
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json)
Hash identifier: bMpqTAdm66MBTSECd2MDECLBlithwab7YV12L7mSuyM=
Subject key identifier: 62:B6:F9:52:6D:3C:67:88:30:0A:09:0C:EA:C0:1F:10:C7:DF:A7:E4
Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Certificate serial: 0CF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
Manifest number: 0CED
Signing time: Tue 14 Jul 2026 18:30:41 +0000
Manifest this update: Tue 14 Jul 2026 18:30:41 +0000
Manifest next update: Tue 21 Jul 2026 18:30:41 +0000
Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: +QNR21U+gmvOW5rLWdfnBMsXilrlRR0YchrUdSr8Uvc=)
2: 1315AE3C38C611F1B2610B139C833773.roa (hash: BY9HT2k5F73R8AwyoTindw46peifhV5zJVGNG0+m5PU=)
3: FD5EB4204DA711F1ACB8DF32A6833773.roa (hash: GHtMetWx7wnYIWlxkSxWAYA+hPFdlvAtLs/Y4SiXxqo=)
4: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: W7MZ66614Bjz+q19F1iQRur60uJ3iXxnIUipfMhpqPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl
rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 18:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3319 (0xcf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Validity
Not Before: Jul 14 18:30:41 2026 GMT
Not After : Jul 21 18:30:41 2026 GMT
Subject: CN=6a568051-e908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:77:2f:db:df:84:61:bc:72:25:cd:59:f1:
42:33:8d:9b:35:38:58:31:7f:7b:0d:4a:23:46:c6:
f6:86:7e:40:e6:aa:b4:35:74:cd:5f:97:5f:40:09:
83:92:61:49:b6:d7:50:ec:ab:86:34:49:e0:a5:1f:
f1:a4:62:28:45:d8:e2:fa:47:5f:ce:d0:67:22:54:
9a:03:1e:33:35:ed:c2:29:b9:41:2f:c1:5d:fd:b9:
2e:15:51:56:fd:da:5d:bb:99:f9:16:5a:69:d5:71:
44:8e:d9:90:fe:4c:66:43:69:43:f1:c4:44:16:70:
14:47:19:c1:bc:29:78:96:9d:48:e3:57:e2:3c:aa:
aa:87:38:0b:01:9b:a2:e8:72:b8:6c:42:17:38:f6:
39:69:43:87:a1:5e:a0:18:a1:5d:6d:27:6d:ac:bc:
8c:32:44:8b:8b:e5:7e:71:e7:6e:3c:9d:19:35:e8:
6f:ec:68:42:5a:4e:8f:a3:e6:e0:42:6b:45:41:11:
b8:db:10:d5:a5:17:7d:2a:a3:84:d1:18:c6:82:61:
b0:18:4d:5a:e4:54:25:6f:5e:c5:d2:c3:54:08:e5:
a2:08:7e:a6:9a:1a:d6:49:d0:ca:20:c5:10:fd:48:
e6:8b:ab:09:d0:32:8f:c3:de:d6:94:0c:a3:94:a6:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B6:F9:52:6D:3C:67:88:30:0A:09:0C:EA:C0:1F:10:C7:DF:A7:E4
X509v3 Authority Key Identifier:
keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7b:d9:ed:a1:7c:b4:80:22:1d:51:c6:60:2e:a5:3f:2a:a6:
15:dc:78:49:e0:90:c4:e0:44:7f:1d:a0:43:51:d9:6c:51:e3:
2a:54:0c:f7:ab:48:2a:73:91:7c:fc:a7:64:33:51:dd:47:81:
1d:6a:1e:f1:db:14:ca:88:4f:6d:52:61:a5:29:0c:e0:af:68:
a3:5f:84:fb:6d:e0:c8:6c:74:c5:11:bf:53:aa:92:58:b8:e7:
98:27:3d:5d:00:8e:0c:3a:ca:7a:7b:27:22:08:31:f3:34:cc:
d1:0f:36:d1:ae:0c:54:bc:a4:d4:36:5f:4c:6f:54:4c:dd:9e:
83:9a:6b:7b:a1:a8:33:fb:e2:56:80:41:4f:a6:f3:fa:22:97:
f7:86:bb:ee:fe:9e:85:07:a8:97:e5:13:42:ed:18:dc:a8:03:
97:85:df:06:dd:98:d7:7d:35:34:2d:e3:bb:8d:2b:40:42:1b:
23:f6:70:47:de:d8:43:39:41:c2:23:69:10:0e:0a:57:e7:cd:
35:d9:9f:49:98:71:72:7a:4a:85:c8:8c:db:60:6d:3f:fc:41:
59:02:92:30:f6:38:dd:f4:ba:6a:5d:8b:87:c1:70:a8:2b:d3:
51:1a:aa:34:bb:9c:ba:e0:2d:70:a2:f6:93:44:2b:b5:46:65:
f8:0c:c0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 00:14:48 2026 by rpki-client