
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
File: OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft (raw, json)
Hash identifier: ml8C+s+VyqjuSw2kPTuNVwDdZ57zDAFZ1he9J/KJ0Og=
Subject key identifier: 44:E8:5E:15:6F:CA:E6:53:4C:14:26:FE:9B:95:3E:65:A8:E6:23:C0
Authority key identifier: 38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66
Certificate issuer: /CN=A91D0F0F/serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
Manifest number: EA
Signing time: Sat 03 Oct 2026 07:09:41 +0000
Manifest this update: Sat 03 Oct 2026 07:09:40 +0000
Manifest next update: Sat 10 Oct 2026 07:09:40 +0000
Files and hashes: 1: OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl (hash: V3KAaHm3aNwYaeZVMUNJX++mzx9IxQwFGO3C3zRIElM=)
2: CCD6F0DE5DE711F0BC6E0A50C4F9AE02.roa (hash: cTuEyMmmBY0Q1fvZoagoeb0YBBXseicP8yRI7E0DOBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl
rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0F0F, serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66
Validity
Not Before: Oct 3 07:09:40 2026 GMT
Not After : Oct 10 07:09:40 2026 GMT
Subject: CN=6ac0aa34-14eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:12:a8:c5:eb:35:e2:f6:2e:8d:b9:38:6c:3d:
c3:15:4f:8d:f7:45:12:fd:85:8f:b8:8d:c0:26:f1:
a8:40:53:f5:59:27:85:13:c4:56:c0:5c:fc:0d:48:
69:ed:d6:99:ac:9b:9e:34:53:11:ec:34:46:f7:e5:
0d:72:9a:1f:06:78:ab:9e:14:c9:12:3e:af:76:d7:
fb:ea:a3:8a:aa:37:77:d2:2a:4e:31:3b:33:04:66:
ad:97:56:c7:b2:64:53:49:51:e9:88:52:be:72:7e:
37:6c:6a:f1:44:d2:d3:28:4f:82:d8:69:6b:ef:b6:
ac:5f:62:42:1e:bf:be:2f:b4:47:6f:aa:5e:85:a1:
c6:f3:29:78:e3:d1:39:41:d8:ac:92:44:e6:31:1d:
b0:fd:b0:52:23:b7:03:15:57:61:b0:64:8c:52:04:
84:9b:e4:f5:22:e5:12:7d:0b:1d:f3:cc:df:3e:5e:
87:7c:05:49:5a:b4:f3:dc:64:48:b9:bc:89:6f:68:
b6:90:12:da:08:09:45:d8:52:82:bc:50:70:d3:c1:
0a:d0:2b:20:cf:9c:bb:28:b2:ae:7d:eb:a8:ad:f3:
dc:1a:cb:a2:9b:cd:f0:09:ff:fd:8f:c5:dc:9e:b0:
31:80:51:24:fb:04:8a:ed:a3:ed:ae:27:44:84:ab:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:5E:15:6F:CA:E6:53:4C:14:26:FE:9B:95:3E:65:A8:E6:23:C0
X509v3 Authority Key Identifier:
keyid:38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:90:65:b3:8c:3d:49:62:ea:be:63:3d:5a:a7:a5:4a:10:a7:
dc:84:48:13:12:40:93:f9:c5:12:ef:0d:65:83:6d:38:b9:bb:
78:07:a6:b2:34:59:59:7b:3f:f6:8b:d3:a2:23:c6:a2:c7:97:
12:fc:e1:85:48:f8:a6:75:f7:6c:f8:0f:72:51:51:6c:92:33:
b7:e5:f7:f4:e6:0a:91:ff:e7:b0:c7:57:d1:6c:aa:25:6b:9d:
52:10:7f:a7:92:78:ba:f4:b0:3c:d6:a4:bb:47:e4:7f:a1:98:
87:6a:94:49:a0:32:e7:13:a0:42:88:33:57:dc:40:6a:ef:24:
00:74:6e:50:b6:53:ed:13:3d:bd:d3:26:37:03:76:50:be:d5:
c4:00:83:07:b6:54:88:dc:3e:49:c8:d6:71:1b:ca:d5:e7:f4:
aa:54:6b:b1:07:e9:fb:7a:9d:56:3e:95:fa:d8:d5:bf:53:c7:
f7:f2:65:20:a0:99:2c:40:f8:7f:8b:5b:5c:7d:d8:90:64:ef:
f0:55:78:0c:3f:8b:d0:54:60:e9:9c:5c:09:f3:ca:bd:7f:24:
52:75:fa:0c:23:52:3b:cc:f0:8b:c2:6c:f5:a3:2a:c5:a9:d1:
12:14:be:e7:84:ed:15:60:65:57:f2:7a:23:74:ea:52:9a:f9:
4e:d9:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:18:04 2026 by rpki-client