
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
File: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft (raw, json)
Hash identifier: y/G0QUH+ISiI5HXTRVxIdwQQDdFkGsiqyZ+xgwXKvz8=
Subject key identifier: 46:C2:05:C8:D2:E2:DF:32:10:4A:32:25:DC:CA:73:1B:80:4B:F6:7A
Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Certificate serial: 3535
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
Manifest number: 352A
Signing time: Sat 04 Apr 2026 14:51:24 +0000
Manifest this update: Sat 04 Apr 2026 14:51:24 +0000
Manifest next update: Sat 11 Apr 2026 14:51:24 +0000
Files and hashes: 1: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl (hash: 9WyRD+niwPnHULKTTRskPJT2rYWuolGmWQSkYmbeMbo=)
2: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (hash: 5ajoABIPQKy84nhI8bYLiigoWeWTj4zuppcdTO5917w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13621 (0x3535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0267, serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Validity
Not Before: Apr 4 14:51:24 2026 GMT
Not After : Apr 11 14:51:24 2026 GMT
Subject: CN=69d1256c-14da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:ee:92:64:92:a0:f0:28:58:34:98:e0:8c:
b7:09:60:a3:a7:06:29:63:0d:cf:fc:8b:f1:ae:ea:
7b:94:06:d7:62:96:6c:20:05:00:eb:f6:a9:a0:a3:
b3:aa:36:26:34:2c:be:bf:7e:df:3e:0d:de:29:c7:
b1:0c:a3:e2:80:5d:bd:5b:26:12:16:c9:8e:3a:d3:
e9:da:c9:5b:10:40:36:d1:bb:75:d7:4c:eb:07:3a:
90:dc:a1:7d:cb:d1:34:e7:35:8b:2b:2a:fa:2b:c6:
21:24:97:cd:16:bf:05:7a:e4:83:18:b7:2d:31:a3:
12:0e:09:1c:bf:d0:79:fa:c5:ed:6c:66:08:93:b2:
ef:dc:0e:5e:30:17:3e:ad:89:ee:44:36:54:4b:e4:
a8:62:e7:b9:58:75:ea:38:7f:2e:71:d9:a2:04:b9:
7d:f5:29:35:0b:67:8c:13:3a:6b:9b:e0:39:5d:50:
b0:14:9b:dd:ba:63:bf:76:b7:f9:b9:44:95:0f:ae:
43:8f:9a:dc:33:cb:4b:65:73:83:79:8a:8d:3f:75:
5d:c5:e1:10:b7:2d:cb:2e:1b:93:73:20:d3:1e:6e:
a0:2b:60:f4:40:94:59:0d:93:a6:43:47:35:c3:cf:
f9:c0:21:1f:11:cb:0c:61:ee:6f:41:83:81:f9:b4:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C2:05:C8:D2:E2:DF:32:10:4A:32:25:DC:CA:73:1B:80:4B:F6:7A
X509v3 Authority Key Identifier:
keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:70:60:7b:c0:c4:4a:78:08:1a:8a:ca:b3:01:85:21:df:37:
d4:c1:33:b6:06:c6:ac:d7:2b:33:f1:88:17:46:ed:bf:fc:50:
58:65:fc:38:80:99:1e:15:47:b4:10:e5:9f:c0:5f:71:c9:94:
ba:f0:7c:98:50:61:8b:9d:a1:52:4e:d2:1a:a5:d5:bc:67:08:
0a:27:b9:b9:3b:d0:2f:b0:4c:a5:dd:07:27:5d:c7:28:c3:f2:
25:fe:f2:54:81:95:0e:b2:37:6a:ba:68:de:1a:11:94:d5:3d:
d9:c2:b8:7b:66:70:82:b7:45:9d:a8:00:69:de:fa:8d:bf:d3:
cb:22:92:8b:9d:7a:af:db:75:ed:7f:c1:d9:ce:cd:1e:19:18:
43:33:80:cc:1e:28:c5:00:7f:8c:fc:fa:8c:3a:2f:a1:f3:86:
4f:17:e0:7e:3f:a0:7e:e0:21:9a:8e:7d:0f:dd:c9:06:99:64:
e0:47:a2:75:07:a5:77:5f:64:e1:41:5c:6b:85:40:80:a4:20:
7b:bd:72:a3:58:fc:63:95:26:ff:ef:1f:d0:1e:d2:ed:27:ca:
ea:9d:b0:a0:26:d9:5f:62:a0:5f:9f:df:f4:01:b5:a2:e4:2b:
77:4c:86:d3:8c:c7:78:cb:a2:b6:0f:6e:8a:c5:88:21:13:34:
c1:54:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:51 2026 by rpki-client