
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json)
Hash identifier: Sa+eJebUFwijpEEN5JVLcP6ePU9qOHZ4Q78IiMRjCUc=
Subject key identifier: AE:E0:0B:14:2D:94:BD:78:61:E1:C2:B5:4C:F4:61:78:01:6E:64:AC
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
Manifest number: EB
Signing time: Mon 01 Jun 2026 07:16:20 +0000
Manifest this update: Mon 01 Jun 2026 07:16:19 +0000
Manifest next update: Mon 08 Jun 2026 07:16:19 +0000
Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: SLZe8HOyyNYPyMK5fqa4ff/1eDmjvoMY69B8QsmVgk0=)
2: 16105334922D11F087917886C4F9AE02.roa (hash: rwcvJwRrSw9L7kAxnP7pO6DGMWmMpKwilOoZUFJ3P8g=)
3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: ioHaAryV52goIPTIw4MmhfdDQAaRIVCGfRVkC5i3KUo=)
4: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: xSiaH35CedPI/2lWdEwyR7ZfLRaL/x8nlbC3ig8ambs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Validity
Not Before: Jun 1 07:16:19 2026 GMT
Not After : Jun 8 07:16:19 2026 GMT
Subject: CN=6a1d31c3-c343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f7:68:a8:b0:85:1b:11:45:4b:f0:20:26:e9:
e7:bb:fc:a7:67:e9:86:60:f5:cf:de:7c:d3:06:1d:
2e:14:0b:ae:07:e1:f8:a7:7c:a6:81:85:83:46:bb:
6a:9a:c5:c7:c4:04:df:b6:53:55:d8:f1:e8:0b:e5:
66:59:dd:82:05:07:18:d0:1f:b7:04:07:e6:bf:3a:
32:a4:29:42:fd:6f:a3:1b:b4:c5:df:01:af:a2:8b:
f9:fa:16:f0:5c:9b:e8:51:76:db:de:1c:66:76:8e:
38:ce:68:f1:bd:9c:f1:f6:02:28:fc:6b:41:b5:d0:
cf:4d:0d:20:6e:5b:ca:b6:0f:48:b2:22:73:ae:ab:
26:e2:26:76:c7:cf:58:67:f5:19:fb:89:52:6d:fe:
0f:98:db:cd:b2:10:0a:42:46:ba:b6:cc:49:73:c5:
a7:96:bc:13:07:9a:da:77:d4:71:18:fb:bc:2d:2d:
bd:98:c2:b0:0b:2e:c3:12:3c:ce:dd:5b:71:7f:e6:
24:a3:ce:f0:81:6e:2c:a5:63:2f:7e:2f:37:1c:6b:
a9:2f:fb:ce:9a:21:73:02:3a:f9:a4:4d:c9:a0:28:
bb:03:ef:6e:1f:cb:80:55:79:04:8c:d1:fb:e3:c9:
32:75:1b:1a:7e:06:28:05:d9:3d:15:55:d3:81:36:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E0:0B:14:2D:94:BD:78:61:E1:C2:B5:4C:F4:61:78:01:6E:64:AC
X509v3 Authority Key Identifier:
keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:8b:78:8e:55:95:2d:e5:73:0c:cd:bf:07:6e:d2:96:f1:02:
f0:79:46:23:ee:80:e9:58:27:93:cd:6f:4f:1c:22:d7:f2:2f:
25:fe:3c:20:34:80:6f:5a:4d:9d:0d:95:e8:42:5c:76:1e:36:
b9:97:2e:00:57:67:79:01:ad:3a:4a:87:e2:77:a3:68:2d:d3:
cf:53:98:9d:c0:69:87:a5:65:9f:ae:79:c1:9c:0e:c6:1a:5d:
19:62:32:af:ae:01:7b:f1:87:04:d9:64:f7:a8:a8:ef:3f:de:
3d:46:75:e7:25:76:e3:d6:96:9f:43:9b:cf:ec:7f:b3:42:f7:
23:6d:0b:bb:84:aa:ce:a7:a8:95:cb:2e:05:be:17:ab:c9:75:
4f:dd:8a:ec:81:65:70:e5:92:7b:47:3a:bf:73:68:7e:ce:28:
ba:23:f5:8c:e7:08:40:71:2d:7d:57:51:a9:f4:d7:44:99:55:
ee:0b:62:fb:cd:95:ee:9b:fa:9a:de:77:9a:36:17:4c:c8:94:
5f:2a:e7:bf:05:8e:13:f6:9d:24:5f:96:b0:17:7a:88:e3:64:
7d:92:d2:ac:62:5a:a5:7d:e4:8b:65:90:93:2b:c1:cc:99:a2:
f5:7d:3f:31:76:82:c3:ca:5e:78:32:46:8e:f6:1c:71:37:3a:
46:d9:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:26 2026 by rpki-client