
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
File: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft (raw, json)
Hash identifier: T+KHX6lJhqAEHpuWSzqcas2ypvhAlxHz3WlLwaMK9Ko=
Subject key identifier: CC:ED:88:E0:0D:1D:2B:47:71:B0:7B:84:A3:5C:17:27:83:5A:4B:6B
Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Certificate serial: 3596
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
Manifest number: 358A
Signing time: Tue 06 Oct 2026 14:52:28 +0000
Manifest this update: Tue 06 Oct 2026 14:52:27 +0000
Manifest next update: Tue 13 Oct 2026 14:52:27 +0000
Files and hashes: 1: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl (hash: u5LgTvxbhhI28ZNw3yy2oja4tYYTv2P5q3agrlK6z+U=)
2: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (hash: 0JZgwsnKxNM1tg7k/QVipX++KehbbQu9rlMRlFRcKVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13718 (0x3596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0267, serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Validity
Not Before: Oct 6 14:52:27 2026 GMT
Not After : Oct 13 14:52:27 2026 GMT
Subject: CN=6ac50b2c-e8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:78:0e:bf:90:54:3b:9e:72:2c:a5:c3:fc:
a9:fc:30:82:fc:39:40:32:25:de:e1:fb:16:9a:81:
c9:f2:15:67:d8:16:0c:83:be:9a:84:b5:87:67:cb:
8a:af:fa:5c:ca:d2:54:0c:d4:db:f5:8a:1e:06:af:
56:ac:78:55:04:d3:eb:c5:de:92:3e:12:3a:2a:1f:
2e:3f:a5:7c:f4:d7:c9:c0:8c:4c:2a:27:ec:ab:76:
7a:96:a0:6b:53:5a:8f:33:a4:a7:e1:56:91:29:e0:
ae:8f:81:17:39:52:4d:8d:33:52:af:c5:97:1c:fc:
da:46:ef:85:1c:fe:9f:4b:0d:b2:d4:7a:4d:00:38:
7b:4e:a0:05:e5:81:7e:88:c9:42:05:e2:77:b9:45:
bc:b0:1a:10:05:59:fb:5a:1c:95:35:9a:17:75:df:
20:74:39:d7:42:f1:3a:9e:4e:0b:01:0e:a8:9e:70:
25:aa:d2:d0:fe:bb:ce:ab:76:da:96:7a:16:03:61:
8f:b3:58:bb:07:77:0f:22:47:32:78:da:e2:ec:f2:
8a:cf:8a:bb:aa:43:df:7d:f8:6f:44:c8:46:d4:bb:
8d:16:78:e6:df:30:79:26:5d:53:dc:fa:f2:0c:0f:
b5:59:54:86:e2:e9:31:b1:df:81:89:a9:df:cd:e8:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:88:E0:0D:1D:2B:47:71:B0:7B:84:A3:5C:17:27:83:5A:4B:6B
X509v3 Authority Key Identifier:
keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:44:b8:02:a8:cd:9d:09:f5:8a:88:b2:1e:94:c8:5a:f4:c5:
46:27:cc:b8:5d:e9:41:29:ea:d2:cc:00:6f:86:84:75:c2:19:
60:5a:0f:6e:70:53:2a:f7:82:4d:fe:f2:d7:2e:5e:31:64:e8:
ef:87:21:b0:94:16:14:51:da:08:bd:91:dc:9a:44:05:e1:5f:
33:25:c9:5f:28:66:6e:b0:42:93:6b:74:97:6d:71:cf:ca:98:
8a:24:ef:f5:fd:6d:45:3e:25:7c:1b:41:70:4c:37:32:0a:ee:
94:16:51:09:b1:a8:b6:aa:da:0d:ab:49:70:28:0a:d8:11:41:
ed:8e:3f:95:5c:16:3c:c3:a1:c3:e8:67:53:56:e4:02:7f:12:
1f:f7:98:63:0f:12:19:f1:54:bc:c5:53:8e:c4:46:7b:a2:36:
2b:67:ef:74:a0:85:c6:a8:37:90:2e:d2:74:a9:df:3a:a0:9f:
92:ac:18:39:cd:3f:62:fa:8b:de:be:b5:d8:0e:5c:12:fc:c5:
58:04:61:f7:66:62:48:d3:ae:80:a0:13:9d:9d:f8:17:2c:41:
98:22:92:29:b9:2e:67:f7:50:67:53:7b:eb:e3:1a:b2:9f:dc:
c4:c2:a0:d8:be:05:63:4f:2a:c7:97:b9:29:cd:6d:1a:03:94:
70:69:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:30:08 2026 by rpki-client