
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier: ZcPEZR3uoDOtN0f08Yo53WYvLD9fZ5oJyHvG2gYB9LM=
Subject key identifier: 81:E9:D4:72:B1:D3:4A:5F:F7:0D:E9:CB:FF:CC:CD:C3:D6:DA:F4:AF
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial: 0887
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number: 0863
Signing time: Sat 30 May 2026 20:41:46 +0000
Manifest this update: Sat 30 May 2026 20:41:46 +0000
Manifest next update: Sat 06 Jun 2026 20:41:46 +0000
Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: aUtEX1tVh7BfjZ6xhrc4ZKH8mk1DPJmBpQ0zDIWtsN4=)
2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: sQEpQuEbqYjD3RRWz6oiGW1QaCfG5tvcyqPy8Tyv+nc=)
3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: ev3sBPy0Q1f1TCa3FQ+DO7T8UGM3EjS+3+xQyEkvgdw=)
4: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: OLwfujR9YMam+qh0+yQaOy6ktbsF4AnntQeiqGc+bV0=)
5: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: U/Zn+Je0L7uZPSDNgEJoOIW1ujI2JNhGIHidbTwoXrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 20:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183 (0x887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Validity
Not Before: May 30 20:41:46 2026 GMT
Not After : Jun 6 20:41:46 2026 GMT
Subject: CN=6a1b4b8a-be08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:42:29:df:6a:fe:59:05:c5:6e:13:e1:d1:
16:82:95:cb:69:e1:e1:20:e8:99:6f:0d:87:f0:df:
58:8e:20:d0:2f:dd:17:4a:f0:66:27:8b:74:33:d2:
79:7b:40:20:09:17:74:49:3a:a2:3f:73:b2:8e:40:
c5:70:fc:9c:5f:14:3d:7d:ec:2b:aa:27:18:93:41:
8d:3d:08:3a:7c:9a:65:ba:74:12:86:d3:2d:19:bd:
b8:97:27:89:6a:66:a7:0f:f8:3c:28:7a:68:08:58:
d6:ff:cd:31:79:b9:a5:ec:c3:34:04:bb:9a:1a:cb:
b9:a8:ea:5b:fa:11:62:43:8d:b7:43:f0:7e:b6:4c:
2a:57:74:da:c3:79:58:af:ef:ba:21:e8:4d:0d:1b:
8d:12:58:dc:04:3c:6c:2f:3b:23:17:3e:98:4b:ff:
e3:10:f7:2f:99:84:df:c4:64:cf:23:74:bb:c8:dd:
bc:f1:7d:cb:35:29:8f:7e:6e:3c:2d:47:7d:b2:91:
d7:c8:14:68:06:8a:1b:6b:93:73:b1:85:a8:6d:4d:
61:62:59:85:75:53:8d:08:e9:8d:f4:8f:1f:1f:e6:
7b:90:84:9e:db:6b:8a:3b:dc:e1:2b:93:e2:9d:9a:
f4:a9:36:b8:6d:68:47:a2:66:1c:26:c5:1e:b9:e8:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E9:D4:72:B1:D3:4A:5F:F7:0D:E9:CB:FF:CC:CD:C3:D6:DA:F4:AF
X509v3 Authority Key Identifier:
keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a4:75:ba:f4:a6:53:07:05:94:c5:39:f1:48:92:81:80:78:
b8:5d:6b:e1:cf:9c:b3:59:33:2a:e1:d2:31:c9:cc:24:2b:f7:
91:79:96:b7:3b:d2:87:cb:9c:91:a5:59:9f:82:4f:a9:65:77:
23:3c:89:1a:4c:c8:e7:fb:df:94:f3:a6:9e:b2:89:ff:98:53:
4b:5f:34:74:90:d8:82:a1:d5:3f:e0:31:69:71:43:19:74:ff:
b2:d4:e7:88:4c:d8:63:ff:de:61:04:88:ef:ec:7a:c2:d1:e2:
0a:08:ad:71:68:69:38:28:f7:49:67:46:b4:d5:e0:fd:99:2f:
60:0c:f6:52:b5:95:59:5e:be:23:64:16:f8:2b:97:ef:50:43:
d5:8a:98:01:92:50:b4:d3:7e:59:7e:ef:43:ec:78:5d:9b:f7:
a8:bb:8d:68:48:c6:62:c5:94:81:83:1e:c3:ab:a7:cc:93:2e:
ef:fb:ab:a9:47:e6:48:43:6f:af:db:35:cc:6c:46:63:a2:bb:
8b:b3:64:ed:9f:3d:cd:d5:d0:52:cf:ac:60:06:2d:89:36:bc:
0b:3c:44:b2:87:d3:30:fd:30:da:8a:f1:8d:66:d4:a0:cf:d7:
2a:cc:16:51:ae:11:3a:0d:25:b5:71:54:22:b3:c9:3f:1e:91:
7b:2a:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 14:21:50 2026 by rpki-client