
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json)
Hash identifier: FMdViF2+lwqRlD4C+APZ50j7ZjTj+LPtUSUzUf5KLzI=
Subject key identifier: 65:55:04:2B:FD:EF:A0:3F:A8:9E:0D:83:40:47:3F:44:B1:7A:80:21
Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Certificate serial: 074B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
Manifest number: 073D
Signing time: Sun 26 Apr 2026 21:42:25 +0000
Manifest this update: Sun 26 Apr 2026 21:42:25 +0000
Manifest next update: Sun 03 May 2026 21:42:25 +0000
Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: vO+zlwCBllTU/ah2lfCdgdg9Fs5RovmW+MoAl1nTQ7g=)
2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: r9eFc2mrv+7PqZxdotrZyn8GATLC73rZgMCnBy0xVv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl
rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 21:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C661C, serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Validity
Not Before: Apr 26 21:42:25 2026 GMT
Not After : May 3 21:42:25 2026 GMT
Subject: CN=69ee86c1-c791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:bd:7a:ef:78:0a:1f:1a:4a:2e:0d:b1:e0:
af:5e:07:8e:4a:8f:37:61:41:93:18:08:e5:9c:61:
95:5d:5b:5b:2e:2f:71:27:04:fc:30:4c:76:91:a3:
5f:07:95:1b:7b:f8:f9:92:dc:72:c9:61:9c:47:45:
8f:b8:b1:46:61:cd:97:44:86:83:a2:cc:e5:a6:9a:
33:f6:40:35:00:86:4d:cb:c5:95:ac:56:e6:fa:fb:
ef:bf:02:17:6e:5f:c7:15:0f:79:a1:68:3c:76:b5:
f0:54:18:f0:6d:01:1b:d3:ae:84:b6:c5:e2:7b:71:
41:7f:8d:59:78:65:8a:a0:d5:3b:82:13:27:55:c4:
16:5a:c6:57:56:21:c7:1f:05:09:c4:9f:34:af:90:
0f:83:df:d1:91:53:b0:62:25:85:a9:eb:3c:81:88:
ee:6c:ad:bf:b9:28:d6:06:0d:f5:58:49:30:f1:75:
78:d4:02:f7:8a:ec:56:97:81:d4:cc:2f:f3:2e:82:
27:ed:f9:e6:ce:2f:59:1c:c7:1c:67:74:85:22:41:
00:c4:bd:68:b9:95:88:02:7d:7f:49:8a:9a:a9:25:
15:23:e5:37:e4:ea:6d:8c:42:e2:60:e2:25:f7:e8:
d1:f2:19:ba:4e:80:0e:ef:a4:b4:70:10:7e:5a:a6:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:04:2B:FD:EF:A0:3F:A8:9E:0D:83:40:47:3F:44:B1:7A:80:21
X509v3 Authority Key Identifier:
keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6e:c5:cd:dd:73:3d:9a:f0:c6:41:54:d7:cb:fc:3f:74:a3:
e2:ae:0c:74:47:e5:16:17:67:23:e1:c9:68:bc:36:a1:cc:6c:
fa:57:32:fe:69:df:cd:cd:00:96:91:be:48:03:88:4e:7a:7e:
ba:30:9e:96:01:99:5d:f3:00:79:3e:3a:df:5b:9c:7a:66:0c:
87:03:76:d2:a6:d4:7e:65:06:c5:af:19:74:91:95:57:56:cd:
55:ec:5f:46:b7:ca:41:0e:f5:52:25:f2:fd:d1:62:45:83:66:
a1:1e:0f:ac:54:22:f5:e8:90:59:b5:a1:e7:13:87:09:4b:59:
11:00:2e:7f:ed:b3:48:93:67:83:b7:dd:62:10:43:04:8e:73:
43:d5:61:66:18:f5:45:c9:2f:09:85:88:47:c0:5e:c2:3f:51:
56:c9:ac:80:cf:8e:43:af:cb:bb:ad:e7:57:5b:41:5c:8b:0c:
aa:7a:98:30:83:14:bd:7f:87:9d:ab:48:d4:91:ce:21:53:03:
95:35:dd:66:4b:af:c1:c8:25:1c:47:7c:b7:7c:aa:3a:1d:78:
59:11:af:cb:97:06:e3:b2:42:6b:34:1d:42:63:fe:e4:cc:e1:
9c:03:43:02:ea:3e:3f:e8:e1:e4:fd:16:5e:b3:4b:78:4e:ba:
8c:9d:c2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 13:37:15 2026 by rpki-client