
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
File: oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json)
Hash identifier: 1Z9Yb0oZqI4xyfMNFZ8h50G7cGsLAf9Kz5mjXuVZbuo=
Subject key identifier: 92:AE:6C:69:D3:4D:40:96:FC:B4:B1:47:89:01:0A:96:1B:1D:D7:6C
Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
Certificate issuer: /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
Manifest number: 01B7
Signing time: Sun 05 Apr 2026 03:24:37 +0000
Manifest this update: Sun 05 Apr 2026 03:24:37 +0000
Manifest next update: Sun 12 Apr 2026 03:24:37 +0000
Files and hashes: 1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: /gGo58xJ3TLm7JXjK0IsnOprcTEyNbxrCz3XQQ2dWp8=)
2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: I602UprS0PuPZg6+swMqCR4Z7j5cFK9kxKEJsn7QaM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:24:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE620, serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Validity
Not Before: Apr 5 03:24:37 2026 GMT
Not After : Apr 12 03:24:37 2026 GMT
Subject: CN=69d1d5f5-eefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:63:77:31:50:ba:07:48:2d:3d:a6:31:f4:
ce:68:3c:d2:cc:59:88:af:88:88:12:04:42:ac:d2:
8c:5d:fa:c3:39:48:4c:84:79:d9:46:43:bc:a5:d7:
33:a9:48:a1:2a:d8:b4:dd:b2:0e:57:58:e3:1c:c8:
4d:f1:4d:1d:16:8b:3b:ee:34:bd:10:89:11:1d:2f:
4b:7a:78:7c:84:73:5e:f5:3e:83:85:6d:99:1e:e7:
d8:eb:79:03:cd:87:08:28:84:67:8f:b8:7a:3c:34:
4b:64:2f:e0:64:25:56:19:fe:1a:38:c6:05:3e:c0:
98:0f:13:eb:13:fa:52:e3:a4:d4:da:5f:5c:e2:b6:
20:8d:18:82:b0:1f:31:c8:29:96:49:8f:ef:27:20:
d3:46:2a:6c:d6:98:31:cc:1c:d1:9b:eb:1b:e4:80:
51:ca:10:7f:81:e9:5f:0a:f5:04:a1:b4:e7:71:82:
e9:87:0a:f3:a1:2f:4f:ef:fb:ab:34:70:ea:6c:7b:
56:78:54:a1:76:d9:5b:59:c1:d0:18:75:7c:37:0a:
f1:d5:95:b2:b2:3d:1c:36:7e:2e:ef:e5:85:9a:fe:
1c:cc:1b:53:1e:da:04:c8:0f:5a:84:a7:f2:f1:fc:
7b:ef:0f:2b:07:d6:6c:e3:a5:c2:07:0f:39:fb:ca:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AE:6C:69:D3:4D:40:96:FC:B4:B1:47:89:01:0A:96:1B:1D:D7:6C
X509v3 Authority Key Identifier:
keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ef:3c:97:15:d4:af:a1:f1:3c:4a:e7:6a:0c:f0:49:89:0a:
b7:7f:f7:e6:46:e3:29:48:79:71:55:92:8d:e8:90:f8:a4:1a:
b3:4c:52:07:c8:ab:98:a7:6a:63:be:30:2e:b6:f0:29:fd:7a:
98:2d:68:d4:31:a7:27:e2:31:11:d9:75:6e:e2:7c:dc:41:25:
8d:d5:b4:73:27:38:f8:48:46:09:8d:30:02:ad:14:dd:5f:c5:
15:e6:8c:96:88:9c:2e:b6:af:7a:91:1d:0d:95:30:46:be:21:
03:03:b4:6f:dc:29:52:4a:30:59:0c:13:e5:2c:0e:51:6f:71:
bf:93:f2:de:83:e0:e1:86:6c:e1:44:95:90:d8:85:c8:36:ea:
dc:19:f7:14:ff:82:48:8f:4e:c3:fb:ed:82:d9:9f:1e:48:81:
a1:e4:60:90:b5:c0:72:11:d8:4b:d1:08:b5:3a:08:87:1b:55:
3a:1f:74:bb:64:05:4d:58:77:36:33:dd:34:33:48:10:d3:94:
31:e1:b3:b1:e8:eb:a7:e8:29:a4:ab:cf:d2:1b:74:43:6e:0f:
f8:e3:72:15:ee:e3:2a:61:aa:0e:7d:14:b7:0c:05:28:a9:44:
f1:72:65:47:71:81:32:ad:1e:2a:07:0c:12:8c:8e:44:6e:44:
ee:db:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:58 2026 by rpki-client