
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json)
Hash identifier: m/lYNDarsC7SEtUVv62DeC38F6GRiRzgpcQ1Oe3Z37E=
Subject key identifier: 37:4D:E4:C4:F1:D3:EC:D3:81:73:49:75:40:CD:0A:02:85:69:6C:D4
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial: 341D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
Manifest number: 33A8
Signing time: Sun 26 Jul 2026 15:28:33 +0000
Manifest this update: Sun 26 Jul 2026 15:28:33 +0000
Manifest next update: Sun 02 Aug 2026 15:28:33 +0000
Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: ukZgysjhivVyIQFrtrrZA1p9Ovu5sctpQuvkYNZV2Bk=)
2: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: ywYO0R2h+KCbkByqxPNiOzqIp/WyrJLVsBz2TrN/mq0=)
3: 3729B51E870611F18212677BADEE528E.roa (hash: KmqkE4g5dl2qjiw7G2tcNNphjk7q9UbrdXY3bWAn7D8=)
4: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: YkWYNrxgO0n51u4sQpXTHmpzMu712XYl/YRt4XSQRKE=)
5: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: D3M6wzI4okhGRiWpslBcCzchggkeDwBoIQLL3NU2Nsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 15:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13341 (0x341d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Validity
Not Before: Jul 26 15:28:33 2026 GMT
Not After : Aug 2 15:28:33 2026 GMT
Subject: CN=6a6627a1-64e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:40:a8:83:48:df:1f:c2:2c:cd:b7:35:f6:
ac:98:5c:89:75:f0:99:1d:ba:bc:bf:fd:87:e1:bc:
a0:27:61:24:18:54:04:ff:ea:74:60:9d:4e:60:60:
11:6e:73:80:e1:5c:6f:d1:c7:e7:1a:84:f2:49:1c:
2d:81:b8:54:ca:62:e0:ce:5f:5b:9b:34:56:45:be:
93:0a:30:3e:4b:01:b9:0e:b4:e2:43:57:e5:76:0d:
c6:19:20:b6:a0:7e:29:4f:c1:d8:5a:3b:15:ed:c0:
b5:66:59:e8:26:94:39:17:4d:7c:a1:be:fe:1f:8d:
e2:04:73:63:52:f1:a5:d2:51:af:4e:3e:d3:36:b8:
6d:fc:c2:3a:2a:50:d9:fe:07:60:e9:7b:11:d6:bb:
69:37:31:f8:fe:9c:10:88:a8:50:21:fa:b4:a1:34:
10:f7:a0:9f:2f:11:c1:2f:03:d1:98:39:7e:c2:29:
01:6f:bb:e5:0f:ee:28:0e:93:5b:d0:54:b7:b3:b4:
4d:66:7c:c7:e8:a1:55:10:31:de:36:a0:f1:c7:6d:
3d:d7:d9:20:75:c9:0d:d8:09:29:28:1b:b1:84:40:
36:3c:dc:3d:4f:a7:7c:07:20:94:ed:26:fe:34:ce:
cc:68:74:1a:4a:27:60:07:30:ff:d3:0a:0d:fb:10:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4D:E4:C4:F1:D3:EC:D3:81:73:49:75:40:CD:0A:02:85:69:6C:D4
X509v3 Authority Key Identifier:
keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bf:66:c6:ea:82:ff:0b:9a:96:27:68:d7:00:13:7f:19:47:
b3:e9:b3:0e:c6:fe:de:c8:66:1c:64:12:58:ab:53:98:ae:b4:
ab:41:aa:44:b8:ed:7f:b6:25:89:c0:e3:78:45:ab:98:b6:97:
34:d3:8f:75:29:9a:46:90:f8:90:71:d9:31:38:be:a2:7b:03:
57:f7:00:7b:56:b8:83:a6:26:47:89:4b:39:a8:3a:17:87:30:
23:d1:25:db:ed:5e:6c:f4:f6:02:b7:41:e6:90:54:c2:15:ec:
f1:7b:93:35:f9:87:d3:91:f5:cf:07:05:11:0d:d1:e6:2c:fc:
c3:7f:a5:17:83:c1:0c:7b:68:bd:6e:78:a8:91:15:e2:4a:8d:
50:0c:a6:c4:c4:82:11:52:b7:4c:e2:99:34:5a:65:dc:13:d9:
2e:1b:fc:05:45:60:c9:1b:cd:4a:68:4a:e1:09:47:15:b3:32:
b2:01:7b:5b:0c:4b:ae:74:34:55:4e:1c:d1:70:8f:9f:9d:e9:
53:a2:87:bf:fa:7b:6a:32:8d:79:a2:e2:4f:1e:77:4b:4e:ca:
b0:c2:7a:9b:ac:9f:0d:d1:36:35:60:7a:46:ab:0e:2f:fd:7e:
c5:9c:2c:3b:7d:15:7e:a3:19:32:26:24:1c:74:5b:0a:ce:9f:
75:52:0f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 01:03:33 2026 by rpki-client