
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json)
Hash identifier: DDouY1HDZQ7AbLvzlccXVV6ROvhdc1HQgqwU8Vb24lI=
Subject key identifier: D6:EC:04:B3:EB:87:8C:29:A7:24:1F:8F:96:7E:03:74:07:67:BA:34
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial: 3400
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
Manifest number: 338E
Signing time: Fri 12 Jun 2026 15:23:29 +0000
Manifest this update: Fri 12 Jun 2026 15:23:28 +0000
Manifest next update: Fri 19 Jun 2026 15:23:28 +0000
Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: 1qRNMiRJ2V0YKuL0tD+PxvoOdyktve2KnXnptR8SksU=)
2: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: D3M6wzI4okhGRiWpslBcCzchggkeDwBoIQLL3NU2Nsk=)
3: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: YkWYNrxgO0n51u4sQpXTHmpzMu712XYl/YRt4XSQRKE=)
4: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: ywYO0R2h+KCbkByqxPNiOzqIp/WyrJLVsBz2TrN/mq0=)
5: 844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa (hash: sVfjMKk5gEscjf/+ggoyWUQbHrSEKZRSttzymuAtyFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13312 (0x3400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Validity
Not Before: Jun 12 15:23:28 2026 GMT
Not After : Jun 19 15:23:28 2026 GMT
Subject: CN=6a2c2470-8a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:bc:a0:84:4a:df:fb:ac:66:04:eb:c6:2f:
ed:f5:96:49:6b:ae:38:a8:98:99:54:85:b4:de:02:
77:53:7f:ba:b0:41:da:76:a3:b9:c9:c4:61:41:60:
11:d9:e1:49:e9:b3:c2:bf:8c:16:97:be:f8:17:69:
ce:91:f0:0e:ee:06:82:64:31:61:93:d3:0e:7d:b5:
41:1b:83:be:5d:5f:4c:fd:ef:54:52:53:e0:4d:3e:
8d:b1:60:39:f7:15:92:c0:35:97:62:fa:a4:b5:8c:
68:32:db:ed:cd:dc:05:7f:5b:6f:08:93:60:12:b6:
0b:23:58:53:00:d5:f3:7e:4c:87:a7:04:71:39:cb:
75:0b:e6:b2:ff:c3:1e:3f:21:f5:2d:e4:ae:34:79:
d8:71:72:be:f0:51:ca:a3:2d:f2:d5:ff:38:50:ac:
b3:4f:d9:ce:06:50:d2:db:2a:8d:48:b4:aa:e7:ea:
65:30:86:bb:e2:8a:18:a7:6c:c8:a1:6a:5b:49:00:
8a:2d:ec:3d:b5:fe:d1:93:6e:b1:a7:47:64:4f:85:
3c:f7:5c:7f:e9:3d:48:6e:6d:92:56:ff:c8:9f:e6:
7f:d6:2e:11:c9:c6:a1:7f:f0:b3:c7:a7:21:49:79:
a5:0f:a1:0a:96:b0:6b:0d:3d:12:19:af:a5:f3:fd:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EC:04:B3:EB:87:8C:29:A7:24:1F:8F:96:7E:03:74:07:67:BA:34
X509v3 Authority Key Identifier:
keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:30:99:bb:67:2c:a3:4b:f0:33:be:98:ca:f0:e7:83:58:75:
7d:54:c3:74:76:18:9c:24:c3:4c:5c:f4:69:7f:f1:54:f6:d7:
5e:37:c5:b0:10:00:34:c6:a6:3c:32:0a:f1:7d:96:c9:32:7a:
49:36:1d:7b:b5:5d:c9:41:e7:be:f7:11:40:a8:44:ae:3b:22:
b8:ac:d7:48:75:5a:a1:b0:29:45:8a:c1:7f:f3:2d:75:cd:ae:
32:9b:b4:8a:84:3e:52:ad:39:0d:35:2f:84:1b:b4:ed:0c:06:
c8:5d:d3:63:52:1a:79:a8:b0:fe:93:ef:d9:85:bc:fd:e0:87:
40:96:d6:2f:ff:b4:a0:cd:9f:76:9c:ea:7d:89:b7:f5:1c:2d:
37:3f:36:71:68:c1:4e:e6:d5:e6:b9:fd:7d:11:52:36:24:15:
f9:af:c8:0e:d2:86:7e:37:94:98:c2:a4:ed:9e:ec:04:bf:9a:
6d:b1:f8:b6:3e:94:7d:db:c8:5a:99:75:67:0a:66:cc:a3:4a:
79:37:03:77:e2:93:f7:54:ef:1e:c9:14:01:c8:6f:b9:51:19:
66:87:0a:73:25:39:f4:7d:9d:c8:a2:bc:bf:57:b6:cc:34:b0:
3d:8a:42:7d:54:ab:37:6a:7e:4d:1e:7a:47:d6:21:f6:37:d1:
07:d9:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 20:13:11 2026 by rpki-client