:02:
d4:27:f3:8d:83:03:9b:17:94:15:1b:46:11:c3:9f:07:19:c4:
7d:75:3a:3b:ef:98:30:16:5e:6f:e2:11:f3:9f:09:e4:6a:c2:
2b:76:29:49:68:64:26:a1:2a:81:e7:c1:6d:f9:7b:86:0a:e0:
c2:e5:f8:ca:2c:ee:20:e4:cd:43:3b:d9:38:45:db:0d:6f:20:
fd:74:15:d6:64:f1:23:cb:db:08:89:c3:73:df:4a:40:46:87:
49:a7:03:40:5b:1b:04:d6:1b:81:84:09:f4:ff:c1:a1:51:da:
b4:44:a8:88:e0:bf:e5:43:e2:25:37:ad:2c:e9:05:c2:4c:00:
24:0b:a3:3f:55:6f:48:e1:c7:08:b1:32:4a:59:b7:b9:d3:bd:
3e:25:15:3d:26:cb:c2:b9:41:ff:fb:30:3f:7a:e5:43:ef:6a:
c1:ce:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:05:03 2026 by rpki-client