
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
File: oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json)
Hash identifier: qNGiBYCjpxWozKSCbsQnUUnJYUqZVsB9+OCPTAyfum4=
Subject key identifier: FD:A0:85:2E:D7:B8:A5:18:08:DE:68:14:33:DE:F8:A3:35:F6:23:9F
Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
Manifest number: 012A
Signing time: Mon 01 Jun 2026 06:26:12 +0000
Manifest this update: Mon 01 Jun 2026 06:26:11 +0000
Manifest next update: Mon 08 Jun 2026 06:26:11 +0000
Files and hashes: 1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: HX8sYh/lUTBRTmUqeVWdtfacFWjj4gjCTvdAhbJNgwg=)
2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: aoBTkJouVxyNkkgtw1vmV8sS1BnP7mpfp25E9TCfROM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Validity
Not Before: Jun 1 06:26:11 2026 GMT
Not After : Jun 8 06:26:11 2026 GMT
Subject: CN=6a1d2604-ea7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:69:6b:d6:64:f3:ce:c9:16:c7:40:5b:09:
a1:f9:79:35:5b:36:1a:08:13:92:10:29:79:41:6d:
e3:81:bd:aa:f7:1c:6c:63:d4:fc:8a:0a:21:05:d0:
e1:67:b8:c3:61:04:fb:a6:73:95:d6:5a:f2:10:1c:
15:2f:00:a3:1b:86:84:d3:04:82:a7:3d:ba:34:a8:
45:94:d4:b1:61:02:e4:f0:a0:f3:1a:c4:4a:d3:b4:
eb:0b:10:43:67:fe:44:09:39:7e:72:b6:5a:28:f3:
12:33:f9:10:8e:cf:de:0d:df:b3:f0:55:f9:fc:bd:
3d:f2:e3:2d:ca:6e:6e:53:9d:b6:16:4a:f1:f8:52:
60:8e:5f:5d:23:8b:12:75:90:af:be:f7:0b:c1:f9:
aa:13:ba:e6:14:92:53:87:be:fe:bb:a8:49:3a:7a:
3a:ca:95:19:c2:15:bf:6a:6d:76:de:17:1c:60:d7:
c6:57:f6:66:4b:07:c7:05:59:5b:9d:77:0f:74:9f:
de:17:f2:21:92:f0:42:02:39:07:84:7b:2b:09:00:
97:37:ca:ec:61:55:c5:77:aa:4c:69:aa:97:35:c1:
77:98:43:1e:f0:7d:b9:fe:1d:cf:79:c6:5b:ba:1b:
18:50:61:a7:01:f3:41:d3:31:f8:8c:87:37:82:df:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:85:2E:D7:B8:A5:18:08:DE:68:14:33:DE:F8:A3:35:F6:23:9F
X509v3 Authority Key Identifier:
keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:d4:61:8a:8c:30:fc:a4:61:27:4f:aa:0f:9a:1a:ef:be:43:
f2:b1:81:fd:5c:31:83:f1:76:c7:45:d1:22:0a:90:cf:fb:e6:
82:2f:c5:c5:29:be:58:45:de:09:af:e4:d7:b3:1d:76:9d:e1:
ee:d6:1f:f4:a2:91:1e:f8:26:c3:44:13:17:01:ee:b7:a6:31:
ac:28:a5:0a:60:75:12:a3:97:f2:7c:37:40:4e:bd:2e:b1:b0:
f1:a3:20:28:41:66:6d:d0:6e:fe:d8:3d:8a:62:52:2f:e8:25:
42:06:ee:ae:13:13:3d:34:50:f9:0f:c2:19:3e:72:f1:02:11:
6d:07:7a:83:2b:a4:a7:4a:36:4f:0e:0a:c0:32:e0:cc:e2:3a:
94:ce:13:54:1d:ef:dd:00:f4:89:e5:78:46:95:40:9b:52:8d:
86:cd:a0:d4:35:77:08:52:27:8a:e4:9f:14:c6:98:ff:45:d8:
17:cd:08:e4:6e:d1:4f:43:17:75:21:01:88:f4:63:27:60:9e:
33:7d:64:28:c3:e1:24:43:f1:46:c2:1e:f5:0b:c9:b4:79:3f:
e7:07:9b:16:9c:3a:60:73:58:d9:07:c0:60:58:01:15:00:66:
71:08:dc:62:ed:bc:c9:e5:99:5a:ca:d7:9a:fa:1e:6a:83:9e:
78:03:d8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:39:01 2026 by rpki-client