
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json)
Hash identifier: xmU5q5410rJUw5uT0h1IBug+MB3sCHiRfloKELr8Ql8=
Subject key identifier: F6:49:C9:77:E2:51:F6:55:DD:1D:AE:80:C6:7B:1F:C5:6B:CC:B9:D8
Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65
Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
Manifest number: 01C1
Signing time: Sun 05 Apr 2026 03:31:06 +0000
Manifest this update: Sun 05 Apr 2026 03:31:06 +0000
Manifest next update: Sun 12 Apr 2026 03:31:06 +0000
Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: f7WtkXKaJfMpC5wiAD90FkU+u8NpVnjSKt3WYSJVU+M=)
2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: 7HiiQTV5zY5tbTdYcm8BulZ0FRGrmhKFMlzgoK8qTu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl
rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65
Validity
Not Before: Apr 5 03:31:06 2026 GMT
Not After : Apr 12 03:31:06 2026 GMT
Subject: CN=69d1d77a-6212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:44:8e:03:fc:f9:be:e8:94:c9:01:99:3b:
9a:28:36:a9:82:fd:05:c1:04:d1:2d:53:3e:c7:c1:
37:5f:02:c0:35:fe:a3:25:60:c0:45:cc:82:6a:17:
70:f2:89:af:76:6f:96:95:90:23:0e:16:63:35:cc:
c4:24:c5:c2:43:4f:b5:6a:30:a6:80:cd:80:78:f4:
0b:39:11:66:dc:ec:5d:aa:0c:2a:57:62:ab:0d:96:
01:0e:e7:c0:46:b9:06:1b:b2:3e:db:26:44:db:ac:
e5:b4:11:cc:4a:f2:82:b5:43:77:72:0c:ec:13:c5:
7f:3c:ae:30:e8:1f:24:a1:1a:15:38:28:1b:d6:59:
8c:a3:61:ce:04:cb:9d:87:81:9a:f4:fa:cf:d9:e7:
33:2c:0d:b9:11:91:a3:52:6b:6f:b3:13:0a:8e:4d:
c8:fd:84:22:82:19:d5:47:36:ea:5f:44:83:3b:f3:
fc:ff:08:c9:8f:93:0e:9d:3a:1a:e0:65:d6:a3:40:
c0:2d:b7:1e:af:d6:a7:8a:7c:31:e9:2a:84:bd:4b:
21:7c:d5:19:78:01:57:60:a0:db:00:9e:8a:24:aa:
37:9f:54:d8:16:a5:8d:48:0f:ea:3f:dd:11:74:fa:
27:27:c8:3d:17:35:00:79:d0:1a:c3:31:4a:39:ca:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:C9:77:E2:51:F6:55:DD:1D:AE:80:C6:7B:1F:C5:6B:CC:B9:D8
X509v3 Authority Key Identifier:
keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:c9:f1:df:a9:55:d0:91:f2:26:2d:da:76:aa:d0:b5:a8:83:
bf:97:c2:8f:80:c9:17:cf:18:5c:ed:45:3c:75:d8:63:c9:0a:
5f:6b:50:7e:01:72:c9:54:9e:17:ab:06:15:92:fc:a3:d1:1d:
4c:04:21:32:38:b3:8c:12:f3:64:36:24:03:8a:b1:a0:3e:9b:
75:ed:38:19:f2:42:c8:cd:aa:93:55:26:78:6d:45:75:db:bd:
9e:fc:40:df:c6:08:e4:80:12:3b:39:e6:b7:b6:9c:89:b1:0f:
70:9a:1f:93:9c:fa:69:6b:57:fb:1d:6e:3b:67:7a:57:7b:c6:
24:63:c2:44:d6:7a:c6:db:ac:6c:a7:e7:2a:94:dd:30:af:5e:
ec:98:c8:e3:03:ac:45:4b:1e:40:03:eb:b1:62:5e:62:2b:90:
16:6c:2a:e7:90:79:26:d8:f3:15:7e:d9:49:ab:0b:ab:d9:c0:
ce:45:7e:42:14:b5:27:ac:3b:d9:35:48:af:c1:75:dd:c1:dd:
9e:26:42:e6:b8:1b:cc:f0:ec:a9:5c:a4:ff:57:e4:de:87:22:
e8:6d:74:93:6d:a9:de:53:66:f4:30:84:77:59:a5:a1:72:f7:
95:04:bf:4f:95:f0:4d:3e:23:71:a8:9f:b1:cb:87:d7:67:7c:
57:a9:78:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx
ODc5RERCNjUwHhcNMjYwNDA1MDMzMTA2WhcNMjYwNDEyMDMzMTA2WjAYMRYwFAYD
VQQDEw02OWQxZDc3YS02MjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgJEjgP8+b7olMkBmTuaKDapgv0FwQTRLVM+x8E3XwLANf6jJWDARcyCahdw
8omvdm+WlZAjDhZjNczEJMXCQ0+1ajCmgM2AePQLORFm3OxdqgwqV2KrDZYBDufA
RrkGG7I+2yZE26zltBHMSvKCtUN3cgzsE8V/PK4w6B8koRoVOCgb1lmMo2HOBMud
h4Ga9PrP2eczLA25EZGjUmtvsxMKjk3I/YQighnVRzbqX0SDO/P8/wjJj5MOnToa
4GXWo0DALbcer9aninwx6SqEvUshfNUZeAFXYKDbAJ6KJKo3n1TYFqWNSA/qP90R
dPonJ8g9FzUAedAawzFKOcpxyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZJyXfi
UfZV3R2ugMZ7H8VrzLnYMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG
M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0x
T1BYSkdqU3piT2NZZWQyMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUMnx36lV0JHyJi3adqrQtaiDv5fCj4DJF88YXO1FPHXYY8kKX2tQfgFyyVSe
F6sGFZL8o9EdTAQhMjizjBLzZDYkA4qxoD6bde04GfJCyM2qk1UmeG1Fddu9nvxA
38YI5IASOznmt7acibEPcJofk5z6aWtX+x1uO2d6V3vGJGPCRNZ6xtusbKfnKpTd
MK9e7JjI4wOsRUseQAPrsWJeYiuQFmwq55B5JtjzFX7ZSasLq9nAzkV+QhS1J6w7
2TVIr8F13cHdniZC5rgbzPDsqVyk/1fk3oci6G10k22p3lNm9DCEd1mloXL3lQS/
T5XwTT4jcaifscuH12d8V6l48g==
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:31 2026 by rpki-client