
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json)
Hash identifier: JsvzWQiqylR8iwRG7WV3FE+Zb8lgEw+TPeXXbyKIw14=
Subject key identifier: 87:F2:3A:01:31:FF:F2:17:CD:AB:70:16:E0:07:FA:6B:AE:EE:48:AE
Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Certificate serial: 1490
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
Manifest number: 1483
Signing time: Sun 04 Oct 2026 16:52:44 +0000
Manifest this update: Sun 04 Oct 2026 16:52:44 +0000
Manifest next update: Sun 11 Oct 2026 16:52:44 +0000
Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: 56VzC9rKjn4dfRL/OqYstyP2AOcvsvLJ5ARM+VhVOlE=)
2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: ejmgdYeuM6vja8yeymu+bvz8ubQIFSHH83aK9capx78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5264 (0x1490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Validity
Not Before: Oct 4 16:52:44 2026 GMT
Not After : Oct 11 16:52:44 2026 GMT
Subject: CN=6ac2845c-7187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c1:f6:ee:67:69:e6:dd:2f:ca:2f:47:6a:fa:
c2:14:bf:e6:91:2e:70:f2:d7:e8:77:73:ca:46:86:
c7:cb:62:5d:26:ee:f8:14:89:e2:73:80:bd:99:0c:
93:01:8e:1d:46:3b:14:09:83:1a:9d:1e:4f:cb:17:
6d:80:f6:f2:0c:50:b2:76:97:37:47:92:75:1e:b2:
63:92:ec:e0:a7:f2:80:f2:ca:63:37:27:e8:b8:88:
60:3c:89:42:03:8c:57:24:0a:ea:36:16:ce:d0:14:
29:93:b1:6e:54:90:92:69:82:ec:ae:48:2e:ab:15:
15:c1:4a:ee:66:cf:15:9b:4e:d6:79:e3:a3:b5:4f:
50:11:2c:be:b1:97:33:14:a8:bc:83:33:8b:22:18:
26:58:4b:90:61:a6:98:c6:6b:bc:b8:88:3b:9c:22:
21:02:a8:d5:6c:1a:f5:bd:bb:49:1e:86:72:8f:cf:
9b:3c:3b:36:f7:92:1d:a0:3f:be:55:a4:71:3b:09:
55:ea:f6:d7:d7:ce:8f:30:91:09:d7:ba:8c:75:78:
d9:37:20:41:10:ef:2a:30:a2:4f:4c:54:bc:91:29:
ba:23:19:bd:cb:41:1d:77:ee:41:21:88:85:e5:d7:
eb:e3:05:82:c6:a4:ae:43:b2:79:1a:b3:a4:c5:1a:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F2:3A:01:31:FF:F2:17:CD:AB:70:16:E0:07:FA:6B:AE:EE:48:AE
X509v3 Authority Key Identifier:
keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:75:7a:31:08:ef:49:d2:7f:38:0b:77:08:b6:3d:6e:a8:89:
fd:e9:83:da:8b:ca:1a:28:94:59:6b:0f:fb:37:b6:29:86:bf:
96:b9:4a:29:db:97:bd:05:2f:47:81:42:2e:5f:2a:f2:01:92:
03:98:c4:cb:a9:30:65:fa:a8:58:ce:8b:d8:36:42:db:43:39:
0b:55:2a:13:01:de:69:77:67:ea:b4:4b:bb:9d:01:bb:a2:82:
bb:ed:b4:ab:e6:5f:2f:75:b7:e9:c3:b9:99:fe:5a:93:82:fb:
3f:35:1f:e5:6b:2d:38:d4:a1:09:31:94:9b:b7:78:bd:f3:8a:
93:1b:ef:1b:75:f0:da:e9:4a:3b:ad:5a:2c:fa:29:2e:5e:e2:
e0:c3:d1:ee:31:51:6d:8a:4b:7f:1b:1f:94:f3:03:92:57:8f:
ef:ef:b1:90:9d:5b:79:32:5d:57:c4:7a:1a:5d:02:3f:34:a0:
2f:3e:f8:c6:87:e8:6c:87:3f:b2:09:d7:13:52:70:3a:c1:4c:
8e:bd:11:57:72:31:7c:0c:02:84:44:47:b3:6c:5f:a0:5a:9d:
99:56:59:76:81:f3:a9:a5:a7:78:8f:b8:df:17:25:90:16:8a:
70:a0:22:23:34:e0:97:c2:e1:c6:82:dc:77:ae:bd:14:8b:31:
ac:ec:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:18:13 2026 by rpki-client